This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File:                     7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier:          7TUj2iozxhKVSI/LfcCgR0eMepnrlfADNvBiRPnQiX8=
Subject key identifier:   80:1C:C6:40:8F:CE:39:2A:BD:66:53:8D:45:F6:95:93:72:D4:9E:3F
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer:       /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial:       019C427D39031D2A5F5946E7261F480C8142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 13:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:28 +0000
Files and hashes:         1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: 4XbeCOcb2PLBBl80ZFbgUAAmZQ/z/rLgv5a/7433Gfw=)
                          2: TPFA9ANmjeizoRraD4Ig8TEK1SU.roa (hash: kT6UPV2xN7mmP7EqC+AR1+y3Fgn76QDWPblq40BQx1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:39:03:1d:2a:5f:59:46:e7:26:1f:48:0c:81:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
        Validity
            Not Before: Feb  9 13:00:28 2026 GMT
            Not After : Feb 10 13:00:28 2026 GMT
        Subject: CN=801cc6408fce392abd66538d45f6959372d49e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:47:ce:6f:8c:a3:90:ff:48:c0:bd:e3:7b:8d:
                    4a:40:c5:4c:80:2c:a2:d5:e2:33:cb:ea:f0:e9:23:
                    02:aa:e8:fa:17:c2:66:7e:b2:9b:9d:7c:93:9d:5b:
                    1d:12:30:c2:3b:a8:68:f5:65:28:a0:b3:f6:7a:14:
                    d7:97:c0:e1:b8:a0:c3:45:63:1a:c3:dd:dd:2d:aa:
                    82:34:2a:0f:87:63:3d:6f:50:af:e7:19:e0:41:da:
                    1a:32:c6:e0:48:71:bf:93:fe:c6:28:c3:78:47:1e:
                    56:10:1e:4f:4d:d2:dd:26:83:b7:1b:26:ce:52:67:
                    62:52:5d:31:3e:3f:cb:65:08:92:15:05:b5:3f:64:
                    11:d5:65:81:63:45:d6:10:6f:d5:63:0a:45:97:20:
                    82:c7:6a:7e:f6:a2:0e:4a:19:97:5a:f1:0c:2e:6f:
                    d2:6b:6e:69:f5:50:0e:58:7a:e3:da:d2:27:ee:18:
                    c4:f9:d2:13:95:a0:38:85:76:9e:7c:ef:47:0b:7e:
                    3c:32:c2:8e:18:79:ea:19:62:ce:e8:53:5b:2a:d2:
                    71:fb:be:6b:26:dc:d4:ad:60:29:80:5b:92:bf:ae:
                    9a:95:d2:ef:e2:26:5d:05:bd:2e:e5:72:29:9f:eb:
                    ca:e5:d3:79:81:f5:8b:51:4b:ce:8e:55:34:a3:f3:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1C:C6:40:8F:CE:39:2A:BD:66:53:8D:45:F6:95:93:72:D4:9E:3F
            X509v3 Authority Key Identifier:
                keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:95:ec:bb:05:fb:46:6b:96:27:b6:e7:e6:82:24:f2:d3:28:
         7b:b8:9d:97:1e:be:28:f5:b5:28:85:dd:31:dd:f9:44:9e:64:
         01:af:a1:a8:a1:5b:4f:38:3b:1f:9e:e3:70:2a:03:76:5d:a3:
         70:da:fe:75:df:ad:c5:e6:4b:a4:ed:60:8d:62:88:79:7d:4d:
         0e:64:31:d6:50:46:81:80:57:0d:f9:9e:7b:8e:e8:2c:c3:0e:
         2d:e2:d3:9b:ad:d1:66:fd:dc:cc:78:53:de:fa:d4:2d:1d:65:
         d9:48:2e:f6:6f:6a:0e:cd:c2:f8:87:60:57:1b:63:b6:4c:d4:
         e5:3c:50:b0:8d:3c:5c:33:23:ff:e1:ec:c5:29:95:db:7d:8f:
         47:3c:d0:d7:86:2f:b8:99:0f:74:1b:f6:8f:d8:46:5f:33:cf:
         72:0c:ef:5b:eb:70:0b:07:d7:da:b8:4b:a7:ad:4c:23:f5:a0:
         a6:53:db:82:ba:18:9d:03:35:ec:8c:5d:d4:9f:e0:ec:70:ef:
         2b:93:cd:c5:3a:ff:c6:f6:c1:ec:57:c5:ca:7f:55:ac:e6:15:
         9c:98:95:5a:f3:84:2c:91:99:00:d2:60:4e:aa:9f:86:d4:f7:
         2c:07:29:86:5b:ca:25:76:a3:ea:87:d5:08:2e:83:35:da:04:
         1f:79:1a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:01:56 2026 by rpki-client