This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File:                     7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier:          bJnTt9EnG7hzuOds/9zoMRh3RFLXpnpBX5wBTmBggxY=
Subject key identifier:   42:32:24:F1:DC:E2:5D:81:0B:68:74:3A:0A:59:91:31:0B:85:43:1B
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer:       /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial:       019C43FE099DF7E4B3D94A1C895C913C2EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 20:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:47 +0000
Files and hashes:         1: 0HZFumgyvQaDDTRTrqWFDMHfuo8.roa (hash: 99s+y069IP+8cLI0Fct7Tuh7Nr9yOVSbyI/w/nS1ohM=)
                          2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: 2rMFysBnNtc6kZg82mPhxgQzqWnrtJ/vLJOA5E4Mcrc=)
                          3: JfyoN48fk_c9ic3qKJlpVrYlm4U.roa (hash: YO7Xai4MFWdK4ki2bUDwA4JpC3JpucBc+HE0rjiH0O8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:09:9d:f7:e4:b3:d9:4a:1c:89:5c:91:3c:2e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
        Validity
            Not Before: Feb  9 20:00:47 2026 GMT
            Not After : Feb 10 20:00:47 2026 GMT
        Subject: CN=423224f1dce25d810b68743a0a5991310b85431b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:40:56:d6:8c:82:e4:89:66:b6:86:02:cb:d2:
                    d8:7b:bc:57:65:ab:bb:0c:e2:56:26:6b:b0:50:7c:
                    1a:bd:d0:63:4b:8c:d6:42:f0:21:9b:d5:fe:8c:65:
                    eb:91:58:74:ae:aa:86:e9:13:18:c0:6f:48:5b:96:
                    e3:3b:4e:3e:7b:de:8e:1e:8a:bd:ae:2a:fe:0b:55:
                    8b:54:3c:fa:eb:ab:37:f4:8b:ad:aa:5b:24:ff:b6:
                    6e:f4:be:4e:9b:30:57:3c:ce:b8:43:b8:46:97:d2:
                    e0:2a:23:a6:9c:c0:8b:25:ae:a7:93:d4:de:59:54:
                    d5:f1:b0:03:77:e6:1c:e8:a6:70:5b:d1:7d:68:cc:
                    79:09:11:b7:5f:48:7e:6e:08:b8:e7:f6:11:99:17:
                    6f:81:91:2f:3a:c7:d1:7f:ca:8b:1f:9d:1a:0f:a1:
                    62:e2:33:a6:8b:16:e0:d9:7e:8d:50:5b:d7:52:5a:
                    b0:f4:45:f6:ed:83:53:d5:f0:70:6e:5d:2b:c1:f7:
                    07:b1:a9:c5:ad:5d:22:73:25:ca:6d:ed:f1:a5:b6:
                    e6:d9:0d:b8:e4:40:fd:75:c2:56:27:01:7d:42:94:
                    2e:b9:9e:ea:d4:45:b7:ee:27:1a:12:e7:c7:61:3b:
                    00:6a:bb:ba:c6:c1:0e:e3:08:cc:83:d7:99:27:b8:
                    9e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:32:24:F1:DC:E2:5D:81:0B:68:74:3A:0A:59:91:31:0B:85:43:1B
            X509v3 Authority Key Identifier:
                keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d5:2f:67:a7:bb:84:90:58:5e:b1:bb:0d:43:aa:d0:d0:7e:
         e6:5e:a2:79:a4:f2:e3:a5:a3:f5:72:ee:6e:46:3b:37:14:9a:
         be:af:d5:47:9b:d4:99:c7:58:77:56:0a:e4:00:f2:57:d0:64:
         3a:91:82:f9:d5:6b:f9:2b:d5:b3:03:7b:01:d5:59:86:a4:48:
         96:22:28:b9:00:b3:96:41:ac:c7:31:9c:bb:e8:2f:7a:74:3b:
         2b:a8:eb:13:3c:75:6b:3e:72:d9:63:50:b8:b3:5a:91:0f:66:
         d1:5e:05:2b:d8:41:00:01:28:61:0d:1f:b1:b9:0c:35:a1:14:
         e1:35:34:32:31:0a:1b:d1:a1:b0:26:db:20:f2:9e:6a:31:b2:
         b3:94:7e:e2:55:e0:32:1a:b2:97:06:a5:62:b7:2b:96:0c:75:
         5b:4d:55:e3:8e:cb:a0:15:62:dd:be:ca:e3:52:d4:71:0d:6c:
         dd:61:3e:db:15:1a:9b:98:53:f7:a1:e5:6f:72:54:dd:ec:d9:
         02:c0:f0:23:fd:7a:19:e5:e1:f8:54:f5:a5:51:5b:0e:86:79:
         74:ea:49:42:c5:37:4e:62:44:5c:27:1a:25:07:77:d6:54:a0:
         e1:be:7a:02:64:5d:f8:c0:92:8c:7c:5a:eb:48:85:58:61:06:
         e8:13:10:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:23 2026 by rpki-client