This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File:                     7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier:          L0hwzGCsA8UkP/3sAzPpW3ngc6hlyHCPiLbveYTWJYA=
Subject key identifier:   C7:91:FE:2B:0B:26:30:27:D8:FE:BA:67:50:A0:76:59:C0:F4:EE:FF
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer:       /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial:       019C4322369FE0632B8D1505D4EE14A4841F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number:          1355
Signing time:             Mon 09 Feb 2026 16:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:41 +0000
Files and hashes:         1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: HhRIQFIhAd0bT39CGh224rNeDeStzsXyx9avLqWcC8w=)
                          2: 88NWVToLEwKK_Mpgeyzi5wA0xpo.roa (hash: l2cWTge/R/tklyYKEf8+fIr98gBT5pBqi6tErfFhBF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:36:9f:e0:63:2b:8d:15:05:d4:ee:14:a4:84:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
        Validity
            Not Before: Feb  9 16:00:41 2026 GMT
            Not After : Feb 10 16:00:41 2026 GMT
        Subject: CN=c791fe2b0b263027d8feba6750a07659c0f4eeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:78:fe:32:ca:96:ab:2b:de:cd:7e:10:91:a9:
                    3a:33:eb:19:c0:1a:95:76:a7:2f:ee:86:38:21:cf:
                    2c:36:4e:30:f2:28:9e:29:05:fb:fd:90:2c:76:0f:
                    9c:19:2b:a5:d1:8c:d0:10:41:0e:30:97:4e:84:d4:
                    9c:36:b6:c9:66:bc:68:df:e5:e0:fe:7b:3a:66:2f:
                    c0:6e:ce:00:b8:c0:3c:66:11:f2:77:a4:af:2c:bb:
                    39:3a:18:f8:f5:af:c3:4d:70:f5:fe:17:72:9f:3d:
                    a1:56:2d:c3:6c:a9:55:1b:05:8c:b9:38:5c:68:46:
                    91:ba:18:6f:a4:06:ed:f0:6d:b6:32:5a:df:cf:cc:
                    cc:e0:79:21:d6:5a:93:4a:eb:be:d3:74:a6:a6:67:
                    ba:84:17:aa:0a:5d:fb:64:b9:de:37:29:af:aa:77:
                    3f:cf:df:d1:22:dd:1c:d7:8c:d8:bb:8c:8d:44:a7:
                    51:59:8d:d1:c6:55:a4:67:4e:d3:27:f4:4b:b4:16:
                    fd:6d:d2:2a:e6:dc:e3:f5:c4:65:02:f6:3c:57:78:
                    ce:65:9b:c0:93:8a:7b:96:70:d8:5f:e9:84:87:5d:
                    ef:a5:6a:5b:49:ea:92:ae:3a:33:5a:86:3f:bc:75:
                    b9:1b:cb:03:cd:60:a5:3d:1c:10:23:fe:aa:d5:f6:
                    d4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:91:FE:2B:0B:26:30:27:D8:FE:BA:67:50:A0:76:59:C0:F4:EE:FF
            X509v3 Authority Key Identifier:
                keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7a:74:94:74:56:b4:2f:e6:12:6e:fb:24:e5:2f:ae:95:ed:
         95:ea:7c:5f:de:9b:57:b1:0e:9f:5c:6a:4d:61:8c:ca:5b:44:
         b0:45:ab:4a:ee:53:b1:f2:b4:5a:c2:fa:6b:ab:b5:f7:bd:e5:
         dc:16:5e:b0:11:f8:12:0f:b4:62:35:9d:8e:f6:23:37:d8:7b:
         cd:c0:6b:8d:1b:9d:9e:ee:cb:98:4b:4d:c2:e7:d5:cd:9e:84:
         4c:25:a8:91:aa:d3:8f:96:76:86:47:49:3a:47:35:7c:93:30:
         52:f0:a5:b1:ed:a4:dd:d1:68:aa:3b:fd:a7:db:3d:99:c3:d0:
         f6:c9:db:43:00:8e:9e:45:56:2b:03:8c:fe:9b:39:79:7f:97:
         40:cc:da:4b:e3:da:77:cd:fc:bf:e2:a7:dc:63:8b:f0:a4:dd:
         e6:db:3e:e3:66:93:92:52:6b:21:f9:ba:0e:65:1f:5e:fe:29:
         4c:5f:1f:0c:b2:c0:68:d8:c5:9d:d6:c2:16:39:15:30:21:55:
         6a:56:a4:fd:4f:b5:56:d3:99:e1:f5:17:7a:7d:47:a6:02:9b:
         c4:72:c5:b8:21:a3:f8:d2:0a:d0:92:47:54:be:72:49:60:83:
         f6:18:76:09:80:44:7b:ae:03:b1:ec:ce:54:33:2a:fb:33:13:
         34:1d:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:47 2026 by rpki-client