This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File:                     d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier:          jVldftgqm2Nmx+1wdgst+4JDuZQ5vkFSWXx/FVUWaEY=
Subject key identifier:   82:83:E9:4E:39:43:63:6E:71:12:77:E0:C7:49:02:AA:22:97:41:14
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer:       /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial:       019C427DA3470BDE2B5291E506DDD9E59607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number:          0586
Signing time:             Mon 09 Feb 2026 13:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:55 +0000
Files and hashes:         1: 1uDiO66z4_GJhppKD5iOYZne4xo.roa (hash: njjChOiFqIrX1FbvslTiBWjd0QGU3XMKBcIu3VrqVf0=)
                          2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: dmeDzi1Gd3UYKwNtzzOt97y6y6oqcWjLFuBznKKMxGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:a3:47:0b:de:2b:52:91:e5:06:dd:d9:e5:96:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
        Validity
            Not Before: Feb  9 13:00:55 2026 GMT
            Not After : Feb 10 13:00:55 2026 GMT
        Subject: CN=8283e94e3943636e711277e0c74902aa22974114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2b:06:3e:64:08:21:8f:97:82:d0:7a:7a:42:
                    d3:13:fa:0c:a7:5b:f4:ba:05:da:bd:46:86:ec:a0:
                    ec:88:a9:31:57:19:50:ff:98:26:4f:94:c0:00:21:
                    c8:f1:29:b2:d9:a1:00:9f:bd:cc:dd:10:72:25:28:
                    85:de:21:4f:14:2f:2b:fe:e9:40:f1:20:34:5b:04:
                    14:99:02:53:7e:b5:1d:33:01:b1:26:10:31:16:b4:
                    52:bf:65:47:cd:e2:c1:d1:20:a5:ee:2d:70:e1:dd:
                    6e:0e:7d:e2:43:f9:08:94:4d:e0:d5:03:a9:67:32:
                    ba:0d:ae:7a:86:6d:a2:68:43:f6:83:98:67:82:9f:
                    37:db:b2:ef:df:fc:e6:4d:8a:7b:b2:e8:79:0a:80:
                    82:07:78:5f:63:40:9a:97:27:04:2e:3e:2d:4d:8c:
                    e2:28:27:d6:a6:24:48:fc:23:89:34:a3:c0:a2:4a:
                    a8:86:3c:0a:54:3c:94:c4:08:11:88:61:0c:da:8a:
                    eb:84:d5:f0:c4:5f:82:93:c2:22:b1:34:47:35:dc:
                    c1:81:18:26:de:67:97:2d:ad:76:b0:df:cc:a8:5c:
                    ca:4f:2a:e3:31:3a:35:f6:6b:50:ba:a1:33:0e:ff:
                    1d:50:7c:e4:20:34:5c:49:5d:cd:9b:90:2e:cb:bf:
                    2d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:83:E9:4E:39:43:63:6E:71:12:77:E0:C7:49:02:AA:22:97:41:14
            X509v3 Authority Key Identifier:
                keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:69:31:71:5e:9f:7c:1f:ed:5a:4d:ec:be:6c:b3:bb:9f:36:
         d6:38:43:f1:2a:0b:6d:97:b7:f9:54:54:fb:56:5e:1a:57:3e:
         40:7f:3c:4d:eb:ac:20:96:ef:90:40:13:3b:4a:ac:5d:bf:0e:
         b3:5a:63:93:5e:e9:1c:9d:b8:ba:72:f0:ce:7c:25:0b:b2:40:
         e5:00:4d:ff:c2:fc:1b:2c:de:f1:a6:70:83:41:0c:d6:02:d9:
         d6:bf:9c:94:4f:02:ff:74:d3:05:72:f6:eb:26:88:20:d4:97:
         20:b0:24:5b:e1:b2:8c:f8:5f:61:18:10:1c:af:60:79:c8:6c:
         d7:a3:d1:a8:f9:2f:bc:b3:64:e3:3f:86:13:97:72:1a:f9:a7:
         95:0d:89:48:2d:4b:35:33:71:53:08:89:5b:cc:bf:35:0f:d3:
         84:0d:da:7d:5d:25:51:a2:5b:28:46:8a:71:c9:df:28:2f:95:
         c4:1b:ca:56:18:9e:0e:a9:28:d2:12:00:7e:b3:35:5a:40:a2:
         1d:7f:45:00:71:af:2d:90:93:76:57:d0:72:e8:1e:61:bb:9b:
         fb:ac:3b:35:bd:81:a4:21:a4:32:89:05:91:fa:7c:c7:8c:17:
         f1:d8:fe:15:1d:7f:ff:ad:12:05:b7:ea:cb:b8:07:18:1e:91:
         88:85:5b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:04 2026 by rpki-client