This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
File:                     7GV-idqz-xXjuuDrGsf6yT32OF0.mft (raw, json)
Hash identifier:          oYVzIjTzDIEGuZt70sExXVjE36LCg7qZcFWUY4c9Fq4=
Subject key identifier:   D9:F2:5E:50:A3:9A:D2:0C:12:03:6D:0B:75:9F:CC:CA:58:B6:F6:C3
Authority key identifier: EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
Certificate issuer:       /CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Certificate serial:       019C424678259AC3FB6328E6E32A9C634E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
Manifest number:          0801
Signing time:             Mon 09 Feb 2026 12:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:40 +0000
Files and hashes:         1: 7GV-idqz-xXjuuDrGsf6yT32OF0.crl (hash: GCinL/2PwpyxcTk0A/T2XZgAnnHCx6xEYibJSj3Itbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:78:25:9a:c3:fb:63:28:e6:e3:2a:9c:63:4e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
        Validity
            Not Before: Feb  9 12:00:40 2026 GMT
            Not After : Feb 10 12:00:40 2026 GMT
        Subject: CN=d9f25e50a39ad20c12036d0b759fccca58b6f6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:4a:77:77:3c:8b:b9:17:70:cb:d8:95:23:
                    a3:bf:90:13:63:52:80:ba:f0:ea:2f:55:57:f8:50:
                    cf:c0:26:2f:6d:1f:87:52:1c:9e:d3:f0:e2:31:c7:
                    65:3a:6c:0a:1a:90:9a:ed:66:dc:77:52:b2:85:4f:
                    bd:a5:dd:1f:cc:50:f4:13:2c:14:d1:e7:36:ab:6e:
                    27:fc:7b:78:a7:a1:ee:f3:60:21:a9:40:e3:44:75:
                    a6:a1:93:0e:e2:89:7f:ee:96:be:de:ef:1e:80:30:
                    86:17:4d:2b:28:e5:62:fd:ab:db:d3:63:00:b9:df:
                    f2:5c:c8:e0:8d:12:fc:3e:93:8a:67:e4:51:88:07:
                    85:56:a1:c7:ca:88:49:68:b1:a7:b7:fc:a0:13:49:
                    98:f9:86:11:1a:ab:3a:37:06:9e:a4:b4:77:29:df:
                    39:21:ff:7e:65:34:f6:c7:bd:58:eb:6f:42:97:3f:
                    c5:a5:0f:d1:a1:84:e5:9f:cb:1d:bc:c9:5c:3f:ce:
                    3f:b0:09:ba:ff:49:54:3e:cb:b5:4f:0e:1f:d2:25:
                    4e:e6:58:8e:27:0f:56:ae:c0:38:e3:ca:dc:25:00:
                    ef:f2:04:bf:f1:53:56:88:2e:16:62:4f:3d:c1:c4:
                    3e:68:08:23:ab:37:85:c6:97:58:e7:ae:23:0b:dd:
                    e5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F2:5E:50:A3:9A:D2:0C:12:03:6D:0B:75:9F:CC:CA:58:B6:F6:C3
            X509v3 Authority Key Identifier:
                keyid:EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ca:71:75:a6:a8:11:83:fa:a8:48:17:5e:16:51:85:15:02:
         e1:9f:5b:c0:89:3e:19:9a:e4:9c:51:57:03:61:ff:be:88:10:
         a1:bf:52:75:f4:29:29:ad:63:7d:6f:aa:53:ed:07:e3:10:3b:
         b0:20:d2:36:c7:6a:37:4b:24:f8:0c:7a:26:64:ee:28:26:0b:
         6d:7c:dd:d4:5a:7c:1d:9b:98:78:4e:c3:1a:5a:88:9e:5a:ef:
         8f:68:f3:af:06:5f:a9:0c:a7:fc:89:d6:49:41:4c:cf:7c:ec:
         83:d5:18:87:e2:81:e3:a4:c6:8b:3d:6d:5f:30:4a:ee:97:04:
         bb:ed:e5:a7:68:d0:bb:18:8c:e4:26:0c:03:78:17:8d:c2:38:
         f7:36:dd:eb:fa:d4:99:fe:2e:63:5c:e7:c0:cf:2e:42:17:61:
         f1:29:86:67:09:e7:d0:95:65:d6:fa:97:aa:ce:d6:c8:05:8c:
         54:7b:64:e3:33:7b:9f:90:67:a1:ea:65:8a:84:e9:5f:73:08:
         fb:12:21:e3:54:33:fa:e9:30:a9:49:94:0a:dd:e8:74:63:5f:
         ba:18:9f:4b:c0:d8:8e:0e:4b:89:34:ce:38:40:80:46:8b:6d:
         88:9a:7f:b1:04:fe:88:6c:3b:a0:92:40:76:32:23:96:bf:e4:
         0e:3e:d6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:45 2026 by rpki-client