This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
File:                     7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json)
Hash identifier:          8X6+V5X082x32pDvoj1QaKtfMSeUyq0ZBWGkQm5zwyI=
Subject key identifier:   74:19:86:BC:F4:06:51:93:ED:23:22:29:0A:D5:61:F1:25:6D:57:D5
Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
Certificate issuer:       /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Certificate serial:       019C42101EA28491AEFE3040C57482EB1872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
Manifest number:          13E0
Signing time:             Mon 09 Feb 2026 11:01:18 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:18 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:18 +0000
Files and hashes:         1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: sA1dsJY7ES0G+c+JdARaeiR2faK8Kn9K0qWpXFoIYH4=)
                          2: bPSO6MwxWbbuX5pl75RHEJata0Y.roa (hash: AjyNVlFJkmNLyTmsoSE4kMhHz/W3/3nMb2xQxom7aZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:1e:a2:84:91:ae:fe:30:40:c5:74:82:eb:18:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
        Validity
            Not Before: Feb  9 11:01:18 2026 GMT
            Not After : Feb 10 11:01:18 2026 GMT
        Subject: CN=741986bcf4065193ed2322290ad561f1256d57d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:04:a5:36:e5:9b:0a:a7:cc:d2:47:82:34:
                    f4:c0:88:24:26:83:a6:72:0c:4e:f2:6c:2f:9c:7b:
                    19:17:e7:4d:28:c6:24:ff:dd:56:e0:29:ab:a7:ee:
                    44:48:51:2a:a2:90:48:b7:38:ad:c3:16:33:0e:09:
                    b1:70:b1:b5:77:b1:fc:79:bc:12:a5:1f:48:9c:dc:
                    7b:3b:56:64:ce:5d:46:29:4b:b7:7d:2d:b8:4a:15:
                    91:39:d9:75:e5:4f:dd:79:1f:78:53:02:ef:cb:6a:
                    ab:6a:9a:ac:55:4b:1b:54:54:3c:95:a7:5e:02:54:
                    99:dc:e4:99:a0:b4:19:21:29:af:ee:dc:4b:ba:00:
                    3b:1a:20:61:65:bf:68:97:62:80:d0:a3:fa:df:df:
                    b5:b9:99:cc:97:72:66:51:02:63:85:0b:26:ff:01:
                    78:01:70:7b:45:51:c9:f2:c4:6d:84:b6:92:bc:cc:
                    ac:6d:06:81:cc:0b:c8:d3:71:c2:a8:96:3d:9b:f4:
                    d6:92:5c:6c:b4:84:ee:c9:51:ca:be:b5:33:ad:4f:
                    64:b7:01:32:bc:a8:0a:a6:27:cc:2c:19:01:39:fe:
                    fa:7f:21:04:72:22:e1:ad:dc:e9:5b:50:a2:85:90:
                    79:17:d5:2d:0b:20:04:4c:0e:02:25:fe:29:30:cc:
                    18:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:19:86:BC:F4:06:51:93:ED:23:22:29:0A:D5:61:F1:25:6D:57:D5
            X509v3 Authority Key Identifier:
                keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8b:a8:3c:af:60:ed:ad:9d:c7:a1:a5:c2:61:43:7e:d4:71:
         b8:67:93:22:76:8a:8e:91:da:32:ce:b8:b5:88:41:77:ba:39:
         05:5f:3d:36:c1:10:d6:56:36:8c:d8:51:22:d6:b2:dc:b3:04:
         eb:27:ec:c7:cb:22:ec:a1:cd:4b:16:28:0d:bc:f9:52:15:db:
         ab:99:0e:8a:2e:05:19:39:2a:2b:e7:44:d4:31:dc:38:f4:d1:
         a2:c6:28:50:7a:f6:34:df:b7:92:77:d6:f0:f1:ce:80:12:49:
         2d:14:d7:10:69:01:80:c2:bb:68:c1:54:e6:69:7b:18:aa:bc:
         74:d5:6d:e6:c8:77:ea:97:2f:fc:17:23:08:09:0a:5a:97:e7:
         30:2c:01:7e:54:54:4a:46:73:cd:e5:34:46:c4:3f:1a:98:ea:
         b9:82:13:27:fb:e4:64:e8:6e:4f:91:a3:c0:c9:8c:36:c7:00:
         84:8c:12:b6:7c:24:90:f7:9a:21:3c:ce:87:bc:1d:91:75:ad:
         5f:09:28:48:d3:8a:a5:8a:71:36:a2:b2:a5:8c:9d:41:8d:d1:
         a5:aa:d1:73:50:36:7e:60:93:f5:02:0a:0b:c7:c4:e7:04:df:
         03:ec:b7:f0:92:e7:97:54:b0:21:17:76:83:be:75:f6:1c:07:
         c3:7d:08:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCEB6ihJGu/jBAxXSC6xhyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzI2MDAyOGNkMmFiMWQwZTQzNzc0ZjQ0MDRkZWNkMjdh
ZWYzY2MwHhcNMjYwMjA5MTEwMTE4WhcNMjYwMjEwMTEwMTE4WjAzMTEwLwYDVQQD
Eyg3NDE5ODZiY2Y0MDY1MTkzZWQyMzIyMjkwYWQ1NjFmMTI1NmQ1N2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovcEpTblmwqnzNJHgjT0wIgkJoOm
cgxO8mwvnHsZF+dNKMYk/91W4Cmrp+5ESFEqopBItzitwxYzDgmxcLG1d7H8ebwS
pR9InNx7O1Zkzl1GKUu3fS24ShWROdl15U/deR94UwLvy2qrapqsVUsbVFQ8lade
AlSZ3OSZoLQZISmv7txLugA7GiBhZb9ol2KA0KP639+1uZnMl3JmUQJjhQsm/wF4
AXB7RVHJ8sRthLaSvMysbQaBzAvI03HCqJY9m/TWklxstITuyVHKvrUzrU9ktwEy
vKgKpifMLBkBOf76fyEEciLhrdzpW1CihZB5F9UtCyAETA4CJf4pMMwYpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQZhrz0BlGT7SMiKQrVYfElbVfVMB8GA1UdIwQY
MBaAFO3CYAKM0qsdDkN3T0QE3s0nrvPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmIt
ZmRjMjU4Mzc3MzAxLzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmItZmRjMjU4Mzc3MzAx
LzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIuoPK9g
7a2dx6GlwmFDftRxuGeTInaKjpHaMs64tYhBd7o5BV89NsEQ1lY2jNhRItay3LME
6yfsx8si7KHNSxYoDbz5UhXbq5kOii4FGTkqK+dE1DHcOPTRosYoUHr2NN+3knfW
8PHOgBJJLRTXEGkBgMK7aMFU5ml7GKq8dNVt5sh36pcv/BcjCAkKWpfnMCwBflRU
SkZzzeU0RsQ/GpjquYITJ/vkZOhuT5GjwMmMNscAhIwStnwkkPeaITzOh7wdkXWt
XwkoSNOKpYpxNqKypYydQY3RparRc1A2fmCT9QIKC8fE5wTfA+y38JLnl1SwIRd2
g7519hwHw30Iig==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:47 2026 by rpki-client