This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File:                     7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier:          oqw+Xh9P2QaOVREeW7gAFOBCKS5N9KjExBayuh3GDbE=
Subject key identifier:   E5:93:72:34:C3:82:B8:5C:C9:43:52:7D:D6:C9:14:1E:E2:CD:44:1E
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer:       /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial:       019C43C6DD4938D5A418FFE9CDBE83B7D3C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number:          11A8
Signing time:             Mon 09 Feb 2026 19:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:32 +0000
Files and hashes:         1: 6UcUmEautvpvMnTzbqlUFFqwHPk.roa (hash: ixisQXZ4Rb1bn7n/nHLhuuBXi93MfJ/FXdmklcMC01w=)
                          2: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: 6S86PszuuTtKMAnciWHzWJYPq+yIOnRm2fhG12LhsHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:dd:49:38:d5:a4:18:ff:e9:cd:be:83:b7:d3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
        Validity
            Not Before: Feb  9 19:00:32 2026 GMT
            Not After : Feb 10 19:00:32 2026 GMT
        Subject: CN=e5937234c382b85cc943527dd6c9141ee2cd441e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:2c:42:69:cc:8e:c5:64:5c:93:0b:ef:70:
                    57:a1:41:aa:c9:40:09:94:ca:c7:d0:c8:93:67:10:
                    19:b4:66:0e:c3:99:00:7a:71:09:ef:ee:c9:43:cd:
                    80:a9:03:4d:f7:ea:fe:8a:ce:fa:af:d2:37:46:23:
                    2f:c2:3b:60:53:bd:d9:0b:7e:2b:84:b9:81:56:1e:
                    59:7a:5b:6b:4a:bb:fc:1c:70:59:53:5a:8a:e0:80:
                    6f:fe:ac:20:6a:3e:5a:78:49:49:0c:ac:61:6c:62:
                    95:3d:a1:28:36:03:11:4e:35:ec:a5:ab:03:8b:a4:
                    21:dc:37:29:81:25:2e:ea:af:48:8f:61:db:92:e6:
                    ac:47:45:b8:94:49:29:a4:b7:6c:c5:60:13:d9:68:
                    40:e2:76:dd:06:2b:c1:58:7d:6a:a4:bb:39:a7:0a:
                    35:ab:94:91:b5:ac:ff:ad:85:34:e5:ba:3d:dc:1d:
                    9b:91:7a:27:f2:27:94:50:35:24:2d:44:6a:80:2d:
                    5e:8d:16:cd:80:71:8e:0f:9b:15:de:30:3e:c1:96:
                    e8:d8:a9:e6:44:eb:c7:61:94:5a:8a:ac:4e:48:0a:
                    b6:90:0d:5e:71:1d:f2:cb:9e:d6:26:5c:a6:42:9e:
                    6b:50:70:ce:44:65:3d:b8:9f:95:a2:51:ec:4a:8f:
                    e0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:93:72:34:C3:82:B8:5C:C9:43:52:7D:D6:C9:14:1E:E2:CD:44:1E
            X509v3 Authority Key Identifier:
                keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d3:2b:3f:c8:6d:63:e9:24:1d:e1:cb:25:7e:e5:7d:3a:a3:
         ee:11:16:9c:72:50:43:0d:d7:f6:d3:a9:92:35:51:ed:b5:48:
         ef:d9:79:80:5a:1c:40:ee:e3:2b:d1:6a:4d:6a:ac:7c:cf:d1:
         33:c8:d1:ff:a2:17:7f:2a:84:e1:2d:8f:b0:6e:8e:27:75:12:
         8e:0d:d3:08:00:f9:c9:82:a2:94:97:1e:56:2c:d0:90:2f:4a:
         42:7b:63:55:79:e6:54:ab:24:04:85:40:88:06:8b:f7:0c:1c:
         aa:4c:41:88:3b:90:b2:b3:2d:e4:11:01:00:14:29:8b:24:af:
         e8:a7:33:7e:8f:0e:57:1f:a1:f7:ad:1d:e3:67:1d:31:d0:8b:
         d2:01:2e:5f:fe:b2:d9:61:e5:6a:95:44:4c:b5:b6:62:90:08:
         5b:e9:4b:1d:03:3a:71:0e:14:72:cd:de:6a:4c:71:7a:82:c6:
         53:bd:b5:27:ec:18:d5:e6:e4:80:78:b4:55:d4:e3:9a:1d:c9:
         50:e7:b3:3b:fd:e8:03:9f:3a:e4:ad:de:dc:b5:60:97:1e:d7:
         8a:12:29:dd:94:f0:82:06:5c:c1:d1:ef:48:15:ee:a1:3a:67:
         06:c1:49:b6:e8:e1:b2:dc:47:84:02:17:cd:64:6c:2d:89:04:
         df:39:75:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxt1JONWkGP/pzb6Dt9PFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZTVlZDQ1N2Y3NDM4MmE4ZWQwYjdhZjY4NmUxYWRiMjkz
NTIyNTAwHhcNMjYwMjA5MTkwMDMyWhcNMjYwMjEwMTkwMDMyWjAzMTEwLwYDVQQD
EyhlNTkzNzIzNGMzODJiODVjYzk0MzUyN2RkNmM5MTQxZWUyY2Q0NDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWIsQmnMjsVkXJML73BXoUGqyUAJ
lMrH0MiTZxAZtGYOw5kAenEJ7+7JQ82AqQNN9+r+is76r9I3RiMvwjtgU73ZC34r
hLmBVh5ZeltrSrv8HHBZU1qK4IBv/qwgaj5aeElJDKxhbGKVPaEoNgMRTjXspasD
i6Qh3DcpgSUu6q9Ij2HbkuasR0W4lEkppLdsxWAT2WhA4nbdBivBWH1qpLs5pwo1
q5SRtaz/rYU05bo93B2bkXon8ieUUDUkLURqgC1ejRbNgHGOD5sV3jA+wZbo2Knm
ROvHYZRaiqxOSAq2kA1ecR3yy57WJlymQp5rUHDORGU9uJ+VolHsSo/gLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWTcjTDgrhcyUNSfdbJFB7izUQeMB8GA1UdIwQY
MBaAFO3l7UV/dDgqjtC3r2huGtspNSJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2VYdFJYOTBPQ3FPMExldmFHNGEyeWsxSWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNGRjMzktN2Q5Yi00YjViLTg1OTMt
NWE1ODM4ODAwMjhhLzEvN2VYdFJYOTBPQ3FPMExldmFHNGEyeWsxSWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lNGRjMzktN2Q5Yi00YjViLTg1OTMtNWE1ODM4ODAwMjhh
LzEvN2VYdFJYOTBPQ3FPMExldmFHNGEyeWsxSWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtMrP8ht
Y+kkHeHLJX7lfTqj7hEWnHJQQw3X9tOpkjVR7bVI79l5gFocQO7jK9FqTWqsfM/R
M8jR/6IXfyqE4S2PsG6OJ3USjg3TCAD5yYKilJceVizQkC9KQntjVXnmVKskBIVA
iAaL9wwcqkxBiDuQsrMt5BEBABQpiySv6Kczfo8OVx+h960d42cdMdCL0gEuX/6y
2WHlapVETLW2YpAIW+lLHQM6cQ4Ucs3eakxxeoLGU721J+wY1ebkgHi0VdTjmh3J
UOezO/3oA5865K3e3LVglx7XihIp3ZTwggZcwdHvSBXuoTpnBsFJtujhstxHhAIX
zWRsLYkE3zl1Xw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:45 2026 by rpki-client