This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
File:                     7gc50FKNy0_OV40R9-w0sON0Us8.mft (raw, json)
Hash identifier:          WguJbcoFfsgpHmC7znXiM2fYxtnn19RLxkcFd3SlgR4=
Subject key identifier:   BB:01:05:74:C9:16:ED:42:B1:A0:89:C9:EA:7C:1C:DF:FE:F1:09:A9
Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
Certificate issuer:       /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Certificate serial:       019C427D80EBADB2E51E8D4902536DB0D78A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
Manifest number:          145E
Signing time:             Mon 09 Feb 2026 13:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:47 +0000
Files and hashes:         1: 7gc50FKNy0_OV40R9-w0sON0Us8.crl (hash: Lu19O2yXb4iOorymL3c9IsT33u44jZ2LBIeJZz1h9fw=)
                          2: JcR3YDi06JT6Wl_eQYsoL_-4XeY.roa (hash: jOukTvc7ghec56xAJX59+DDpg3Q2klioM1BU5lwJY5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:80:eb:ad:b2:e5:1e:8d:49:02:53:6d:b0:d7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
        Validity
            Not Before: Feb  9 13:00:47 2026 GMT
            Not After : Feb 10 13:00:47 2026 GMT
        Subject: CN=bb010574c916ed42b1a089c9ea7c1cdffef109a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:47:aa:be:0b:f0:57:ba:dd:4b:01:40:d7:0b:
                    e2:0f:f4:34:f0:2d:0b:19:e9:34:8f:f0:cc:ff:a9:
                    6a:a2:f4:fb:7f:0d:6e:01:1a:1c:6c:a1:d6:94:a8:
                    e0:f3:8f:c5:e0:fd:5d:a0:e6:68:0f:17:f6:34:d7:
                    69:b0:70:fb:6b:35:2c:7a:d4:37:2c:a9:92:23:ad:
                    af:f7:89:23:b1:a3:d0:45:52:b9:a4:d6:ec:89:cf:
                    83:02:1b:5f:95:30:d0:b8:aa:bc:d1:d5:4e:91:20:
                    3b:61:14:27:33:63:82:08:11:df:31:30:69:03:6f:
                    3d:35:1b:18:54:2a:4d:ba:7d:f8:ed:41:ec:04:7f:
                    49:06:71:79:03:b1:91:6b:1b:0e:51:37:a9:f6:dd:
                    ca:83:cb:6d:b3:24:21:fc:2f:d6:46:10:ba:fb:02:
                    f9:be:2c:0f:b9:f3:aa:a2:19:b7:c7:3e:06:11:b6:
                    88:56:4e:1a:2f:f0:bd:b6:8e:ba:ec:16:c9:e6:98:
                    eb:be:e0:03:03:d7:5a:2a:a4:e6:59:db:98:5e:83:
                    51:f9:ec:c9:cb:de:c1:3a:e9:26:38:5a:7a:54:a9:
                    16:6a:98:2d:03:f1:09:6f:6b:ba:c1:f4:e2:7c:00:
                    55:62:c6:bc:d5:0e:e5:3a:03:77:ed:92:21:6c:4f:
                    a6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:01:05:74:C9:16:ED:42:B1:A0:89:C9:EA:7C:1C:DF:FE:F1:09:A9
            X509v3 Authority Key Identifier:
                keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:ef:87:8e:42:75:61:1c:27:4d:19:3b:58:f8:38:30:01:43:
         01:08:a3:9a:18:0a:1a:a9:50:6c:07:ec:f8:43:f6:e2:15:5c:
         e9:c8:65:f3:92:96:07:fc:f8:c6:96:d7:f6:ea:c4:db:c5:5f:
         36:e7:63:f6:9a:30:c6:a1:87:ba:33:67:6c:f5:65:b7:7e:fa:
         5c:3f:db:3c:0b:2f:b4:26:1b:30:cc:8b:58:09:11:88:4d:68:
         80:f4:63:f0:89:8d:68:3b:9e:10:37:42:f4:ce:42:4a:99:7f:
         2f:e7:51:18:f6:81:67:61:8e:6f:b0:4e:c1:a8:c0:39:1f:6c:
         5d:82:0a:07:d6:c8:3c:b1:c3:52:32:47:ea:63:fb:4b:c3:a3:
         2d:16:c3:56:a7:07:9a:23:6f:29:df:f6:f8:9b:28:c8:d5:63:
         fe:b3:36:0f:5a:7b:19:57:70:e1:7a:ba:1f:52:3f:92:ef:b4:
         b1:20:55:94:b5:eb:02:92:74:da:c9:a7:26:2d:8c:62:9b:1f:
         ed:0b:ee:fd:19:fc:71:0f:98:f9:01:c6:a8:69:63:e6:02:24:
         85:1e:1e:bc:a6:ef:ee:44:c6:62:7a:66:ff:56:13:05:e0:ba:
         34:8c:b4:45:96:0c:44:53:c6:86:73:cd:89:99:6a:0a:dd:30:
         57:58:26:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfYDrrbLlHo1JAlNtsNeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDczOWQwNTI4ZGNiNGZjZTU3OGQxMWY3ZWMzNGIwZTM3
NDUyY2YwHhcNMjYwMjA5MTMwMDQ3WhcNMjYwMjEwMTMwMDQ3WjAzMTEwLwYDVQQD
EyhiYjAxMDU3NGM5MTZlZDQyYjFhMDg5YzllYTdjMWNkZmZlZjEwOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0eqvgvwV7rdSwFA1wviD/Q08C0L
Gek0j/DM/6lqovT7fw1uARocbKHWlKjg84/F4P1doOZoDxf2NNdpsHD7azUsetQ3
LKmSI62v94kjsaPQRVK5pNbsic+DAhtflTDQuKq80dVOkSA7YRQnM2OCCBHfMTBp
A289NRsYVCpNun347UHsBH9JBnF5A7GRaxsOUTep9t3Kg8ttsyQh/C/WRhC6+wL5
viwPufOqohm3xz4GEbaIVk4aL/C9to667BbJ5pjrvuADA9daKqTmWduYXoNR+ezJ
y97BOukmOFp6VKkWapgtA/EJb2u6wfTifABVYsa81Q7lOgN37ZIhbE+mhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsBBXTJFu1CsaCJyep8HN/+8QmpMB8GA1UdIwQY
MBaAFO4HOdBSjctPzleNEffsNLDjdFLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84NTNlZTMtM2E0Zi00ZDk1LTliZGIt
YjAzYzJmYmRjNjQ0LzEvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84NTNlZTMtM2E0Zi00ZDk1LTliZGItYjAzYzJmYmRjNjQ0
LzEvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv++HjkJ1
YRwnTRk7WPg4MAFDAQijmhgKGqlQbAfs+EP24hVc6chl85KWB/z4xpbX9urE28Vf
Nudj9powxqGHujNnbPVlt376XD/bPAsvtCYbMMyLWAkRiE1ogPRj8ImNaDueEDdC
9M5CSpl/L+dRGPaBZ2GOb7BOwajAOR9sXYIKB9bIPLHDUjJH6mP7S8OjLRbDVqcH
miNvKd/2+JsoyNVj/rM2D1p7GVdw4Xq6H1I/ku+0sSBVlLXrApJ02smnJi2MYpsf
7Qvu/Rn8cQ+Y+QHGqGlj5gIkhR4evKbv7kTGYnpm/1YTBeC6NIy0RZYMRFPGhnPN
iZlqCt0wV1gmFQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:54 2026 by rpki-client