This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File:                     7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier:          ETAFTGCryw4KQlZAffaehPmy4hBOIjqG9i66c3QBMz0=
Subject key identifier:   89:06:8B:C2:C5:AD:1D:EB:85:F7:33:2A:B0:15:FB:AB:A8:7E:E0:18
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer:       /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial:       019C4390323C6C9E30EEABBF684ECCFE1FA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 18:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:49 +0000
Files and hashes:         1: 16IES9haatKMkP-HejVSazJdMkY.roa (hash: mQPtnV+K2FeabOm74g9Ubv3nHZo4wLPT4wK0cMDSkes=)
                          2: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: JEwBjkMiaVje2W+eqhje13nut/GWIaU0WcLrPuNZ1w4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:32:3c:6c:9e:30:ee:ab:bf:68:4e:cc:fe:1f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
        Validity
            Not Before: Feb  9 18:00:49 2026 GMT
            Not After : Feb 10 18:00:49 2026 GMT
        Subject: CN=89068bc2c5ad1deb85f7332ab015fbaba87ee018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:16:43:27:76:d6:b1:cd:42:6a:1a:41:18:
                    0a:5e:0a:d2:d6:23:d1:97:2f:9e:d9:80:57:0f:72:
                    4d:03:17:0a:df:66:c8:df:73:be:46:ce:03:53:56:
                    73:1a:81:a4:2e:bc:ca:bd:05:29:c6:0a:6c:d4:67:
                    14:17:3c:92:29:97:41:26:df:94:a4:4f:db:45:50:
                    9e:b6:1b:97:12:3f:a0:8a:7f:5c:3d:9d:0d:88:26:
                    41:66:4f:66:44:57:ac:37:71:b2:70:61:69:9e:ae:
                    6a:cb:2f:9e:d1:96:75:5c:dc:af:01:61:3d:9e:dc:
                    67:cc:e8:e1:a6:fa:c5:b1:0b:08:40:18:d2:d1:cb:
                    e9:e0:07:8f:19:04:d5:7b:ba:ad:ef:a5:f1:f3:68:
                    4d:1f:7c:d2:73:a3:02:fa:c8:cc:fb:a1:9e:b5:01:
                    14:1e:e2:7a:82:80:18:70:83:02:c9:78:34:ee:2c:
                    6d:8c:a1:d5:1c:b5:62:e2:c0:5c:2d:9f:07:dd:b4:
                    3d:99:00:df:d5:01:ca:3f:dd:d9:d2:8b:e5:38:d4:
                    f8:0a:cf:35:b3:7f:79:c6:b3:3a:97:82:c3:9e:85:
                    a1:be:38:65:af:e6:71:f5:91:a1:aa:09:f7:01:26:
                    04:4d:11:e5:18:a8:e7:e0:f6:4f:83:4a:a4:a8:b7:
                    a8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:06:8B:C2:C5:AD:1D:EB:85:F7:33:2A:B0:15:FB:AB:A8:7E:E0:18
            X509v3 Authority Key Identifier:
                keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:06:0b:fe:bb:b5:f0:48:73:ff:10:64:2f:b9:65:3e:de:f2:
         63:4a:90:97:68:64:c6:13:9e:0e:71:4b:91:15:33:4f:28:e2:
         01:07:60:70:60:ca:5a:3b:d1:20:0c:87:07:32:27:ae:81:a6:
         bf:9b:74:a1:6a:5d:a2:bf:ec:75:03:60:42:81:04:e9:3b:25:
         5b:f7:8c:ed:8b:46:a4:d0:6a:6e:c4:1a:6d:84:a3:ab:82:56:
         fd:50:05:98:01:80:8a:1a:05:d8:c2:5b:f9:57:52:27:c5:97:
         d6:b5:fd:82:d4:d8:25:a3:34:9a:16:83:4c:4c:38:30:aa:4d:
         84:fb:a9:7e:43:06:7e:39:35:fc:64:78:50:60:e2:e3:2f:e0:
         2e:dd:65:73:40:9e:ab:9c:ee:17:69:57:1d:ab:92:83:6f:b5:
         4c:60:e4:88:5e:1c:12:11:89:91:2e:40:46:2c:65:ec:40:a0:
         19:0c:4a:48:fa:79:30:55:09:79:cf:b3:a5:d5:c5:9f:f7:a8:
         ce:13:98:1f:05:ad:ed:2f:18:67:2b:55:be:e0:7f:91:f3:0b:
         aa:98:2f:80:1b:cb:49:68:b6:20:f7:d4:3d:91:29:8e:46:a9:
         8d:6d:11:0b:14:b8:fb:b3:1d:e6:96:cf:e1:e9:88:fe:ce:e0:
         cf:71:ff:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:10 2026 by rpki-client