This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
File:                     7bBKlDMydoAXJm9OX1bABtmOu7Q.mft (raw, json)
Hash identifier:          +lV5PZBUS1YWQx8AQF4ldhs+7cGk1i5N1wRGgSQG99U=
Subject key identifier:   7E:7F:29:8D:18:97:60:90:08:95:B7:FF:22:AB:A4:4B:A8:84:4C:31
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Certificate issuer:       /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial:       019C42463C2D9A6E1C393FD1E73608C95DD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
Manifest number:          0DED
Signing time:             Mon 09 Feb 2026 12:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:25 +0000
Files and hashes:         1: 7bBKlDMydoAXJm9OX1bABtmOu7Q.crl (hash: kIg4mCaLF0pGbqTyLSnX5AQ2Lmtf9D4iXbZkIKmjnWU=)
                          2: IUQL4amfQO9d-_mgLtZ7DQFH5lY.roa (hash: IsUWoVhHWQJZPcVz+Jmd+g0d0TZ9a4iovWnR9SxBaAE=)
                          3: TzXS_x8rKVrlwoD9v8BqI47TEeo.roa (hash: rfp9dhL99iZjM0D0pF2I+WlGwD2HUU0+KsiqjFKP2sQ=)
                          4: yL6M7fiRcsCEJ9f3V81bkWsxt2k.roa (hash: hMXJaJNre81zhT3gUCMgF7Syv2XmMikjjKFj903XrQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:3c:2d:9a:6e:1c:39:3f:d1:e7:36:08:c9:5d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
        Validity
            Not Before: Feb  9 12:00:25 2026 GMT
            Not After : Feb 10 12:00:25 2026 GMT
        Subject: CN=7e7f298d189760900895b7ff22aba44ba8844c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:41:26:fa:71:50:cd:ff:3d:8c:8e:07:d9:bf:
                    5d:32:38:f3:de:dc:ab:74:d1:5c:53:2b:96:1b:96:
                    a6:01:59:03:c1:1e:51:58:30:33:6d:0a:36:ec:5e:
                    1e:9d:00:38:1b:1e:a1:bb:39:e3:93:8f:1d:b6:6b:
                    85:c8:4f:90:9b:6b:c7:0a:fd:d5:1b:ab:9c:f5:ec:
                    e7:0d:d6:89:57:23:05:7b:9e:bc:f4:fd:e3:d1:83:
                    1f:e5:08:6c:2f:90:7a:00:d4:3b:de:27:2b:0a:bb:
                    47:67:de:06:ce:bf:c6:25:b7:b9:e1:b3:0b:03:52:
                    62:2f:b2:47:52:74:84:c7:35:1d:ef:a3:78:e1:10:
                    a8:9e:9d:f2:b7:d6:03:c6:30:99:6b:12:7f:8c:04:
                    cb:94:09:48:41:10:3f:b4:26:32:08:4a:3c:ec:11:
                    58:ee:ac:43:61:2f:d6:b5:bb:b8:1c:70:02:f3:06:
                    c9:2a:9e:03:28:6a:ab:30:50:9f:75:a8:32:16:77:
                    87:d5:fb:f1:bc:69:01:4c:d8:9f:fc:29:31:1f:63:
                    87:6f:62:88:3f:26:1b:3e:db:17:a4:86:32:18:b4:
                    4d:ce:d0:d7:88:9f:c6:c6:11:7c:49:13:b8:91:bf:
                    b0:33:d4:d0:f3:b4:4a:aa:6b:6e:61:1a:76:1c:40:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7F:29:8D:18:97:60:90:08:95:B7:FF:22:AB:A4:4B:A8:84:4C:31
            X509v3 Authority Key Identifier:
                keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:56:ef:30:e5:4c:88:7b:f3:0c:ac:c6:39:6a:70:e4:15:35:
         64:1f:d4:7c:c1:c9:14:56:ed:95:6d:fa:66:b4:17:f5:67:06:
         66:19:e7:16:7e:fc:ef:34:96:14:86:e4:d2:28:4b:bc:27:16:
         7d:20:39:e2:ac:d5:5a:ce:ef:83:82:07:7d:19:d6:ac:f4:b2:
         6a:06:cb:de:50:66:9b:7f:ad:27:67:6e:9a:a6:e7:1c:09:da:
         8e:48:3b:32:fd:f4:9c:98:05:ca:7d:61:c4:02:61:04:19:a9:
         31:c6:2e:73:db:cc:4a:15:b7:67:1f:20:f7:94:38:6f:fc:40:
         61:69:fe:54:29:63:b2:ed:12:0a:0b:34:b3:94:0a:22:62:59:
         30:9c:aa:67:20:e2:91:21:81:c6:8f:c3:19:e7:41:be:73:f2:
         35:00:06:06:47:d5:d7:15:4d:18:68:48:82:42:38:aa:f8:db:
         ae:df:9e:e0:21:94:a2:46:7a:a7:20:e8:1d:4c:26:dc:7b:44:
         b5:00:e9:5c:9a:c6:d7:cd:db:bd:1e:33:27:84:98:49:f0:b5:
         64:0d:7e:05:ad:9a:6e:ef:e2:cc:ee:10:6e:3e:00:cc:ff:74:
         3f:52:be:ad:3b:aa:43:f0:2c:75:cf:58:92:11:00:05:4f:fc:
         2a:e2:9e:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRjwtmm4cOT/R5zYIyV3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYjA0YTk0MzMzMjc2ODAxNzI2NmY0ZTVmNTZjMDA2ZDk4
ZWJiYjQwHhcNMjYwMjA5MTIwMDI1WhcNMjYwMjEwMTIwMDI1WjAzMTEwLwYDVQQD
Eyg3ZTdmMjk4ZDE4OTc2MDkwMDg5NWI3ZmYyMmFiYTQ0YmE4ODQ0YzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkEm+nFQzf89jI4H2b9dMjjz3tyr
dNFcUyuWG5amAVkDwR5RWDAzbQo27F4enQA4Gx6huznjk48dtmuFyE+Qm2vHCv3V
G6uc9eznDdaJVyMFe5689P3j0YMf5QhsL5B6ANQ73icrCrtHZ94Gzr/GJbe54bML
A1JiL7JHUnSExzUd76N44RConp3yt9YDxjCZaxJ/jATLlAlIQRA/tCYyCEo87BFY
7qxDYS/Wtbu4HHAC8wbJKp4DKGqrMFCfdagyFneH1fvxvGkBTNif/CkxH2OHb2KI
PyYbPtsXpIYyGLRNztDXiJ/GxhF8SRO4kb+wM9TQ87RKqmtuYRp2HEAIuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5/KY0Yl2CQCJW3/yKrpEuohEwxMB8GA1UdIwQY
MBaAFO2wSpQzMnaAFyZvTl9WwAbZjru0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2It
ZTQ1ZmE2NGQ0ZDJkLzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2ItZTQ1ZmE2NGQ0ZDJk
LzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlbvMOVM
iHvzDKzGOWpw5BU1ZB/UfMHJFFbtlW36ZrQX9WcGZhnnFn787zSWFIbk0ihLvCcW
fSA54qzVWs7vg4IHfRnWrPSyagbL3lBmm3+tJ2dumqbnHAnajkg7Mv30nJgFyn1h
xAJhBBmpMcYuc9vMShW3Zx8g95Q4b/xAYWn+VCljsu0SCgs0s5QKImJZMJyqZyDi
kSGBxo/DGedBvnPyNQAGBkfV1xVNGGhIgkI4qvjbrt+e4CGUokZ6pyDoHUwm3HtE
tQDpXJrG183bvR4zJ4SYSfC1ZA1+Ba2abu/izO4Qbj4AzP90P1K+rTuqQ/Asdc9Y
khEABU/8KuKeEQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:43:56 2026 by rpki-client