This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
File:                     7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft (raw, json)
Hash identifier:          8oxmK9YbIsoVo55vmQ3EWeE5uzOGTsH9jeG49NmELAk=
Subject key identifier:   CD:87:BF:2D:43:D6:0A:B6:A0:1E:CE:C1:49:0D:E1:05:3A:37:82:DB
Authority key identifier: EE:F8:E9:80:CE:1E:EB:32:74:8D:94:B1:D0:CD:42:48:9F:91:F6:E9
Certificate issuer:       /CN=eef8e980ce1eeb32748d94b1d0cd42489f91f6e9
Certificate serial:       019BFC1CBDA31E18B6221A631C286648989C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
Manifest number:          10E8
Signing time:             Mon 26 Jan 2026 21:01:40 +0000
Manifest this update:     Mon 26 Jan 2026 21:01:40 +0000
Manifest next update:     Tue 27 Jan 2026 21:01:40 +0000
Files and hashes:         1: 7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl (hash: EKrd1Dp7LpqpyKugNJ2heTpN1TfuQaPK9M36B8mMSd0=)
                          2: t6qrZMnMT533RSAzZ-Cs1wkfZKU.roa (hash: za2khRaYkPT+2IlbEqg/xal2w9rhxHbcNNQ5m8PfzoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:1c:bd:a3:1e:18:b6:22:1a:63:1c:28:66:48:98:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eef8e980ce1eeb32748d94b1d0cd42489f91f6e9
        Validity
            Not Before: Jan 26 21:01:40 2026 GMT
            Not After : Jan 27 21:01:40 2026 GMT
        Subject: CN=cd87bf2d43d60ab6a01ecec1490de1053a3782db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:01:57:d6:b7:5c:69:4c:c2:b8:0f:15:27:
                    ca:06:34:a4:85:af:ca:3d:22:68:36:3f:c9:f8:ab:
                    5e:79:de:5d:d6:f1:2e:44:74:5d:10:ca:82:d2:60:
                    89:be:2e:7e:43:6d:8e:0e:08:4b:eb:55:67:ad:ba:
                    24:57:f0:f0:d0:db:62:fd:df:b1:09:ed:93:dc:53:
                    b0:a1:86:84:84:d4:d9:97:b5:cd:1b:56:76:92:eb:
                    07:6f:86:8b:dc:62:d7:18:56:59:eb:db:8a:b7:c8:
                    c2:f7:53:e0:1e:35:57:51:b7:c8:81:16:e6:75:c3:
                    eb:7c:0e:2b:a0:8a:3d:0c:67:cb:d2:fb:cb:7b:64:
                    9f:71:7e:ec:e3:9d:c8:3c:fe:a4:f3:76:62:50:2f:
                    e3:9d:1d:29:18:71:9f:34:79:8f:b4:46:7e:87:c2:
                    1b:e0:c5:00:6b:2d:69:cf:2e:a8:31:77:bd:e9:d0:
                    b8:d6:22:e0:6c:67:e3:a1:c6:71:22:0f:d4:2c:4b:
                    61:86:d4:b4:6b:46:4b:f9:ee:b9:06:9c:17:5d:9b:
                    f7:e6:ef:fe:7f:39:5d:25:9d:0e:01:a7:ca:10:f2:
                    08:56:af:5e:4a:04:6e:93:2c:d4:be:8b:53:a5:da:
                    19:4a:07:92:b5:ef:b8:54:fc:9c:64:21:0b:8c:28:
                    a6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:87:BF:2D:43:D6:0A:B6:A0:1E:CE:C1:49:0D:E1:05:3A:37:82:DB
            X509v3 Authority Key Identifier:
                keyid:EE:F8:E9:80:CE:1E:EB:32:74:8D:94:B1:D0:CD:42:48:9F:91:F6:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6b:0a:d3:4d:a9:be:cd:e3:f9:3e:46:9b:17:2e:1b:8c:83:
         12:ed:cf:8e:82:e3:ca:48:8a:67:0b:cf:59:56:ca:63:9a:78:
         28:af:86:0d:3a:dd:23:88:07:30:bd:e2:1a:69:47:89:30:d0:
         93:0d:33:6b:69:f3:ee:8c:e4:80:e2:5b:97:a0:f4:89:49:f9:
         ef:d1:17:f8:50:f0:4a:17:6f:33:5b:8d:bf:7d:da:12:64:db:
         84:ec:5b:f0:c6:e8:81:2d:f9:a8:5c:14:35:6d:81:b7:81:07:
         2b:9a:21:9e:3e:e4:86:22:63:c1:c3:b2:14:06:fb:2b:15:f1:
         3c:62:41:e9:d6:d9:06:6b:30:07:df:11:50:be:96:7f:8e:0c:
         32:c7:b6:01:ea:5f:28:79:0e:34:b7:47:c3:6a:ac:05:50:26:
         ef:d3:fb:02:42:18:8d:45:ca:95:ac:24:5d:16:2a:7a:d9:9a:
         eb:cb:b5:57:0b:cd:88:b7:9d:dc:f6:43:b2:e3:7a:6b:84:e3:
         ea:3f:1e:7a:b5:b4:d9:f0:7b:30:2f:81:47:97:9e:d9:43:80:
         2a:7c:5f:2a:88:7d:6b:84:bb:2d:6c:7f:af:d8:dd:62:29:96:
         e8:a1:2d:56:dd:d1:bc:73:33:9e:de:4b:82:b0:6f:9c:c3:af:
         8a:1a:61:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 00:29:40 2026 by rpki-client