This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
File:                     R7dw6sinNj9MuKiMLjbi1pSzkGg.mft (raw, json)
Hash identifier:          bZIpBQfgk6Z+2D2J4632b/iAZN3FmtJyDumZeprWBfQ=
Subject key identifier:   6D:53:51:74:D3:E5:86:1C:B2:1B:AB:F7:87:AE:29:CF:27:5E:4B:4D
Authority key identifier: 47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68
Certificate issuer:       /CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
Certificate serial:       019C42B463A940048FE085F328E0EE66EC25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 14:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:43 +0000
Files and hashes:         1: R7dw6sinNj9MuKiMLjbi1pSzkGg.crl (hash: rZy5ONcjeaWR9x1rnuekZVDULZevRGjV4pnOzrcf7ks=)
                          2: m_N6zuF76AsaCUGQs71sdToHbJg.roa (hash: 2pXRFiOGH3pgxbp6euZer/YonnO8QL6uCJS8rXSdScA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:63:a9:40:04:8f:e0:85:f3:28:e0:ee:66:ec:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
        Validity
            Not Before: Feb  9 14:00:43 2026 GMT
            Not After : Feb 10 14:00:43 2026 GMT
        Subject: CN=6d535174d3e5861cb21babf787ae29cf275e4b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:58:46:28:83:04:9d:77:68:b0:c7:21:f3:
                    8b:70:5e:0a:f1:bf:53:17:2e:64:ea:34:27:c8:f2:
                    90:9a:b0:bd:90:6c:d5:59:fd:45:5c:58:e8:2a:d9:
                    8c:94:ad:fa:b1:9f:bf:4d:c9:db:fa:11:e2:d4:57:
                    60:27:28:31:dc:91:af:b2:40:c9:6d:05:32:5c:7f:
                    09:4b:71:5a:65:77:08:eb:55:b8:ae:16:e6:e7:b9:
                    b3:12:20:75:a5:d6:e0:b5:eb:de:99:61:4f:85:ab:
                    ec:26:8c:bb:31:a0:f4:26:72:61:ae:8e:1b:5a:4f:
                    ca:28:79:70:9d:a9:92:32:e1:2c:c3:ac:6d:14:3d:
                    49:8b:26:fb:6e:ea:37:fa:ac:e1:b1:7f:38:a1:4b:
                    02:9c:1b:6f:7a:4c:91:8c:75:ba:f5:ae:50:f8:63:
                    07:dd:08:c3:6f:ec:30:82:9d:11:3d:de:58:15:3c:
                    f3:71:bd:4c:06:c1:25:5f:d9:06:a3:6e:63:0e:ac:
                    51:e3:c0:ef:e8:e4:e1:97:90:9e:b1:08:94:c9:1a:
                    8c:25:56:d2:84:84:f2:18:1f:a4:5e:93:d0:66:07:
                    42:fe:43:1a:93:aa:e6:dc:d8:0b:74:d9:5a:1d:d6:
                    8a:22:6c:d9:fa:73:51:a2:80:44:f0:8a:7b:d5:2c:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:53:51:74:D3:E5:86:1C:B2:1B:AB:F7:87:AE:29:CF:27:5E:4B:4D
            X509v3 Authority Key Identifier:
                keyid:47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:84:5a:10:95:77:85:c5:dc:df:c1:bd:90:37:7a:69:a9:b9:
         0a:f5:1a:5f:36:72:f4:10:5c:e1:00:e3:a9:38:df:a4:51:a8:
         90:0c:3d:13:44:40:24:9a:2c:45:79:a6:c5:1b:08:ad:51:e2:
         e6:95:d9:22:30:59:1b:88:8d:7d:84:0b:a0:81:a6:1d:8f:97:
         b3:24:33:cc:7e:a6:ca:c8:3d:3e:bb:a8:78:b6:a3:56:e9:ba:
         66:45:c6:84:3c:42:ab:94:87:e0:4e:a2:3a:db:8b:7f:df:5b:
         3f:97:d0:e6:5a:de:7a:ee:eb:43:36:84:3e:41:9e:f7:58:8b:
         36:a0:03:88:f3:92:cd:bf:b4:3a:a5:ad:7c:bc:a7:0d:e9:f0:
         ec:c0:ca:bb:47:62:b1:8f:fd:8d:ae:14:79:bb:45:e0:d9:3b:
         a0:ed:cf:4e:cf:a6:a3:a7:6f:b9:05:e2:6e:ee:60:60:cb:31:
         e0:bb:c1:a0:2f:57:fc:cd:d3:c6:5d:49:60:56:57:f0:da:07:
         d6:70:84:db:c7:24:82:94:d2:9f:45:77:5d:92:bf:f5:f2:b0:
         80:9e:4e:b6:3f:f0:bd:db:1e:eb:25:c7:fc:a6:5b:60:a9:2d:
         67:75:c8:cd:1d:ec:4c:50:bd:bb:f8:ca:26:fd:db:0b:ef:67:
         c7:26:35:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:30 2026 by rpki-client