This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
File:                     7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json)
Hash identifier:          vIyhHtDJrHDTVuqnQoTn6xzhv+XhCdUBU1xlVELCMgQ=
Subject key identifier:   52:59:B5:F0:E2:22:08:5F:44:72:04:41:F8:89:46:68:1C:C0:92:A8
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Certificate issuer:       /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial:       019C43C69A8D92567DCE8999324249B8B5E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 19:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:14 +0000
Files and hashes:         1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: BF9n9jG9+dCHnuPw3S+HUHIBSimviAk0qJrY6aINi5o=)
                          2: Rrw9o3WCpwNOEYYVtK8wHu_QJkY.roa (hash: 6I0ghzBeN79J1UAgpVFm5cx7tXZBN44byXnGOpV99sA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:9a:8d:92:56:7d:ce:89:99:32:42:49:b8:b5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
        Validity
            Not Before: Feb  9 19:00:14 2026 GMT
            Not After : Feb 10 19:00:14 2026 GMT
        Subject: CN=5259b5f0e222085f44720441f88946681cc092a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:95:21:f4:58:c2:eb:b8:8f:3f:5c:2f:3b:85:
                    c2:8c:ef:29:27:1b:7a:b3:8d:d7:1d:04:4a:d0:73:
                    27:95:74:81:d0:dc:5f:f4:ba:c8:45:b2:63:cb:b1:
                    7b:b1:c0:da:fb:46:ae:6c:20:5a:35:f3:6e:2c:fb:
                    a5:e1:56:3a:ef:03:6d:b1:c1:59:45:25:46:de:dc:
                    34:7b:b4:35:94:83:93:3d:2e:58:fe:17:e7:90:6e:
                    bd:e0:0e:88:1b:c3:f6:34:1a:ea:1a:45:8e:b8:a0:
                    c8:96:47:b6:f3:3d:f9:f5:1b:2b:30:09:8e:51:67:
                    a7:aa:4a:2c:d0:ec:9f:e6:76:f1:7e:67:70:5d:65:
                    88:0f:7e:66:c3:56:62:ce:c8:eb:03:58:55:4c:3c:
                    70:93:3d:da:59:bd:40:66:e9:1d:57:a0:d4:c9:68:
                    56:80:16:e0:f9:5b:03:be:f5:bc:18:fd:73:ee:ca:
                    37:9d:31:58:f1:27:c4:53:8d:6c:bf:40:d2:29:65:
                    23:de:73:2f:78:16:9b:80:82:af:73:47:49:6b:ae:
                    50:cb:82:2e:49:86:ad:02:7c:33:cb:cc:9d:45:7d:
                    05:25:1b:a1:b2:7a:5f:ca:95:2b:d3:a5:9e:0d:0b:
                    75:a3:22:27:32:3c:4d:96:c2:75:e6:07:69:16:40:
                    d3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:59:B5:F0:E2:22:08:5F:44:72:04:41:F8:89:46:68:1C:C0:92:A8
            X509v3 Authority Key Identifier:
                keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a0:4e:63:a9:82:dc:ce:ee:1e:2f:bb:6c:76:d2:b2:b3:a5:
         72:5f:62:8e:37:44:65:9a:2b:57:c0:51:87:fd:a8:85:76:79:
         70:4e:a7:ce:78:1c:2e:70:50:94:89:84:56:1b:14:18:e4:0a:
         a8:75:3d:d5:d5:1a:d1:de:2d:f4:67:a6:73:68:a0:24:cb:2c:
         63:e0:87:80:a3:17:12:c1:9d:b7:b8:c8:e0:54:25:7a:13:04:
         d7:e3:9b:fa:b8:cf:ec:46:d9:40:ed:24:ce:fb:0c:36:33:af:
         65:57:ce:56:c8:e2:53:99:3b:c9:9f:b1:0e:53:ba:29:05:e4:
         89:5e:ff:a9:7a:b7:60:2f:e2:9a:ea:61:f2:ca:06:9d:07:2f:
         14:e6:88:a6:d4:56:24:41:68:92:18:70:b9:e4:cb:95:7f:23:
         21:e3:6c:d1:39:fc:18:5f:65:57:6d:e8:46:c9:77:f2:22:d3:
         eb:20:e7:f0:23:58:04:31:81:a2:b6:84:d2:4b:97:bb:7e:d2:
         2f:46:dc:d0:19:e1:e2:fd:19:d6:57:c8:f7:77:ce:0d:2d:a5:
         2f:b5:97:63:b2:46:af:be:ea:4a:82:41:c5:2c:ed:ce:35:67:
         df:88:c3:d5:cc:b9:20:47:29:89:48:7f:af:99:b9:21:c1:c4:
         6c:91:45:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:59:26 2026 by rpki-client