This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
File:                     Lt7Joglt7BA7ri18N5bg1HCFwgI.mft (raw, json)
Hash identifier:          8KyCwhL7jbNj4/6w/Co3iqiF8Mkutw7bnbHe61GRd64=
Subject key identifier:   63:CD:1D:81:B1:B1:71:81:29:69:F6:B2:73:DD:61:F9:84:13:8D:8B
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Certificate issuer:       /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial:       019C41D8C21F0B497932C0976C566B4D5E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
Manifest number:          073B
Signing time:             Mon 09 Feb 2026 10:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:50 +0000
Files and hashes:         1: 53lC0H3btLRtkl48pavEGuRV3es.roa (hash: MGSbnJd1vUZpt6uL4RTZOKaqC1aAoTugp6i9dh39DGs=)
                          2: Eu0i8M0_V6p9VckPVnggFrs-yL4.roa (hash: BboyrqZNZfIosj60BishiP+RH7BU4uq0hpH6SfCA1DM=)
                          3: Lt7Joglt7BA7ri18N5bg1HCFwgI.crl (hash: a76+TpyD2HQN4Ze5arQJ6KQs5yLciKOoTba5Fht/Nbw=)
                          4: bTs69bYVB-nOMaTSLibF1SO4Eto.roa (hash: WJimykzOdhEHHfw42LRu7rdMqeixLnYLozEu448aBRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:c2:1f:0b:49:79:32:c0:97:6c:56:6b:4d:5e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
        Validity
            Not Before: Feb  9 10:00:50 2026 GMT
            Not After : Feb 10 10:00:50 2026 GMT
        Subject: CN=63cd1d81b1b171812969f6b273dd61f984138d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:93:cd:af:39:7e:4b:e2:c6:4c:49:7f:e4:
                    03:fb:e5:6e:17:44:17:9d:d6:7b:50:b6:37:84:7a:
                    55:21:60:fa:3d:35:4b:43:b3:28:83:d9:f0:4f:21:
                    91:a1:51:a7:56:94:36:c2:d7:8e:e3:2a:47:9e:b6:
                    6b:f9:a8:94:d0:48:a3:69:40:96:fb:f2:e6:e5:53:
                    10:55:13:5a:51:28:b2:b5:7d:60:4f:b5:73:c3:e5:
                    bb:23:5a:6c:16:84:5a:ed:df:70:38:af:d8:0c:88:
                    f5:a0:9a:f0:20:82:9b:cf:db:cb:73:f3:61:77:59:
                    82:71:14:6d:09:b0:a8:91:bc:3f:67:2c:c1:bf:d8:
                    f4:3f:50:f0:31:f4:40:c1:4d:59:46:12:7a:c3:ce:
                    b3:d8:22:36:0c:5b:0e:13:43:fb:75:82:82:97:74:
                    71:ff:7c:b1:7a:6b:02:b1:ba:bd:1b:0c:77:a9:4e:
                    01:8e:79:fb:ba:64:ed:12:25:32:24:2a:d7:10:27:
                    31:a6:22:ee:4c:e5:85:1e:68:45:91:8a:27:de:c8:
                    23:36:99:d2:d7:fa:f8:be:fc:c7:0b:22:c3:6e:20:
                    51:b9:cc:f5:98:2b:47:19:15:58:a3:f3:15:c5:8b:
                    80:a5:52:84:05:6a:a2:e9:0c:1d:cd:69:84:1b:65:
                    22:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CD:1D:81:B1:B1:71:81:29:69:F6:B2:73:DD:61:F9:84:13:8D:8B
            X509v3 Authority Key Identifier:
                keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e7:e6:11:a8:fd:99:6f:e3:bc:35:e8:46:31:07:bf:e9:68:
         ab:d4:3c:3c:9e:fa:27:e2:35:d8:34:3c:bd:16:f4:4f:12:ab:
         6e:02:9a:f9:9c:2f:79:03:03:1f:1d:07:b1:45:4c:4b:7f:95:
         68:39:9c:5a:3d:0d:33:95:3b:64:0f:a6:1f:bf:4f:4a:5b:08:
         e0:4e:d1:af:d5:6f:0f:e3:71:46:87:f5:32:59:b6:d6:5f:c4:
         e3:d9:ff:a5:b2:b6:ee:8a:9a:52:8f:b3:ab:6b:94:32:1d:70:
         7d:75:41:e2:3e:8b:ef:fd:5b:3f:e7:e9:ec:69:d4:d0:19:c4:
         8f:05:ab:eb:b0:b0:ec:70:a4:32:af:04:36:c4:0b:dd:25:fc:
         4f:ca:a8:a9:e5:34:3d:04:c0:0c:13:19:a8:83:52:08:2b:86:
         27:66:24:ce:42:30:fa:42:8c:29:7e:61:7d:3a:7d:46:65:7d:
         00:00:de:a7:8c:76:4c:04:7b:0c:32:48:82:3d:2f:6e:62:48:
         fd:03:19:0a:0f:93:18:a0:d2:30:57:13:c0:aa:d3:a9:0b:cd:
         b9:51:00:91:49:28:75:f4:4c:9d:17:b8:14:a8:34:56:4e:1f:
         6a:a8:ae:8f:6d:1b:eb:2a:c1:2b:18:e8:93:76:d2:e7:93:99:
         b3:09:9f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:50 2026 by rpki-client