This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File:                     7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier:          3Q4nwwZGVt3ONMvnEg03tUBPuQzTCWbsk8Ai5bJpWz4=
Subject key identifier:   A6:D6:B5:3D:16:27:D9:F7:03:9A:0F:6F:D1:52:E3:9E:F2:09:7C:E9
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer:       /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial:       019C213AF5AB6200C4F0E14761038C9D7BC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number:          17FF
Signing time:             Tue 03 Feb 2026 02:00:37 +0000
Manifest this update:     Tue 03 Feb 2026 02:00:37 +0000
Manifest next update:     Wed 04 Feb 2026 02:00:37 +0000
Files and hashes:         1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: M1iqXGV2wLpoBVu1vTVluOqDVYDGhl90MwocClwszpU=)
                          2: jI0W3FXepCGwUQYooUrSqFApgnI.roa (hash: ywNZ9Hr6Ek5jRSdgINiD2gJAFEBiWAjLS61c7FwJ6mA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 21:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:21:3a:f5:ab:62:00:c4:f0:e1:47:61:03:8c:9d:7b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
        Validity
            Not Before: Feb  3 02:00:37 2026 GMT
            Not After : Feb  4 02:00:37 2026 GMT
        Subject: CN=a6d6b53d1627d9f7039a0f6fd152e39ef2097ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:99:59:97:44:7e:87:2a:e9:0a:37:29:c7:
                    64:a4:0d:14:4d:e5:9c:c3:9a:fb:1b:1a:70:1f:72:
                    24:1f:cd:bb:0b:ba:ec:08:7c:b6:c5:79:63:2f:06:
                    a5:6b:a2:4d:29:b0:13:95:a0:e2:2b:d5:90:99:86:
                    74:2c:23:59:46:24:5e:2f:16:ad:60:0e:b7:96:52:
                    1c:4c:28:a2:06:d1:de:f1:45:50:54:62:5b:15:ff:
                    0b:06:9e:d6:66:f8:c3:5e:88:a6:1e:cd:18:76:7a:
                    56:74:8f:30:97:67:de:6e:e3:f2:f3:71:5e:a2:dc:
                    a2:e7:1a:85:83:ce:a5:d9:5e:02:6d:54:89:21:b8:
                    55:2b:ed:b2:29:97:68:50:14:14:ae:2d:04:03:10:
                    a3:5c:37:fe:75:c9:1c:61:d0:f0:b8:29:16:db:a0:
                    94:05:26:2d:51:53:57:d1:18:84:48:8f:d1:49:4c:
                    4b:d8:30:d7:e1:d9:bd:41:db:31:4f:df:c7:6a:d9:
                    e8:02:f8:c5:d2:ae:98:27:dd:89:27:ce:39:ba:11:
                    e8:72:af:d4:c3:40:44:71:90:b4:55:b4:23:b6:f5:
                    0d:2e:5a:49:db:a6:93:f7:ad:c1:e8:79:9d:65:68:
                    23:b8:15:21:54:8c:b9:8b:60:8b:61:fa:39:0f:04:
                    ea:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D6:B5:3D:16:27:D9:F7:03:9A:0F:6F:D1:52:E3:9E:F2:09:7C:E9
            X509v3 Authority Key Identifier:
                keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a9:16:e5:c2:81:50:89:2f:8c:d6:66:20:97:7a:1e:61:65:
         6b:ab:85:81:f1:96:24:52:9d:03:f3:62:ed:44:fd:1a:e8:d3:
         c1:04:d5:4b:c1:c0:3c:b4:7a:8f:37:1c:7a:a3:1b:4c:8a:a1:
         c6:45:3c:1d:f2:19:a2:6c:50:3f:87:c4:12:51:0e:35:16:f7:
         95:88:11:76:0c:fa:40:90:bf:6c:bb:33:2f:51:f8:ea:d4:8b:
         05:4f:d5:ba:8c:51:ec:09:09:86:4b:4d:fe:89:8f:e5:e9:9e:
         66:18:16:2b:7f:02:2f:ab:9c:0e:f8:ca:c4:f0:19:0d:27:74:
         a6:dd:1d:9b:90:f6:ad:47:c1:df:8b:f4:ad:e8:b7:28:44:dc:
         f2:f2:cb:e5:e0:c3:ec:73:3b:62:9d:0f:82:3a:c4:05:b6:e7:
         87:07:29:86:93:b9:21:ef:d2:33:cf:0f:fd:75:2b:70:5d:84:
         ee:a7:e0:b7:ca:a8:e4:d1:71:24:7d:67:86:8a:c4:e2:b9:5f:
         b8:c7:f5:a6:ca:4d:52:45:e8:97:c5:a0:97:21:c5:01:38:0a:
         64:9f:3c:63:4b:ff:9a:ec:3a:f7:82:2e:df:8a:17:3b:cf:58:
         7c:50:f6:48:69:cc:34:36:f9:47:d1:8f:e6:73:bf:77:41:b5:
         4e:ab:ad:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 05:07:17 2026 by rpki-client