This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File:                     M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier:          EYoarC1Q6ETqcwsyXCsVfGp+Fi0BAp8Or0Alum7efOk=
Subject key identifier:   BE:EE:88:7E:8B:6A:D5:05:E4:74:3A:FC:F8:EC:74:90:97:0C:E9:0B
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer:       /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial:       019C43C6F17DED59F04C220DCE82F7AD0DD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number:          1555
Signing time:             Mon 09 Feb 2026 19:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:37 +0000
Files and hashes:         1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: Obb/MK+R28SPJ7qD/FV9SQOby81VKkDWJF4SjUKbMB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:f1:7d:ed:59:f0:4c:22:0d:ce:82:f7:ad:0d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
        Validity
            Not Before: Feb  9 19:00:37 2026 GMT
            Not After : Feb 10 19:00:37 2026 GMT
        Subject: CN=beee887e8b6ad505e4743afcf8ec7490970ce90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:a2:2c:a6:bf:10:e1:19:e9:6e:4f:f8:03:
                    6d:8b:47:f8:a5:0c:4c:0b:c7:5a:8f:8c:d0:f0:a1:
                    8b:17:65:96:98:0a:e1:c4:aa:23:85:d9:06:bb:87:
                    76:c4:bb:d8:59:0b:d1:8b:6a:08:93:c2:db:1c:70:
                    5d:83:3d:a8:5e:3c:78:1b:12:c6:2f:3b:7a:1f:20:
                    10:44:33:90:0a:2d:1b:f9:67:6e:5a:b9:62:07:ad:
                    74:26:0f:d3:cf:48:3e:35:b6:a2:db:df:2a:29:1b:
                    73:8f:1d:f1:f8:ae:6d:9e:10:67:9d:2c:85:0c:d7:
                    34:09:ed:e8:cb:49:0a:ab:e7:a5:f7:c4:3e:1f:e8:
                    ca:fe:4e:73:b6:6b:41:49:f1:ee:c9:45:9d:50:13:
                    ad:d3:d0:eb:30:07:76:37:99:65:4c:c8:a1:24:05:
                    3b:b4:b6:ce:57:05:1f:d6:25:4c:54:1a:1b:e2:9b:
                    96:29:1a:d4:5e:0e:a9:be:31:08:f9:e0:88:61:30:
                    b8:2f:6e:c7:df:94:d1:fc:c9:01:e1:ee:72:b7:76:
                    15:6b:73:05:82:f0:01:52:51:ad:aa:4e:85:c0:c7:
                    a7:e4:c5:91:5a:b0:c9:8d:b6:b4:b3:37:db:b1:51:
                    ac:5c:2e:c0:a8:aa:c6:40:5c:82:71:33:28:ad:b9:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EE:88:7E:8B:6A:D5:05:E4:74:3A:FC:F8:EC:74:90:97:0C:E9:0B
            X509v3 Authority Key Identifier:
                keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:82:12:db:90:7e:24:21:a2:e1:5f:5c:6b:3a:27:e1:9a:a7:
         e0:7e:55:51:31:14:78:b8:de:b9:45:89:0e:18:5d:cf:d6:fb:
         50:11:fc:c8:51:2c:b6:49:cb:8e:87:0a:62:19:e2:44:2b:64:
         b8:ad:1a:1a:46:8c:78:eb:58:6d:88:5a:43:88:4d:15:11:c3:
         91:e0:60:db:f9:fe:a9:75:06:82:37:27:01:26:83:e6:33:a6:
         98:ea:b7:97:68:ef:ca:d0:53:88:54:a6:26:3c:e3:d3:48:44:
         d3:68:c7:8b:75:38:29:89:12:4d:47:a4:6f:30:3f:84:65:35:
         a3:aa:90:0a:fd:ca:5f:b3:71:5a:de:bc:d7:6d:c6:28:b8:1f:
         12:0d:4e:3b:89:51:26:1a:44:10:26:b0:f2:44:db:c4:46:00:
         b5:97:79:c3:72:11:04:72:7f:15:3e:5e:61:c2:ae:69:54:d0:
         b4:96:7b:ed:5e:6d:c6:e6:c2:f8:f0:2c:41:2d:a6:51:8e:cf:
         4c:8f:4c:6d:f7:66:93:5f:bf:f0:27:7e:d5:e4:e4:f2:e0:78:
         83:f6:f0:2e:3c:dd:82:20:8a:4c:d0:14:32:f9:d7:d5:02:7b:
         17:7f:ae:f1:11:15:a7:61:3b:1d:91:15:90:a4:82:64:f4:e5:
         18:3d:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:30 2026 by rpki-client