This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
File:                     7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json)
Hash identifier:          tfsigWsWeb7S3KXdhWKvfmD3RWnooJVNMCJd6GvFAMc=
Subject key identifier:   75:16:1C:DD:74:9F:71:76:F1:AD:BE:F4:25:7F:E4:D8:E9:91:34:75
Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
Certificate issuer:       /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Certificate serial:       019C4246531BCF360394632B6E28C27EB47A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
Manifest number:          0791
Signing time:             Mon 09 Feb 2026 12:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:30 +0000
Files and hashes:         1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: vTxDrHE27pJZ5rb6Cp7rpKzLCQ17xaYJ4Ge1lD5iCjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:53:1b:cf:36:03:94:63:2b:6e:28:c2:7e:b4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
        Validity
            Not Before: Feb  9 12:00:30 2026 GMT
            Not After : Feb 10 12:00:30 2026 GMT
        Subject: CN=75161cdd749f7176f1adbef4257fe4d8e9913475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2c:b5:ca:db:4c:ab:2c:b2:2b:36:6e:85:a5:
                    bf:f6:4e:82:a6:4b:55:81:e6:e9:83:4e:82:09:5a:
                    4e:31:54:3c:1c:2e:9e:02:20:b1:9d:6a:4b:bb:bf:
                    e5:65:b5:59:91:fe:4a:02:ae:da:99:91:1f:ac:b1:
                    85:3e:a2:7e:fa:14:09:7e:45:d0:e6:2e:e7:fc:98:
                    e3:40:56:a4:57:cd:3f:d1:66:45:14:b9:a5:a7:5e:
                    45:96:01:32:48:48:69:ff:2b:41:72:d8:6d:00:a2:
                    4e:e1:be:61:81:1e:04:9c:7e:ea:7c:3f:89:6c:ab:
                    c8:58:a5:4f:21:08:df:75:8c:93:50:14:93:77:be:
                    e7:da:53:bd:d1:37:b8:b3:1a:c1:39:0f:b5:b3:53:
                    c5:5c:6d:f1:02:cc:c4:47:ee:39:46:a8:31:d7:26:
                    ba:a7:99:1f:1f:ab:b7:cf:37:75:8a:38:98:74:83:
                    81:c5:b6:78:17:3d:6e:eb:fd:ab:62:25:7d:df:ab:
                    e9:df:0a:87:f1:8f:6a:db:47:10:d3:2c:c2:9a:2c:
                    f7:80:ae:2b:93:bf:8c:2b:0c:c0:3f:92:98:d0:50:
                    dd:29:cf:23:8d:c1:ad:26:db:6c:9c:c4:0d:93:7d:
                    7b:6e:44:07:0c:a8:ed:8f:95:8d:91:ab:97:6d:ab:
                    d2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:16:1C:DD:74:9F:71:76:F1:AD:BE:F4:25:7F:E4:D8:E9:91:34:75
            X509v3 Authority Key Identifier:
                keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:97:63:a9:8f:d5:98:b2:60:9d:b1:99:56:35:be:47:09:2e:
         c7:e6:71:c8:9c:0c:14:7e:93:9b:cd:c1:d9:0a:1c:8c:7f:d2:
         3f:f9:c4:7f:ed:0e:15:aa:02:a3:80:f8:57:f7:45:77:b4:17:
         b0:4f:67:7e:98:6a:90:a5:26:42:11:3d:5e:1e:4d:30:b6:01:
         35:e5:70:48:09:d4:2e:01:17:90:d8:7b:a5:0d:e9:4b:01:05:
         ac:51:30:03:36:5f:2b:32:68:90:b7:70:df:04:f8:af:21:b0:
         6c:4f:ca:ce:9d:3f:f5:36:37:ae:6e:32:65:a3:05:f1:28:6f:
         77:7a:4b:6d:b7:b0:fd:c3:d7:12:b7:9f:6b:43:34:a8:93:a1:
         64:3b:21:5c:c2:1a:74:c1:b6:a8:ed:7d:43:ff:39:4f:69:ef:
         e9:f2:fd:da:f0:00:ff:a7:7c:bd:5d:c4:e7:cd:07:24:da:07:
         de:db:86:7a:36:88:ca:ae:e4:55:38:79:55:93:fe:df:7c:bb:
         5a:41:fa:c0:87:55:6b:6d:77:3d:06:82:6a:6c:f8:9c:2b:57:
         25:d6:12:72:a8:3c:6c:00:0e:a4:65:7c:dd:46:93:f4:75:d4:
         5f:e0:66:a9:9b:de:4a:6d:21:d4:78:0d:d0:1b:1c:34:b4:62:
         41:53:41:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:39 2026 by rpki-client