This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
File:                     7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft (raw, json)
Hash identifier:          ice1Q9J1Qq094s2zv9mqiJrAI5/mCJdjrwtGiPcDGQ8=
Subject key identifier:   55:1B:C1:71:C4:97:0C:F5:8F:88:7F:04:37:CD:55:97:27:43:12:FC
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Certificate issuer:       /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial:       019C243C63C94BFD9EE18A80C82A3ED6839D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
Manifest number:          081D
Signing time:             Tue 03 Feb 2026 16:01:03 +0000
Manifest this update:     Tue 03 Feb 2026 16:01:03 +0000
Manifest next update:     Wed 04 Feb 2026 16:01:03 +0000
Files and hashes:         1: 1-33kt8TP8RMK4Q81VHiCWjfj2FA.roa (hash: LhYvcVjCIISc50vO0k0gnn7omuUTmjGvhFlj3brlswE=)
                          2: 7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl (hash: pg4UT9x683Dwax2Sot0h5B2AzeRxbqreH9tGv0EJcIw=)
                          3: Qhj-dAw4UmH14cGcWPixT30vFoE.roa (hash: JjCn/CEVqHRrx5g3GCN0ImneG9z/AYQZMRc57RLWwA8=)
                          4: UfUKm5VRI_4IDkO1oFXvYLTnZWQ.roa (hash: FWPMWaa8EhT3K9Uzqt/ZpfSh1CKxfYK1Ozqf41dv8H8=)
                          5: Up3P0BLXnOn0NJzNO22oJuB2P-0.roa (hash: WAsExi4a515grUSlWqpJ211VY3MEpndWg6Zn1Kyg9+8=)
                          6: eDlvHgRtKsU4i-jNtF947Zs0OH8.roa (hash: O24cI9pKOeR6BhzhlKYvgEN2vTJ+LKMhalZO6Gb3Tb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 15:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:24:3c:63:c9:4b:fd:9e:e1:8a:80:c8:2a:3e:d6:83:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
        Validity
            Not Before: Feb  3 16:01:03 2026 GMT
            Not After : Feb  4 16:01:03 2026 GMT
        Subject: CN=551bc171c4970cf58f887f0437cd5597274312fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:21:0c:e1:2a:ea:54:12:15:ff:c1:a6:2e:
                    7e:3d:ed:98:df:e9:b8:80:6c:0a:1f:25:a6:49:77:
                    61:f0:de:ef:14:29:fc:f1:c5:56:b3:ab:a2:f2:04:
                    fa:5e:70:e6:1f:16:93:aa:db:a5:2d:d6:55:83:8e:
                    b2:da:c4:73:94:cf:86:83:e6:bb:c7:58:15:4e:84:
                    1e:8e:a3:0f:0b:bf:83:b3:17:d2:56:b6:cb:f9:a2:
                    fb:9f:71:e2:ea:1b:ef:48:5a:a1:85:c6:bb:4c:5b:
                    9b:5f:5d:d1:c7:12:1c:07:1f:9d:b0:f8:07:3c:c8:
                    2f:cc:b2:c6:9d:37:70:85:ed:c4:1d:44:1c:ee:2f:
                    a6:e4:df:c4:b2:31:a9:04:2f:52:aa:a2:7a:dd:e5:
                    97:6c:b7:f8:aa:da:a2:40:41:a9:20:15:d6:2a:9f:
                    8e:f6:9a:c3:5d:f5:a9:c1:92:d0:8a:4d:77:96:72:
                    de:07:0e:3e:2e:26:8a:70:61:ce:b3:c8:f4:9e:bb:
                    6e:f5:45:0b:b3:42:fd:d1:f8:18:96:ce:ea:2b:e0:
                    ce:de:78:34:84:2b:c5:7e:92:8b:2d:e8:07:2d:61:
                    c6:fb:21:6d:96:d7:5b:c6:16:00:34:01:69:e2:2b:
                    ff:97:ad:67:f1:4b:0c:62:eb:98:42:4f:e5:62:87:
                    ca:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1B:C1:71:C4:97:0C:F5:8F:88:7F:04:37:CD:55:97:27:43:12:FC
            X509v3 Authority Key Identifier:
                keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:da:b0:dd:5a:25:da:36:cc:ff:63:56:24:68:69:ec:5d:5d:
         86:70:1a:df:7d:37:13:2e:0c:c5:4d:27:84:fb:3f:df:16:79:
         d7:54:3a:93:b9:51:02:0a:c2:e3:ea:0c:05:13:37:7a:d9:5c:
         87:63:f9:c9:11:5a:f5:18:2f:4f:21:a1:be:dd:ee:de:ee:68:
         f3:2c:40:11:63:33:fb:55:e6:d1:af:66:82:01:48:22:a4:15:
         96:bf:22:06:f6:c3:6f:70:76:ee:a5:6a:8a:78:8d:cb:80:a0:
         23:14:de:d8:cd:27:4e:ee:08:ac:a3:d6:cc:cb:7b:6e:03:51:
         65:97:9a:71:3e:99:79:59:ed:35:6e:5a:b2:33:0f:d0:42:1e:
         21:cb:43:36:d0:c7:bb:68:bd:ee:e4:0d:65:10:0f:9f:14:30:
         e0:4a:78:d8:19:39:8c:5c:4f:4e:c0:c9:ee:df:2c:76:92:5c:
         fd:10:ff:55:50:a5:13:ce:58:02:0c:12:80:2c:c7:c3:65:12:
         13:6e:46:f5:ac:57:1b:2c:5e:7e:d8:e5:b3:ea:10:20:d4:45:
         41:cd:b0:b5:75:89:d8:8b:56:da:36:a1:82:ff:c6:fd:18:20:
         72:31:55:9b:b0:95:92:bd:8b:8d:72:cc:0b:cd:1d:96:51:84:
         b7:63:6a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 20:58:11 2026 by rpki-client