This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File:                     7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier:          aj9lY1QPrvWK6ZVJKOQJ04MA5l6tWwM5Sb/vhvDGwJk=
Subject key identifier:   54:8C:5F:F7:76:C5:1F:B4:5F:D3:1B:09:6C:B2:6D:96:90:75:08:75
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer:       /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial:       019C21DFFEEF41A98D918764D3D852BE0451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number:          1606
Signing time:             Tue 03 Feb 2026 05:00:53 +0000
Manifest this update:     Tue 03 Feb 2026 05:00:53 +0000
Manifest next update:     Wed 04 Feb 2026 05:00:53 +0000
Files and hashes:         1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: HRs/9yH8TrrkTuEG7CDAlqoEPJKppqAtAc63TzQHrw4=)
                          2: CM5yTRt39UsRzQIWzuT7HO7bzSE.roa (hash: RH4eRmyLdVDmBQ+RCsFz+zVNIdYG+Aj2Xj1CkOhS/oI=)
                          3: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (hash: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk=)
                          4: psWOMQeMbdYZeEJwNKNEAJmZbBU.roa (hash: Kwf/BATNuOaMCMQQKCC+7fI7j3/5LLVOOW7HAw/+s1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:21:df:fe:ef:41:a9:8d:91:87:64:d3:d8:52:be:04:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
        Validity
            Not Before: Feb  3 05:00:53 2026 GMT
            Not After : Feb  4 05:00:53 2026 GMT
        Subject: CN=548c5ff776c51fb45fd31b096cb26d9690750875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:14:5d:f1:89:90:a6:b5:f0:29:22:8f:4d:
                    b0:02:b8:be:3d:ea:5e:e4:99:75:d5:3e:62:4a:2a:
                    bc:61:1d:5c:d9:32:85:ee:46:a5:df:c2:01:90:ff:
                    22:29:ee:62:9c:b4:a6:db:f2:cb:6a:7d:35:45:91:
                    7f:fd:a5:7c:91:bf:68:b0:3b:36:09:0d:6b:ba:01:
                    b5:7b:ff:34:e6:68:ff:b1:92:2d:c5:05:90:0c:c8:
                    9f:39:9f:57:51:88:b8:17:eb:fa:fb:c6:4e:94:18:
                    c2:ad:0c:4a:c8:02:0b:2a:3b:13:a6:36:a9:3e:a1:
                    a9:d3:c1:2b:7e:15:eb:3f:7d:ca:ab:ef:02:0d:dd:
                    0e:d6:09:51:c7:77:36:96:bb:63:d0:4f:5a:89:e0:
                    70:20:07:f6:12:8e:49:41:c2:6b:8c:88:8c:51:b8:
                    9c:84:68:eb:93:c0:92:a7:f6:9a:83:6a:87:e8:9f:
                    2d:0c:b0:e6:31:45:3e:ff:00:7e:98:9a:d4:34:dc:
                    ca:0c:e0:11:bb:f1:48:cc:45:01:b9:a5:f1:4f:ed:
                    8d:06:02:7a:14:67:2a:30:0b:6c:04:43:97:7c:75:
                    12:c1:6a:d6:9d:9e:9c:07:f2:da:f5:8d:8c:2d:23:
                    f7:87:65:21:ae:ea:f8:9e:ef:68:bd:5a:62:cb:ee:
                    7d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8C:5F:F7:76:C5:1F:B4:5F:D3:1B:09:6C:B2:6D:96:90:75:08:75
            X509v3 Authority Key Identifier:
                keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:7f:86:1c:46:32:f8:01:ff:10:b5:9b:84:ef:3e:46:25:
         e4:8d:36:8c:6f:7b:81:5e:51:5a:48:81:d7:77:72:5b:81:f4:
         3a:36:53:56:b1:e0:7c:d8:f2:7a:ef:27:fc:11:14:ef:3f:c7:
         55:38:74:72:32:f9:36:6f:d7:2d:3a:b5:fd:be:8e:2e:ca:1b:
         e1:94:35:09:d2:03:89:3d:61:c8:9e:16:06:96:65:2d:30:26:
         6f:fd:52:ff:d7:ef:c4:be:05:f2:9a:ac:9d:25:63:7e:09:cf:
         04:79:f7:37:e4:39:78:43:87:23:8f:1b:37:2f:84:07:e7:45:
         9f:74:1e:ec:76:ad:96:fd:63:d2:4e:db:20:37:44:1d:f0:83:
         f8:0e:34:e3:14:37:85:96:99:97:d2:86:ae:3f:46:3f:72:2d:
         78:b7:17:5c:d2:72:f9:55:85:3d:10:03:67:b1:52:2c:b9:1c:
         47:11:35:0e:61:16:91:9d:5d:ef:20:a4:dd:62:9b:27:5c:05:
         97:57:f9:6e:8c:1f:e2:c1:a6:cf:99:bf:25:37:49:98:2c:ac:
         0a:74:7d:f9:ed:75:ce:ff:9a:fe:08:14:86:2b:ec:60:8b:13:
         d0:b9:6c:d9:c0:a8:92:67:86:6a:5d:f0:9e:62:53:c2:0d:3e:
         b5:41:10:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwh3/7vQamNkYdk09hSvgRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDk1NzhlNDk4MjVjNDJmM2MxMzFiOTRjYjBmZGRlNWM3
OWFkNzcwHhcNMjYwMjAzMDUwMDUzWhcNMjYwMjA0MDUwMDUzWjAzMTEwLwYDVQQD
Eyg1NDhjNWZmNzc2YzUxZmI0NWZkMzFiMDk2Y2IyNmQ5NjkwNzUwODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8cUXfGJkKa18Ckij02wAri+Pepe
5Jl11T5iSiq8YR1c2TKF7kal38IBkP8iKe5inLSm2/LLan01RZF//aV8kb9osDs2
CQ1rugG1e/805mj/sZItxQWQDMifOZ9XUYi4F+v6+8ZOlBjCrQxKyAILKjsTpjap
PqGp08ErfhXrP33Kq+8CDd0O1glRx3c2lrtj0E9aieBwIAf2Eo5JQcJrjIiMUbic
hGjrk8CSp/aag2qH6J8tDLDmMUU+/wB+mJrUNNzKDOARu/FIzEUBuaXxT+2NBgJ6
FGcqMAtsBEOXfHUSwWrWnZ6cB/La9Y2MLSP3h2Uhrur4nu9ovVpiy+59gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSMX/d2xR+0X9MbCWyybZaQdQh1MB8GA1UdIwQY
MBaAFO7ZV45JglxC88ExuUyw/d5cea13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYt
M2UxMGQxYWI3NDA4LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYtM2UxMGQxYWI3NDA4
LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPux/hhxG
MvgB/xC1m4TvPkYl5I02jG97gV5RWkiB13dyW4H0OjZTVrHgfNjyeu8n/BEU7z/H
VTh0cjL5Nm/XLTq1/b6OLsob4ZQ1CdIDiT1hyJ4WBpZlLTAmb/1S/9fvxL4F8pqs
nSVjfgnPBHn3N+Q5eEOHI48bNy+EB+dFn3Qe7Hatlv1j0k7bIDdEHfCD+A404xQ3
hZaZl9KGrj9GP3IteLcXXNJy+VWFPRADZ7FSLLkcRxE1DmEWkZ1d7yCk3WKbJ1wF
l1f5bowf4sGmz5m/JTdJmCysCnR9+e11zv+a/ggUhivsYIsT0Lls2cCokmeGal3w
nmJTwg0+tUEQCQ==
-----END CERTIFICATE-----
Generated at Tue Feb 3 08:16:27 2026 by rpki-client