This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
File:                     7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json)
Hash identifier:          yF+xMRBwM392G86FILk6VVQQXj9e/bzq9+u/jvav5nE=
Subject key identifier:   7B:87:9F:20:AA:78:E8:14:33:15:32:B6:A1:19:09:73:68:D7:53:5D
Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Certificate issuer:       /CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Certificate serial:       019C41345B632A1A641197E64F50C8DC5104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 07:01:16 +0000
Manifest this update:     Mon 09 Feb 2026 07:01:16 +0000
Manifest next update:     Tue 10 Feb 2026 07:01:16 +0000
Files and hashes:         1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: Uh5+S/h4DtfiOCi9jPQwCuHrLYXC+A0EJbPUyQMdlOk=)
                          2: pIgvzLjixs4_sf2VopagAU-SJ2k.roa (hash: 8W+ULMj0Umqs1HGvdH4mGs4tGpsjhjBCqHgwP2+9Xgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:5b:63:2a:1a:64:11:97:e6:4f:50:c8:dc:51:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
        Validity
            Not Before: Feb  9 07:01:16 2026 GMT
            Not After : Feb 10 07:01:16 2026 GMT
        Subject: CN=7b879f20aa78e814331532b6a119097368d7535d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:97:98:03:df:67:39:c8:03:63:51:04:f4:
                    26:5d:d5:0d:81:68:02:0c:b1:fc:b9:e3:72:2a:43:
                    39:f7:60:35:0e:d0:66:59:c4:e4:50:9e:73:b7:46:
                    9c:a5:a5:99:33:06:15:47:62:d0:26:da:de:e4:f1:
                    6f:6e:51:02:0a:10:85:01:15:7c:a2:cb:ed:ab:08:
                    86:e3:9a:38:9a:10:78:17:ee:ea:fa:da:59:9c:54:
                    68:7e:44:cf:42:61:cd:ab:0b:0f:0d:54:68:e3:44:
                    a5:df:50:45:d7:5d:90:16:83:9b:67:d9:13:52:4c:
                    6b:f6:70:dc:61:72:2c:2c:92:23:6a:f2:94:27:5c:
                    a2:51:f0:2f:3a:a3:12:3c:23:8e:1e:3b:d3:dc:31:
                    f2:24:0b:45:e0:81:7f:01:85:b4:45:d6:51:9e:93:
                    50:e5:10:dc:a0:5a:94:80:44:cb:6b:c6:34:a9:0e:
                    dd:17:3d:48:ff:dc:f6:f6:c5:ac:41:91:67:d6:52:
                    58:d6:54:44:78:fd:55:0b:c6:54:73:a1:91:30:dd:
                    5d:6f:89:ff:4e:0d:37:36:8a:2c:f0:6a:35:24:a0:
                    a2:98:f4:dd:45:bb:05:c7:ea:f9:bb:6d:f5:3d:36:
                    ee:d3:33:86:cd:12:d6:3d:1b:4f:aa:9a:5b:f8:64:
                    49:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:87:9F:20:AA:78:E8:14:33:15:32:B6:A1:19:09:73:68:D7:53:5D
            X509v3 Authority Key Identifier:
                keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:32:8a:46:a6:b1:78:6f:71:ff:9d:3a:9c:7a:4c:06:b5:
         02:2b:b7:0d:1e:26:9d:e9:a9:33:51:f4:b5:5d:2e:b9:5e:37:
         16:b0:9b:2a:bf:13:dc:0c:6a:a1:b0:72:58:16:c2:0f:ac:96:
         4d:c2:7c:00:5c:60:01:b6:f2:08:f1:9e:2a:7f:42:50:80:a2:
         02:bd:55:95:b1:ab:b6:a4:e0:dc:77:03:e1:65:80:d5:d6:81:
         61:b5:ae:ed:6d:5e:85:d9:31:dc:65:49:60:4e:4e:49:0f:db:
         f0:4b:d9:e2:9c:a5:09:d8:aa:14:71:97:ce:4c:15:a7:97:84:
         79:c6:f8:1f:89:7c:89:85:12:55:e1:42:3c:61:bf:b4:ac:9a:
         60:54:d9:a2:11:b6:78:55:aa:a0:3d:4c:da:d2:3c:30:20:40:
         67:ad:42:ac:bc:92:d8:00:3c:50:94:c9:bb:2a:8e:22:93:bc:
         cf:32:22:74:8a:0a:9b:d3:dd:6e:58:b0:8e:3e:ce:6f:91:51:
         ff:e2:89:c0:43:a9:ba:26:69:c7:72:7e:f6:fe:0b:6b:4e:f8:
         44:47:03:b8:b2:df:f2:02:a5:67:07:56:21:4d:72:51:af:94:
         60:a5:d5:f6:5a:8f:a9:a8:38:88:b5:ae:d9:a2:68:50:57:77:
         5d:b3:7e:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBNFtjKhpkEZfmT1DI3FEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODNiYzQ1OGEzNjk2ZDY1MmZiZWY4NjNlNWVlNDBmMDA5
NmYxOTcwHhcNMjYwMjA5MDcwMTE2WhcNMjYwMjEwMDcwMTE2WjAzMTEwLwYDVQQD
Eyg3Yjg3OWYyMGFhNzhlODE0MzMxNTMyYjZhMTE5MDk3MzY4ZDc1MzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorSXmAPfZznIA2NRBPQmXdUNgWgC
DLH8ueNyKkM592A1DtBmWcTkUJ5zt0acpaWZMwYVR2LQJtre5PFvblECChCFARV8
osvtqwiG45o4mhB4F+7q+tpZnFRofkTPQmHNqwsPDVRo40Sl31BF112QFoObZ9kT
Ukxr9nDcYXIsLJIjavKUJ1yiUfAvOqMSPCOOHjvT3DHyJAtF4IF/AYW0RdZRnpNQ
5RDcoFqUgETLa8Y0qQ7dFz1I/9z29sWsQZFn1lJY1lREeP1VC8ZUc6GRMN1db4n/
Tg03Noos8Go1JKCimPTdRbsFx+r5u231PTbu0zOGzRLWPRtPqppb+GRJvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuHnyCqeOgUMxUytqEZCXNo11NdMB8GA1UdIwQY
MBaAFO6DvEWKNpbWUvvvhj5e5A8AlvGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYt
N2MyODFkMDdlMTU1LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYtN2MyODFkMDdlMTU1
LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeooyikam
sXhvcf+dOpx6TAa1Aiu3DR4mnempM1H0tV0uuV43FrCbKr8T3AxqobByWBbCD6yW
TcJ8AFxgAbbyCPGeKn9CUICiAr1VlbGrtqTg3HcD4WWA1daBYbWu7W1ehdkx3GVJ
YE5OSQ/b8EvZ4pylCdiqFHGXzkwVp5eEecb4H4l8iYUSVeFCPGG/tKyaYFTZohG2
eFWqoD1M2tI8MCBAZ61CrLyS2AA8UJTJuyqOIpO8zzIidIoKm9Pdbliwjj7Ob5FR
/+KJwEOpuiZpx3J+9v4La074REcDuLLf8gKlZwdWIU1yUa+UYKXV9lqPqag4iLWu
2aJoUFd3XbN+pw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:57 2026 by rpki-client