This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File:                     7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier:          LFGmEvI4yvJqn0mY4aBuvW8byGPkL5jK3F5OqvyH9/0=
Subject key identifier:   00:0E:7E:02:90:19:E9:F1:CD:10:F4:1C:DA:56:AD:AE:6D:05:45:1C
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer:       /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial:       019C43C6CE602AF20F1E7508741CC23BB935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number:          07EF
Signing time:             Mon 09 Feb 2026 19:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:28 +0000
Files and hashes:         1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: Fpujf5x5He/sNpZrebAz0bwZw7y372hm+1N8p+GlUS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:ce:60:2a:f2:0f:1e:75:08:74:1c:c2:3b:b9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
        Validity
            Not Before: Feb  9 19:00:28 2026 GMT
            Not After : Feb 10 19:00:28 2026 GMT
        Subject: CN=000e7e029019e9f1cd10f41cda56adae6d05451c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c4:fe:db:9f:1d:30:71:9a:39:07:aa:09:06:
                    1f:a5:01:23:d7:a0:64:51:6f:e5:05:1e:d1:f5:1d:
                    b3:d3:e6:9e:44:b6:92:e6:d1:e2:65:d2:38:4c:04:
                    2d:90:62:3e:7a:27:a7:05:5b:1e:fe:ec:f8:ab:88:
                    58:9c:37:46:74:6f:26:ad:08:9a:e0:82:0a:6b:61:
                    7f:46:9f:3a:68:ff:d6:ae:56:e2:fd:9f:9f:68:e8:
                    04:8d:77:54:54:95:fc:02:4a:c3:25:98:24:6d:7a:
                    ac:e7:a4:01:29:39:05:85:29:19:a2:27:1b:17:17:
                    0d:40:a3:c0:a7:32:be:08:0f:33:fc:fb:66:cc:f8:
                    ef:e3:fb:5a:1e:bd:13:a1:1c:4a:cd:2a:a7:94:11:
                    b4:aa:76:3d:d7:0e:a2:9b:39:dc:af:4e:1d:47:2f:
                    19:dd:ea:69:d5:e6:1d:a9:4e:3b:44:dc:66:6e:16:
                    78:84:08:a1:bc:47:e7:a8:17:d5:2c:cc:21:d9:6f:
                    3e:7f:5c:83:47:f4:2c:0e:a5:47:00:84:fb:20:83:
                    d6:67:5e:0a:65:79:11:63:9c:4a:25:bf:03:7f:fb:
                    1a:c8:8a:70:7f:dd:0c:26:f2:7b:3c:d4:07:0c:1d:
                    8d:bd:ae:db:fa:53:75:ef:2b:61:39:e9:35:5c:18:
                    34:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0E:7E:02:90:19:E9:F1:CD:10:F4:1C:DA:56:AD:AE:6D:05:45:1C
            X509v3 Authority Key Identifier:
                keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:de:0c:e6:67:ef:55:54:12:65:98:b8:27:be:e5:79:d8:ae:
         db:b2:73:14:fd:26:59:5c:3c:1d:f9:8f:bc:b1:ff:12:af:d9:
         9b:9c:10:f4:ff:f4:b1:ce:22:3f:18:ec:af:53:c8:1b:f6:e3:
         f7:9a:c4:a6:ef:48:bf:55:02:e1:d0:3b:3c:1a:ea:ce:0f:b8:
         fa:de:4c:be:43:eb:3f:33:92:21:5f:71:b6:1b:16:63:41:07:
         03:d0:51:ac:91:7f:e1:2a:ed:c6:82:3c:47:50:39:23:e0:b3:
         92:84:40:18:3c:e4:d5:0a:df:dc:1a:45:4a:fa:8b:45:fb:c3:
         be:71:70:a8:df:c5:4b:22:99:c4:a5:ae:1c:40:bc:bb:a7:f4:
         4c:94:b8:09:7e:8b:90:c1:c9:44:4c:95:a0:d3:9a:71:1e:25:
         f0:d1:85:ea:d6:f3:2a:ca:3d:52:1d:0e:a9:c3:f3:5f:70:1b:
         50:7f:54:4d:01:22:8d:2c:95:f0:dc:a5:e6:e0:60:8d:2a:ee:
         53:4f:ac:04:a7:7d:24:22:c3:f9:d5:2d:ac:62:42:16:6c:39:
         15:70:72:c3:2f:2f:05:91:37:6d:e7:c1:b9:45:b7:7f:3d:36:
         36:fd:56:e0:27:af:31:a7:fa:12:9a:03:7b:47:81:84:6e:ac:
         cb:2c:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:11 2026 by rpki-client