This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File:                     7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier:          EgKKzViwi7m3KrvjzoTAb6r3zE4S+2x9cFqzdzmW9HA=
Subject key identifier:   9D:ED:71:C0:2E:13:59:70:B6:C4:88:78:67:A1:69:A1:9A:10:38:E1
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer:       /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial:       019C439086854A216EEBEF5461A0EEF737C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number:          0EDD
Signing time:             Mon 09 Feb 2026 18:01:10 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:10 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:10 +0000
Files and hashes:         1: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: x87sLNSlALt5BS4KdMIe6nxWC5ZWB6Bi5XsAhyG35SQ=)
                          2: rkOQVmNrUrdY7_BGJo06hjnXKUQ.roa (hash: KQFoNA+jPIAj7lXy7/IWWZc0S9NISU/38W2iXUYI9HI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:86:85:4a:21:6e:eb:ef:54:61:a0:ee:f7:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
        Validity
            Not Before: Feb  9 18:01:10 2026 GMT
            Not After : Feb 10 18:01:10 2026 GMT
        Subject: CN=9ded71c02e135970b6c4887867a169a19a1038e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:00:90:74:23:87:a4:30:0e:0c:fe:0c:df:83:
                    2c:ab:b2:b0:2c:9d:cd:bf:aa:d2:b3:c3:07:2d:fa:
                    d8:d4:a4:d8:b2:62:6c:59:84:5b:35:0c:1c:9b:24:
                    75:18:b5:d5:34:c0:4b:a1:0b:73:84:e2:81:8c:60:
                    fe:6d:5f:53:71:30:61:90:cb:b4:ff:9c:d9:94:37:
                    e3:b8:f6:55:e9:2e:1b:0f:01:3b:6d:4c:23:1e:e7:
                    8c:c1:c8:dd:55:aa:ef:cb:a7:10:e0:71:38:59:13:
                    53:b6:09:26:aa:7e:11:d1:f8:85:e8:26:2c:4a:10:
                    78:15:01:46:a3:f6:47:29:98:cb:90:b4:95:55:69:
                    bf:1f:69:12:74:29:af:f3:2b:93:ef:8a:d3:9b:99:
                    a0:8b:4c:77:48:2e:d8:15:08:65:1b:27:0c:a1:fb:
                    a3:09:4c:86:47:8f:36:c8:69:27:40:73:21:8c:9f:
                    61:fb:16:b4:46:ac:e1:57:8e:7b:b2:46:c6:50:4f:
                    58:dc:e0:30:d7:a4:ce:6b:b4:cd:1e:38:84:92:2f:
                    62:e0:67:c2:53:d7:b2:9b:71:4a:13:a4:42:fd:9e:
                    a0:df:5a:7d:8d:c0:79:b4:28:ec:fe:b6:3a:6b:6e:
                    b0:94:1e:41:3b:14:83:bb:fc:a5:1b:cd:1c:75:62:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:ED:71:C0:2E:13:59:70:B6:C4:88:78:67:A1:69:A1:9A:10:38:E1
            X509v3 Authority Key Identifier:
                keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:6f:3b:a5:03:56:4e:aa:0c:2d:56:a4:96:57:e0:f1:8c:c9:
         78:e7:9f:c7:a4:42:9c:41:8f:87:6c:95:cc:28:27:26:45:89:
         1f:99:b6:d6:f6:d7:cc:bd:3f:af:29:22:36:fb:8e:af:1e:c8:
         cf:d7:f9:81:29:7b:99:45:85:ad:5b:ce:e4:1c:ac:47:9c:05:
         39:f9:39:03:07:45:a3:f2:62:22:60:dc:6b:01:76:dd:ed:6f:
         88:1f:92:eb:7a:8f:49:05:46:a5:a6:db:6d:a4:e1:87:06:af:
         3b:e7:68:a3:0c:f0:f8:76:93:99:04:ad:cd:0e:2f:c0:91:c1:
         6d:7d:41:a7:c5:e8:7c:80:81:69:2d:6c:d8:7f:50:87:8b:3c:
         ea:c9:96:d8:61:50:ba:3b:cb:55:38:32:17:23:b5:a6:20:40:
         97:4d:d6:3c:ef:6d:75:93:a4:51:67:2f:e8:79:a6:bb:be:7b:
         66:63:cb:cd:81:6f:58:b6:13:15:26:81:ff:19:84:37:06:7d:
         66:b1:5f:a9:1d:71:c1:1f:01:70:aa:4b:a9:a5:d2:61:99:d3:
         2b:27:c9:48:c9:db:94:5b:80:c6:21:6b:bf:dd:50:3c:ac:ae:
         c6:fe:8f:ec:ec:e3:82:5f:20:2f:31:da:f2:88:c1:3b:f6:07:
         8a:23:c2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:12 2026 by rpki-client