This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File:                     K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier:          a0rh3Zh7GLJ9XLwtAUOlE9z/2OMehPBUSYdi0sRPAbg=
Subject key identifier:   EF:96:4A:85:9E:76:56:1E:2D:D0:72:42:B0:4F:98:F9:FF:9F:24:C8
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer:       /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial:       019C42B4822E1C3B26EF2CAB7C9A6FDA133E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 14:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:51 +0000
Files and hashes:         1: 2UmZFRrJ0P-2mwYSao7Xzkep2iA.roa (hash: N9+wOT3ic7u1Pc0UnkkcEFa7DljVTAIJF/p2BSuaQHw=)
                          2: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: pwFledJnxTqtdix3MRl+0IZX2U2Kvb0LnNxeTcL1C+c=)
                          3: a8hAdaOdxZFivnzP3avRHvD9kUw.roa (hash: FzlX7CBWyvP5RQUSSHhztLWIzIWu2YtxzCw2ArYeCTU=)
                          4: ncypf2iinEe-q_LnbnKjYSF5rJc.roa (hash: X77xC4nNcyrrbUpykZ9gvEucbXtxd0H2H3Sybmc5J48=)
                          5: sZzlwoV7VUnP0rnAO0okZeo6Iak.roa (hash: WXgl70GjiFz6sqLRQIYx3xNCuabeBF1y/DzdVPV9mJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:82:2e:1c:3b:26:ef:2c:ab:7c:9a:6f:da:13:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
        Validity
            Not Before: Feb  9 14:00:51 2026 GMT
            Not After : Feb 10 14:00:51 2026 GMT
        Subject: CN=ef964a859e76561e2dd07242b04f98f9ff9f24c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:6e:e4:25:06:c0:cd:42:4d:79:f8:1f:fb:
                    d3:fd:f7:dd:d4:96:33:25:a6:67:5b:c2:fd:35:c0:
                    c3:0e:68:34:40:d9:68:d6:fc:14:76:ac:34:3d:4f:
                    76:36:4c:65:b7:fe:f5:6f:ae:b2:e3:4b:22:f2:2e:
                    44:65:d8:fc:c1:8d:72:44:ce:22:a6:c0:d8:7c:cb:
                    94:03:8c:d8:87:f7:32:da:00:e2:6f:f1:79:94:cb:
                    e7:62:60:88:88:ad:04:d4:13:8d:00:2c:da:c0:51:
                    ec:75:8d:fe:42:0b:59:71:99:9a:97:e0:f2:ef:90:
                    7f:56:d3:68:ca:40:8c:c5:9d:3c:74:a7:fa:da:44:
                    92:b9:9a:3d:08:2c:3c:1c:0f:54:eb:6c:e6:30:eb:
                    4d:b1:3e:71:f2:01:e7:a8:05:84:29:95:48:61:d6:
                    82:bd:a3:8c:de:e0:28:b7:e1:8d:53:da:07:ec:73:
                    0f:2d:0a:a3:f5:cc:0e:17:23:4d:73:6b:c7:86:3f:
                    c8:df:d8:31:42:86:e8:54:9c:19:17:a7:71:78:7e:
                    2d:1e:b5:b3:ed:60:53:dc:03:69:a4:51:bd:00:bf:
                    42:d8:3c:74:98:9e:3e:46:60:29:28:91:52:e6:d1:
                    2c:2f:e9:bd:b6:6b:3d:de:06:02:46:da:8e:30:aa:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:96:4A:85:9E:76:56:1E:2D:D0:72:42:B0:4F:98:F9:FF:9F:24:C8
            X509v3 Authority Key Identifier:
                keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:6e:1c:91:81:95:f0:10:ef:e2:59:8a:ee:f2:c7:b9:6a:e9:
         43:36:af:fa:bb:8d:9a:2b:83:d0:58:06:fd:b2:5e:d7:57:6f:
         4b:e4:be:51:05:ba:9f:c4:3a:fa:55:99:dc:53:ed:55:f6:b2:
         6f:65:72:72:5b:11:81:25:b9:7e:21:b1:26:23:18:28:2d:dd:
         23:09:5c:f9:dd:0a:fd:08:a0:6a:39:d8:cd:c1:d5:14:93:76:
         ab:75:d2:85:51:58:8f:16:95:e3:35:51:94:f8:18:d0:17:a5:
         a5:06:26:8e:2e:a3:64:89:ab:ea:d9:72:c6:5b:2b:82:94:b7:
         76:d3:82:0d:d6:95:6f:4b:8b:0e:2e:20:9e:9b:fd:77:6e:d1:
         9f:da:42:20:32:d4:b0:55:64:0d:a1:58:c8:02:b1:3f:d1:68:
         7d:0b:14:1c:d2:2a:8c:89:99:43:af:aa:68:98:fd:8b:af:41:
         f2:2d:f5:5d:b4:9f:65:6f:bf:8d:e6:50:c9:0a:2c:a0:bd:c4:
         c8:39:bc:17:20:93:3e:1f:5a:0d:d4:95:37:ea:23:66:62:69:
         01:b7:a6:dc:15:78:76:cb:4f:6f:f9:3b:56:c7:e4:23:5c:9e:
         ad:f7:68:d4:ac:eb:d0:52:5c:11:aa:37:64:2a:33:e1:10:ef:
         d3:39:2f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:26 2026 by rpki-client