This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File:                     7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier:          2Xr0VKtMZNT7tbA/hTnpj14nvHZhoPeM4q2Ydc8Prl0=
Subject key identifier:   AC:41:95:86:3E:8D:4A:46:80:5B:82:9A:60:8F:6D:FB:68:94:75:E2
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer:       /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial:       019C427CFF24201F3BC1F4C82B1F10E6A1E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number:          14B7
Signing time:             Mon 09 Feb 2026 13:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:13 +0000
Files and hashes:         1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: UMJlDcuJBnXNQroD5gosetheVJO82PJLHaxBw3DsEiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7c:ff:24:20:1f:3b:c1:f4:c8:2b:1f:10:e6:a1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
        Validity
            Not Before: Feb  9 13:00:13 2026 GMT
            Not After : Feb 10 13:00:13 2026 GMT
        Subject: CN=ac4195863e8d4a46805b829a608f6dfb689475e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:c9:1e:25:6c:0a:99:5f:a0:18:63:32:d7:
                    14:e7:71:b6:de:e9:46:e9:b4:95:2f:9a:c2:1c:17:
                    6f:91:19:e8:f5:8f:2d:c5:bd:62:54:0a:91:c8:01:
                    41:a0:b3:2e:3b:a9:8a:05:e5:7a:c4:d7:25:da:c2:
                    7e:ca:7b:3e:e5:d7:75:2c:b9:4e:55:6b:56:31:0d:
                    28:17:b6:29:fc:9c:64:5b:f5:7d:19:b5:43:df:bd:
                    93:e6:51:28:cf:51:66:9c:a8:98:20:6a:6a:f4:c3:
                    ec:3f:e5:7f:41:7c:a2:ee:36:be:76:9e:ba:f3:62:
                    45:5d:25:08:a7:65:f9:7f:3b:88:4e:cc:79:09:35:
                    6f:01:a2:d3:84:f9:97:e7:73:ef:85:c0:30:ca:10:
                    81:8b:92:58:84:80:b1:17:49:67:95:88:eb:95:0f:
                    c4:fa:bd:46:e1:c1:1d:e2:6d:36:a3:7f:db:8f:39:
                    64:80:25:58:40:e8:a4:48:a7:75:fd:21:be:6e:71:
                    2b:87:9c:87:b8:a6:83:44:40:11:eb:0e:f1:c7:91:
                    2d:f9:83:94:e2:b6:4f:f3:3c:85:bd:77:78:48:68:
                    f3:1d:fe:04:65:fe:14:94:6b:64:18:34:79:57:66:
                    88:39:1b:d5:37:ea:fc:3d:fd:5e:00:8d:a2:af:b5:
                    9f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:41:95:86:3E:8D:4A:46:80:5B:82:9A:60:8F:6D:FB:68:94:75:E2
            X509v3 Authority Key Identifier:
                keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:90:5a:3b:20:97:2e:7c:17:dc:dc:34:10:51:aa:af:18:f6:
         74:33:6a:58:2a:bc:ba:f2:79:26:8e:87:67:00:bb:b9:86:d0:
         33:95:33:1b:0e:ff:f6:0c:78:c4:cf:88:ee:13:06:07:ea:05:
         a7:c1:9f:2d:21:33:84:68:d7:3d:f4:76:f5:c1:65:df:e1:b4:
         55:68:9e:da:50:55:56:8b:b7:f6:72:36:6b:9f:6c:da:f9:94:
         81:98:0b:f1:31:44:6d:e6:b8:c0:7b:d8:ed:96:30:d6:11:9c:
         b8:fc:e7:0b:c9:41:5e:e7:80:6b:41:5f:a0:9f:18:fc:a2:e3:
         30:3e:89:fa:b9:2f:a6:6f:45:1a:55:c5:32:91:aa:15:4e:47:
         5a:25:26:bb:88:43:f0:67:08:81:d3:82:55:35:aa:c9:37:5d:
         65:1e:22:de:5f:22:cc:ae:7e:44:30:dd:e7:5f:a7:83:1e:69:
         12:92:63:2e:e1:8d:64:af:d2:5c:49:63:a4:8a:cd:39:67:8b:
         af:ab:8b:96:0b:83:bc:3c:24:55:a4:3a:24:f3:2f:7b:5e:40:
         57:62:a3:06:12:0f:77:5c:17:04:e9:83:cc:c8:34:45:ae:ef:
         a6:6a:20:3c:fb:5b:5f:18:7c:84:a7:a6:ef:cd:be:f0:20:af:
         e5:87:3f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:25 2026 by rpki-client