This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
File:                     7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft (raw, json)
Hash identifier:          cjYVFXHsrxYB0IG5V0ybLDIk0arm4LmpFoFqwtCQKIU=
Subject key identifier:   08:AD:73:05:0D:FF:ED:19:A3:34:7C:B8:05:F6:5F:35:57:63:63:9E
Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
Certificate issuer:       /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Certificate serial:       019C41A244A85149DA0778675240D0BBE662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 09:01:19 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:19 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:19 +0000
Files and hashes:         1: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl (hash: tL4+IxkRtX9/L2o9LOG6OFafBVJdQH7E7hrUUNqp9k4=)
                          2: n8YaJSKDORU-V1f3ri3MPdU0v_Y.roa (hash: nnAzk/5RgBrrO3CmKUlZtLCI4l4l5DYZR2tkopYIdL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:44:a8:51:49:da:07:78:67:52:40:d0:bb:e6:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
        Validity
            Not Before: Feb  9 09:01:19 2026 GMT
            Not After : Feb 10 09:01:19 2026 GMT
        Subject: CN=08ad73050dffed19a3347cb805f65f355763639e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:de:2d:28:ee:4a:dd:db:74:25:ee:fb:d4:
                    ef:0d:89:0c:b8:fd:c6:c6:e8:ac:a5:95:3a:68:d3:
                    b2:65:d0:3a:37:56:90:58:dc:16:8d:93:d7:0a:e7:
                    23:bb:2a:2e:04:33:89:e9:7a:a0:7c:8f:af:ec:9c:
                    5f:e2:aa:5b:39:85:67:12:6b:61:9d:eb:0c:37:4d:
                    b5:6d:5a:93:45:61:db:14:95:32:5c:49:f4:da:6d:
                    b0:37:fd:49:9a:7a:8d:c5:f2:b8:eb:05:97:2b:43:
                    75:54:5e:08:b9:33:25:bb:8c:95:4f:f8:85:aa:2a:
                    ce:e1:20:08:cb:0e:fc:86:23:43:ea:06:73:0d:58:
                    45:69:95:58:48:b4:18:9f:ae:2d:97:38:0b:21:1f:
                    20:cf:f6:9c:68:ee:d0:45:b9:c3:ef:ec:64:57:f2:
                    bf:1d:00:08:f4:09:7e:96:8b:58:ec:b9:0e:15:0e:
                    03:b2:b5:e1:b2:af:b9:0e:53:ea:b9:13:ed:6e:4c:
                    19:b4:25:77:64:a2:33:27:b2:12:88:1d:cd:36:0d:
                    f4:7b:c6:b8:d5:c3:9c:e8:06:b5:dd:e5:dc:7e:91:
                    bd:71:05:aa:b2:96:74:e4:21:d1:63:eb:ee:e8:4f:
                    ab:37:b6:1d:92:5b:64:7e:23:a0:f5:16:7b:b4:2f:
                    9b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AD:73:05:0D:FF:ED:19:A3:34:7C:B8:05:F6:5F:35:57:63:63:9E
            X509v3 Authority Key Identifier:
                keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:34:3a:85:8d:95:e9:cb:5c:f8:4e:a7:e9:a2:20:ca:ff:da:
         db:a0:16:64:49:0a:c1:fa:4e:cc:f4:00:f6:ed:af:65:36:74:
         78:97:d7:ac:22:31:43:11:6b:ee:94:56:8c:dd:c3:11:a5:51:
         11:47:d4:e5:1d:d1:31:ea:43:40:9e:d8:48:56:7c:a2:ed:4b:
         ea:97:bc:24:90:4b:d4:04:23:9a:b3:ff:3a:98:e6:00:b1:2f:
         07:c0:ee:63:4b:f8:58:a2:d8:25:9a:90:71:d5:32:15:9b:97:
         55:7b:63:ee:28:c1:c3:ad:c3:1b:5f:49:9e:af:65:6b:bd:fb:
         59:66:f5:4e:34:c2:93:27:8e:10:fb:83:c4:81:4c:30:e4:2d:
         54:cf:11:67:cc:d9:0e:66:12:36:72:a9:d3:e9:3d:88:31:f6:
         c0:96:6a:a9:76:06:d8:d1:f5:3a:d4:2e:dc:23:dd:b2:b8:e3:
         92:eb:eb:27:a3:bf:c6:6e:08:dd:d3:be:92:d7:ce:85:d4:f5:
         9e:b0:f1:1f:ec:57:ba:e3:0d:cc:cc:21:5e:d0:11:ee:1f:11:
         aa:e2:42:01:bc:6d:97:66:4c:22:7e:13:4c:46:53:53:1f:3a:
         8a:f3:0e:68:05:f5:05:b1:70:0c:bb:f2:59:98:7b:70:01:88:
         e6:17:be:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBokSoUUnaB3hnUkDQu+ZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDc1NWM1MTI3NWFiMjM0MmQ4ZjZmY2E1YjU2NjA2YWI5
YzNiNGYwHhcNMjYwMjA5MDkwMTE5WhcNMjYwMjEwMDkwMTE5WjAzMTEwLwYDVQQD
EygwOGFkNzMwNTBkZmZlZDE5YTMzNDdjYjgwNWY2NWYzNTU3NjM2MzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXneLSjuSt3bdCXu+9TvDYkMuP3G
xuispZU6aNOyZdA6N1aQWNwWjZPXCucjuyouBDOJ6XqgfI+v7Jxf4qpbOYVnEmth
nesMN021bVqTRWHbFJUyXEn02m2wN/1JmnqNxfK46wWXK0N1VF4IuTMlu4yVT/iF
qirO4SAIyw78hiND6gZzDVhFaZVYSLQYn64tlzgLIR8gz/acaO7QRbnD7+xkV/K/
HQAI9Al+lotY7LkOFQ4DsrXhsq+5DlPquRPtbkwZtCV3ZKIzJ7ISiB3NNg30e8a4
1cOc6Aa13eXcfpG9cQWqspZ05CHRY+vu6E+rN7YdkltkfiOg9RZ7tC+bXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAitcwUN/+0ZozR8uAX2XzVXY2OeMB8GA1UdIwQY
MBaAFO7XVcUSdasjQtj2/KW1ZgarnDtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85YTY4MzQtZTc2OC00MDliLWI4Y2Ut
ZWM5YjY5YjQ2Y2MwLzEvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85YTY4MzQtZTc2OC00MDliLWI4Y2UtZWM5YjY5YjQ2Y2Mw
LzEvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjQ6hY2V
6ctc+E6n6aIgyv/a26AWZEkKwfpOzPQA9u2vZTZ0eJfXrCIxQxFr7pRWjN3DEaVR
EUfU5R3RMepDQJ7YSFZ8ou1L6pe8JJBL1AQjmrP/OpjmALEvB8DuY0v4WKLYJZqQ
cdUyFZuXVXtj7ijBw63DG19Jnq9la737WWb1TjTCkyeOEPuDxIFMMOQtVM8RZ8zZ
DmYSNnKp0+k9iDH2wJZqqXYG2NH1OtQu3CPdsrjjkuvrJ6O/xm4I3dO+ktfOhdT1
nrDxH+xXuuMNzMwhXtAR7h8RquJCAbxtl2ZMIn4TTEZTUx86ivMOaAX1BbFwDLvy
WZh7cAGI5he+gw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:33 2026 by rpki-client