This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File:                     7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier:          68Na1kPQMRLirqrYEnLweo7q46cBdoNxSRCexy5Bvvw=
Subject key identifier:   BB:76:DC:06:D1:1D:9D:1D:21:C1:75:51:A1:4F:DF:46:DD:5B:08:A0
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer:       /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial:       019C427DDE4D96D00A60BE84857589C5B304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 13:01:10 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:10 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:10 +0000
Files and hashes:         1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: n2Ahr56xbg0ioumQu8pjI7YEavIKQU8ZB5pX3SqqdH4=)
                          2: dDrbN1EnOvhkFc0_xZRFXvcNr40.roa (hash: 4F6zFoAlaZyrQw6r2Sapl4Rve7y38xHZ2sxhWgQcUxI=)
                          3: vqQIJ63USJ6tNbfIvkmeDNaWV-8.roa (hash: OsN69G3y8PdNZsFJ8bznX8F2lLtEi2mXTwt/+VGM68k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:de:4d:96:d0:0a:60:be:84:85:75:89:c5:b3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
        Validity
            Not Before: Feb  9 13:01:10 2026 GMT
            Not After : Feb 10 13:01:10 2026 GMT
        Subject: CN=bb76dc06d11d9d1d21c17551a14fdf46dd5b08a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:b7:e0:40:90:b0:e4:a0:d9:c3:51:d2:a0:
                    16:e5:ee:6d:9a:fe:14:67:ab:e2:0b:bc:3e:4f:08:
                    08:a6:30:63:92:3c:9a:c5:14:3d:5c:2c:46:cd:30:
                    b3:e2:bf:7a:1e:5c:9a:17:72:a2:0e:d6:75:a7:bb:
                    8d:88:3c:c4:68:11:89:26:b1:e7:34:a2:16:f1:b4:
                    66:b1:f8:5c:6c:dc:6b:61:34:1a:e2:d0:36:ab:4b:
                    b8:f9:a9:82:2b:da:f9:4c:da:9a:ab:b2:ee:a6:c5:
                    3d:f3:c7:32:22:85:49:42:f3:db:2f:78:20:cc:dd:
                    73:0e:ae:e8:3d:61:52:26:1a:a8:13:eb:13:a6:fd:
                    8e:a4:ca:e7:af:20:1a:42:d4:1a:87:2f:25:9e:32:
                    f7:e7:cd:89:ce:d8:5e:7e:48:2d:15:5b:1e:c0:fb:
                    00:11:3d:35:fe:e1:c6:cd:f0:34:7f:43:0b:63:02:
                    b2:db:f5:49:06:1b:df:a9:b5:0b:ac:83:a5:db:55:
                    34:91:27:67:f2:3a:de:45:5f:77:e6:6c:7d:91:a9:
                    59:d7:89:98:5f:e7:b2:fa:96:dc:39:3b:16:ae:fa:
                    6a:78:22:9b:a4:d6:c0:45:53:d4:1b:9c:0d:1f:e3:
                    c9:7a:c7:64:71:2e:91:55:cf:e1:07:69:de:59:01:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:76:DC:06:D1:1D:9D:1D:21:C1:75:51:A1:4F:DF:46:DD:5B:08:A0
            X509v3 Authority Key Identifier:
                keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:75:11:58:87:d7:fa:7f:d5:0e:2b:91:ed:d8:17:cc:81:9d:
         32:44:38:d5:b5:6e:8d:f0:87:3e:ab:81:9a:9d:5b:91:97:2d:
         a4:01:ed:1f:82:f9:7b:51:9c:0b:23:96:86:3f:d7:80:8b:3f:
         79:83:b2:83:b1:d3:eb:e2:5a:5a:05:c9:e8:d3:2f:b4:d3:35:
         a9:9f:f2:c0:07:2a:67:ce:1a:7f:c8:d7:d8:b7:97:2e:67:b4:
         0c:2e:f9:81:08:42:72:e8:f2:a4:95:f2:0c:95:fd:59:bc:73:
         26:cd:63:35:a0:0d:9c:60:8d:dd:06:d8:0a:d3:b2:ef:c7:b0:
         c0:60:f6:c9:c1:ce:db:f3:c3:ff:82:2c:4f:83:6d:f2:c6:5f:
         18:b4:0f:8e:92:3d:0c:3c:dd:4e:3a:e2:14:4b:5e:f3:df:57:
         41:ae:fb:84:c1:b2:45:8b:ea:dc:c7:24:ee:db:9c:8e:d7:eb:
         9c:c5:d5:64:83:a0:90:d7:2a:75:e7:47:0c:5b:97:25:31:0b:
         fb:24:4a:b2:0a:c8:64:2b:c2:ad:28:58:fc:62:88:b2:d5:07:
         53:3e:de:ac:0c:29:f0:75:39:7f:0a:b2:d6:b8:39:5d:cd:de:
         53:8e:54:1c:dd:d8:45:3c:fe:85:99:2c:31:97:e9:dd:f6:b8:
         a1:63:d4:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfd5NltAKYL6EhXWJxbMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkM2ZmNzgzNjUzMGQxYzQ3NGY0ZDA4OGI2YjM2MjI0ZmJm
Njk4MmQwHhcNMjYwMjA5MTMwMTEwWhcNMjYwMjEwMTMwMTEwWjAzMTEwLwYDVQQD
EyhiYjc2ZGMwNmQxMWQ5ZDFkMjFjMTc1NTFhMTRmZGY0NmRkNWIwOGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN+34ECQsOSg2cNR0qAW5e5tmv4U
Z6viC7w+TwgIpjBjkjyaxRQ9XCxGzTCz4r96HlyaF3KiDtZ1p7uNiDzEaBGJJrHn
NKIW8bRmsfhcbNxrYTQa4tA2q0u4+amCK9r5TNqaq7LupsU988cyIoVJQvPbL3gg
zN1zDq7oPWFSJhqoE+sTpv2OpMrnryAaQtQahy8lnjL3582JzthefkgtFVsewPsA
ET01/uHGzfA0f0MLYwKy2/VJBhvfqbULrIOl21U0kSdn8jreRV935mx9kalZ14mY
X+ey+pbcOTsWrvpqeCKbpNbARVPUG5wNH+PJesdkcS6RVc/hB2neWQEeNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLt23AbRHZ0dIcF1UaFP30bdWwigMB8GA1UdIwQY
MBaAFO0/94NlMNHEdPTQiLazYiT79pgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YWRlOWItMzIxNi00ZmVmLTgwNDkt
ZjNlMjRlMDc1ZTM1LzEvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82YWRlOWItMzIxNi00ZmVmLTgwNDktZjNlMjRlMDc1ZTM1
LzEvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHURWIfX
+n/VDiuR7dgXzIGdMkQ41bVujfCHPquBmp1bkZctpAHtH4L5e1GcCyOWhj/XgIs/
eYOyg7HT6+JaWgXJ6NMvtNM1qZ/ywAcqZ84af8jX2LeXLme0DC75gQhCcujypJXy
DJX9WbxzJs1jNaANnGCN3QbYCtOy78ewwGD2ycHO2/PD/4IsT4Nt8sZfGLQPjpI9
DDzdTjriFEte899XQa77hMGyRYvq3Mck7tucjtfrnMXVZIOgkNcqdedHDFuXJTEL
+yRKsgrIZCvCrShY/GKIstUHUz7erAwp8HU5fwqy1rg5Xc3eU45UHN3YRTz+hZks
MZfp3fa4oWPUIQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:55 2026 by rpki-client