This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
File:                     7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json)
Hash identifier:          TmRlnivCR2t/0I7fTqVgqQzlvO7AWaBxMtB4cAC9jBg=
Subject key identifier:   82:0C:C8:9E:AF:70:0C:45:AB:AD:B7:AF:47:80:F2:62:A4:B3:05:A7
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Certificate issuer:       /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial:       019C43593835B7E44B6809011ED43528C20E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
Manifest number:          0842
Signing time:             Mon 09 Feb 2026 17:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:46 +0000
Files and hashes:         1: 1-iYojE0-bkqoV5dZTp5mESZkuMc.roa (hash: IBrMOBEILaJ3aIFlHGFpIPbUN6/UuC5r0K5zqJd+Mnk=)
                          2: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: 7VNvGN3/CD2/urJwZ9gEWJnlMq2jrTaWxA3yDjHd/3s=)
                          3: atHWqvE_ZaHJPo5qCwW1PGxUw7s.roa (hash: jkDG3raOa2YgMVxrQwlxDz2jPOeQPczc27crizlM5xM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:38:35:b7:e4:4b:68:09:01:1e:d4:35:28:c2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
        Validity
            Not Before: Feb  9 17:00:46 2026 GMT
            Not After : Feb 10 17:00:46 2026 GMT
        Subject: CN=820cc89eaf700c45abadb7af4780f262a4b305a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:56:a2:14:64:bf:82:43:60:8b:1f:ef:6f:
                    3d:f1:c2:91:14:9b:f6:8f:96:51:a8:d6:d9:0e:00:
                    1c:e7:96:19:61:b4:ec:d6:20:7f:5c:64:8b:e1:f9:
                    01:85:d7:53:4b:52:64:87:df:b7:1e:c3:95:25:27:
                    52:39:bf:2c:5b:ac:a9:7b:d5:a0:a0:8e:a6:b0:d5:
                    4b:fb:d1:13:37:c9:9f:9e:06:e3:81:16:77:1b:4e:
                    12:d1:0f:ed:6f:e0:d5:fe:6d:ff:f3:c8:37:d9:6d:
                    42:ca:06:90:c9:7c:cf:75:2c:e4:76:80:cd:ec:73:
                    07:fd:a7:e7:f3:e0:ab:35:9e:80:24:c1:71:d2:2c:
                    de:68:5b:5e:31:fa:a9:29:63:0b:2b:d9:ca:7e:b6:
                    9f:31:bb:0f:27:9d:2a:7d:42:ac:d3:b3:97:13:93:
                    e9:6a:69:f9:97:97:28:2e:98:45:02:cc:64:ca:1a:
                    47:ae:27:f8:bc:77:2a:79:60:6d:5a:ef:bc:96:38:
                    c4:54:29:46:ea:8a:b4:54:14:dd:90:d1:9c:04:8e:
                    e8:c9:36:2f:b3:ec:19:fb:b5:a2:47:5c:04:66:1d:
                    4b:a0:96:fa:f5:76:0d:2a:0e:7e:e2:4e:3c:34:20:
                    27:b8:32:77:b7:51:e6:7d:ff:be:a1:9e:97:26:22:
                    ae:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0C:C8:9E:AF:70:0C:45:AB:AD:B7:AF:47:80:F2:62:A4:B3:05:A7
            X509v3 Authority Key Identifier:
                keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:74:1e:80:3c:d1:3d:6a:b7:8b:7e:fb:a3:18:ae:a9:57:4f:
         32:9a:a4:36:11:f5:08:09:47:59:4c:69:7b:68:19:79:1e:cf:
         7c:a1:a8:05:2f:a9:75:c1:76:1c:85:78:b4:ef:6a:55:1e:51:
         e2:ec:5f:5d:f2:4e:b4:c8:8d:f4:83:b8:06:c6:a4:23:23:4f:
         c0:ed:5c:1f:c1:45:c3:86:8f:1d:0d:c5:e6:79:68:69:26:91:
         e1:b4:1b:b9:32:28:30:57:36:93:62:5f:67:f7:76:25:f6:1f:
         48:7e:a8:3f:97:46:55:26:80:c6:9d:2a:37:6b:d8:1a:15:f3:
         1f:64:39:2a:02:e1:d6:5b:48:b0:ec:39:03:7f:da:23:3b:d2:
         c2:d6:a0:95:54:4e:91:d1:eb:77:34:12:26:f2:cf:0b:1e:07:
         c8:d6:47:98:f5:14:5d:1a:94:bb:e6:01:f0:c8:ad:59:f9:31:
         24:d0:d7:8c:16:d4:aa:aa:33:d1:68:ac:4c:7d:6b:ad:75:8e:
         08:dd:99:a3:90:03:b2:69:b5:aa:2e:6b:de:44:be:ae:b8:8b:
         39:d6:cf:77:96:5e:7c:22:e1:97:ad:47:ec:7f:e5:f3:e1:9f:
         a1:bb:7e:8d:cd:31:94:82:54:a2:51:cb:fe:18:e5:2d:81:cd:
         c9:02:72:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:06:36 2026 by rpki-client