This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
File:                     Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json)
Hash identifier:          tfxa2wszmj4A9eOaqM5w78KE5eHwx5QXFoNMMYETyMU=
Subject key identifier:   AF:7F:E7:7C:A8:19:B8:05:63:6C:13:3A:26:54:53:CB:DF:29:46:A5
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Certificate issuer:       /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial:       019C42B44DDD49B1BFA61D2911D340D11DCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
Manifest number:          1352
Signing time:             Mon 09 Feb 2026 14:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:38 +0000
Files and hashes:         1: 8YHYJKejClzJHQyWmQyoXfMGo7c.roa (hash: hjyF8It1A4EPMePr0TlEaEGlDpxI1/XUazn11vRCxOU=)
                          2: CXrIvb9m88q-TS49THuUPClhYR0.roa (hash: xgXK7vEW2/Cmim2d4EiMIKxK9YtLKnHTxncTpuXS9bs=)
                          3: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: dQwkq6gt7mkAuYje8FWD9Cjl4D+sf5Gt0zDgS5d90O0=)
                          4: cNi5P1_5kCyHjCiA1lBWda5OskI.roa (hash: QA5Z792FeAnPiQuQUOUfyrpO04ALKUWWRVfrxiWDTzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:4d:dd:49:b1:bf:a6:1d:29:11:d3:40:d1:1d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
        Validity
            Not Before: Feb  9 14:00:38 2026 GMT
            Not After : Feb 10 14:00:38 2026 GMT
        Subject: CN=af7fe77ca819b805636c133a265453cbdf2946a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:9f:3e:2f:d0:b7:4f:42:1b:24:f7:76:df:
                    ea:da:6d:32:e7:91:df:37:a6:ef:a6:56:13:44:a8:
                    b6:f1:7f:b0:a6:1f:9b:28:a6:6f:94:a7:64:78:69:
                    90:33:c2:19:61:a6:47:2b:90:18:b0:7f:5b:d9:b3:
                    f2:5c:0e:cd:08:06:56:58:0c:8b:2d:a2:25:39:42:
                    e0:e9:87:b9:bf:b4:f7:b1:63:5f:e0:20:fb:31:93:
                    38:18:02:3d:03:93:50:cb:e5:67:37:17:51:77:f9:
                    49:a5:04:4d:7b:67:96:09:95:59:46:0e:51:c3:76:
                    24:af:dd:dd:30:59:1d:c9:91:6e:94:2b:6c:5d:b5:
                    62:33:03:6b:2d:d3:69:3c:d3:64:dd:5c:12:5b:a2:
                    0c:a3:ef:e3:63:e7:67:64:c5:9e:ca:35:7f:3c:f0:
                    e8:ae:c2:6a:50:4b:9c:b7:1d:e1:9e:5c:dd:68:c7:
                    17:05:db:f6:c5:aa:06:74:15:90:d4:7e:41:3e:0f:
                    03:75:93:7a:61:60:88:a1:2c:44:f5:0e:c1:d7:9b:
                    03:d2:27:ce:1d:cc:a2:10:25:a9:b0:95:6c:f4:83:
                    d6:fc:2f:83:c3:73:92:d8:6c:0f:79:01:db:77:93:
                    de:74:2a:f3:72:11:55:d7:b6:28:98:6c:cb:4b:83:
                    ac:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7F:E7:7C:A8:19:B8:05:63:6C:13:3A:26:54:53:CB:DF:29:46:A5
            X509v3 Authority Key Identifier:
                keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ec:79:b4:14:30:3c:92:ec:dd:ad:13:3d:81:63:62:5b:fe:
         c7:e0:9d:22:31:e0:e2:ab:5f:02:19:11:b0:c1:7f:48:5a:34:
         30:5f:be:e9:d5:31:a8:a8:f2:8d:90:5c:d8:9b:24:2a:8c:42:
         54:fc:e2:1a:fa:fc:a3:63:1b:2e:c9:71:6d:ef:4a:c8:7d:c4:
         b4:2a:ec:39:e1:e6:73:96:d2:a7:48:06:ca:eb:50:13:05:db:
         18:4e:13:66:11:99:4a:a2:a5:82:2d:a3:ac:41:5f:dc:d7:50:
         a9:1f:78:df:8f:e3:9c:f4:53:77:27:2e:80:d3:8f:9f:a8:13:
         b4:a5:6b:da:77:cc:64:d4:df:6e:69:b1:36:19:cf:37:2a:6b:
         b5:66:05:f1:db:5d:f1:0f:b5:09:ad:f0:e2:e7:fa:8e:87:88:
         ff:46:a4:35:0a:3d:03:7f:d4:4f:ca:a7:63:15:8b:3c:0d:18:
         c2:90:4d:04:67:bf:9f:fb:6d:1e:84:6a:f8:6b:58:9f:17:7c:
         63:60:9c:62:e9:d4:80:fe:9f:f6:9d:c5:ac:4f:14:37:be:55:
         aa:c7:7f:17:f8:2f:ce:28:8b:df:5c:91:9c:fe:66:cc:30:cf:
         41:9c:aa:92:1d:7d:a0:cc:5d:e7:4f:14:71:8b:f4:4d:9a:2b:
         d7:4c:3c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:38 2026 by rpki-client