This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
File:                     E07-fFQfVAbcfg_yaNBVgrrvyZY.mft (raw, json)
Hash identifier:          Z+u7A331qVoLXhhsZQqscJGu/yGztO74Svn+6qJP90k=
Subject key identifier:   9B:C4:ED:71:CB:49:21:6B:0E:E0:41:5A:1D:13:81:34:AA:10:43:CA
Authority key identifier: 13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
Certificate issuer:       /CN=134efe7c541f5406dc7e0ff268d05582baefc996
Certificate serial:       019C1BA6ED2CE34CF541247D3C2A27B2220E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
Manifest number:          1063
Signing time:             Mon 02 Feb 2026 00:00:50 +0000
Manifest this update:     Mon 02 Feb 2026 00:00:50 +0000
Manifest next update:     Tue 03 Feb 2026 00:00:50 +0000
Files and hashes:         1: DaKsgydCqfoR3UTYBt_-ur18SlA.roa (hash: Ysj7NmHSINROv98PY+Va8qHr9IIqkkjd7BHamq6fK5M=)
                          2: E07-fFQfVAbcfg_yaNBVgrrvyZY.crl (hash: 8f07vz+ZHSx4rXTX/IoaZ7gZqBotui7xrr3LoX5nwqE=)
                          3: Je3-dQyZGrjEpidj8pgBzIq8514.asa (hash: Phq+3kUlN1dLNHjVvwmOmZqN/Lk0LOlZzti0ZU6t6DQ=)
                          4: hCIg72oCuzdjpvUErNyNeKZxxVM.roa (hash: LQOyDSnPMpgTtFEBEEGnWKFQ7ulRpBrIbaqJ9siiUKU=)
                          5: vQjo3Wxio6bNf-SY7ilrOLyS98k.roa (hash: s9F1BCbxLOthkzlppFYdSop1NXmGZVrmNaL2rSir5MU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:a6:ed:2c:e3:4c:f5:41:24:7d:3c:2a:27:b2:22:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134efe7c541f5406dc7e0ff268d05582baefc996
        Validity
            Not Before: Feb  2 00:00:50 2026 GMT
            Not After : Feb  3 00:00:50 2026 GMT
        Subject: CN=9bc4ed71cb49216b0ee0415a1d138134aa1043ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:07:74:fc:be:eb:f0:6b:4d:11:f9:81:5e:
                    25:68:b7:15:88:91:8c:6d:f6:86:51:88:3b:a7:89:
                    18:28:36:6b:29:65:25:91:d7:82:9c:1a:7d:ca:92:
                    72:bc:39:f8:40:0a:4b:f7:25:1d:11:66:33:d1:1e:
                    c4:32:76:e3:50:50:56:4f:ac:e8:ca:bb:29:75:10:
                    c3:a2:e6:f8:ce:93:c3:41:a1:26:71:7f:96:ee:b1:
                    95:87:bb:3f:87:31:06:f8:06:ee:9e:95:e0:a1:37:
                    aa:4e:44:49:1a:eb:21:d6:eb:47:74:90:7e:f2:ea:
                    1d:fc:bf:35:f6:e6:c4:d8:c5:54:16:66:8d:3c:59:
                    e4:90:08:3b:04:a7:21:82:1b:12:f1:dc:1b:d1:0e:
                    0c:cd:c7:b4:60:70:e5:17:19:22:85:61:83:70:71:
                    10:cd:4b:10:99:d2:05:ae:fe:a7:e7:05:88:a3:ab:
                    9a:85:e1:f1:f2:b1:03:92:27:b2:5c:63:63:0e:6a:
                    16:84:2f:01:fb:03:fd:41:43:76:78:8b:b3:43:67:
                    77:1a:5a:d9:8b:f7:3e:d9:a3:86:0a:7b:71:49:00:
                    df:74:bb:70:e5:f0:fe:59:64:dc:84:c2:95:c5:e0:
                    db:72:d5:8e:a4:c4:66:f9:50:eb:52:5c:1c:65:40:
                    bb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C4:ED:71:CB:49:21:6B:0E:E0:41:5A:1D:13:81:34:AA:10:43:CA
            X509v3 Authority Key Identifier:
                keyid:13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:9b:f3:66:00:5d:49:79:1b:61:e4:95:ea:2c:5d:97:f7:95:
         bd:c0:2b:fb:da:3e:34:6c:6d:18:f9:41:5f:0c:3b:8b:46:a0:
         24:cf:e2:2b:0f:3b:b3:6e:b0:cd:96:6e:5c:2a:7a:22:98:8a:
         74:88:38:ad:79:db:49:89:bd:c2:87:1c:af:f5:fc:fc:be:a6:
         33:6e:91:e6:9a:cb:93:0a:f2:bb:f4:91:7e:ea:99:54:2b:c9:
         49:68:d6:d0:a5:6c:bc:92:cf:7a:e4:fa:14:47:73:fc:b9:34:
         53:1b:ed:8b:16:ba:b0:fa:86:02:c6:77:14:25:34:19:d4:35:
         cc:72:fa:55:4b:09:91:1e:6c:27:e8:b3:8f:05:35:ea:c5:a9:
         fd:d6:93:b0:09:f4:0a:87:76:cb:20:4c:1a:2a:fd:06:94:a8:
         cc:6a:be:86:2d:30:25:86:6d:3d:6a:f1:f2:12:41:78:1e:98:
         66:c7:b3:ca:5e:24:d4:9c:dc:7f:0d:20:f9:b7:ab:aa:a1:8b:
         5f:9e:72:98:34:53:97:d4:0c:2b:62:3c:1e:a3:c6:ec:80:e5:
         01:87:58:ff:bd:40:bd:c4:a5:90:0f:95:98:3e:73:2b:b7:41:
         4b:86:f8:95:f0:d4:44:40:2d:c8:bd:78:9c:43:d8:67:8f:46:
         bf:87:67:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:16:10 2026 by rpki-client