This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File:                     g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier:          s5zNnmLjG8Ijveja2n5iDYYhPNvusiJq93/D/QDNcLM=
Subject key identifier:   78:8D:61:8C:9C:2B:3B:87:17:85:1C:5F:B8:42:5E:80:65:A9:15:75
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer:       /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial:       019C43C752015388A09C73E1611F73A76C86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number:          0717
Signing time:             Mon 09 Feb 2026 19:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 19:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 19:01:01 +0000
Files and hashes:         1: 1-E222Ysl463RchjkiqAlOAiPTB0.roa (hash: T8kjAAhvV9IOx3Nup2CmCgh1dupopC3+fSqkmL0+Aj4=)
                          2: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: VMB2v9Vf6HGFWxZGm0lfNgcNj3GW0jPfURUzpi1PsEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:52:01:53:88:a0:9c:73:e1:61:1f:73:a7:6c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
        Validity
            Not Before: Feb  9 19:01:01 2026 GMT
            Not After : Feb 10 19:01:01 2026 GMT
        Subject: CN=788d618c9c2b3b8717851c5fb8425e8065a91575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:a3:92:3a:bf:da:36:75:33:e7:9f:56:27:
                    23:bb:ce:f0:17:d1:99:3d:b5:fb:e7:0d:c9:1b:5b:
                    79:d8:fd:46:d8:84:de:3f:38:f0:5a:b4:13:2d:82:
                    49:d8:91:ea:28:0c:fd:58:17:1c:70:49:b5:77:d8:
                    5f:71:d1:44:c2:9b:d1:26:dc:ca:09:e7:8d:09:f1:
                    da:d2:6e:dd:97:ea:9f:45:71:7f:d7:39:37:ad:5b:
                    2d:6c:30:10:63:85:81:30:e1:ee:98:5f:78:a4:6c:
                    8e:d4:85:7c:99:03:77:0a:9a:78:96:85:89:7e:ff:
                    60:ed:dd:0f:22:12:58:e2:37:f1:b5:09:01:85:62:
                    d7:04:40:d8:03:cc:8e:d5:34:01:23:cc:45:c3:82:
                    39:d3:9b:65:2f:87:c1:7e:63:5c:8f:06:0a:dc:6f:
                    08:9c:1c:e4:e7:7b:4d:88:9a:ce:3a:b4:20:55:d9:
                    f2:e2:fa:f9:2b:b9:9f:bf:29:02:88:e5:18:28:f2:
                    0c:5c:ae:fb:bd:67:a4:7c:81:20:f5:67:8e:e7:01:
                    32:69:09:0e:fc:11:6a:51:8f:63:f5:69:f0:8d:82:
                    20:58:b9:06:f1:08:33:0e:dc:13:0f:ef:c5:75:86:
                    2b:bd:88:99:fe:cc:72:bd:08:87:25:59:db:cd:0b:
                    97:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8D:61:8C:9C:2B:3B:87:17:85:1C:5F:B8:42:5E:80:65:A9:15:75
            X509v3 Authority Key Identifier:
                keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:81:28:57:c8:79:5c:3d:dd:31:5d:a7:f4:e1:3c:22:f0:ec:
         50:a0:75:60:37:cb:64:04:cb:88:ea:85:94:63:5b:ad:3f:e6:
         49:8a:45:c7:32:25:a8:7c:b7:24:f0:1c:16:24:c2:89:e1:75:
         14:83:88:49:e4:75:86:d3:7a:46:36:f1:bd:95:41:0d:63:e8:
         6b:1e:67:c5:ea:21:37:c2:a2:b8:fd:23:d6:fe:7c:2f:cc:f4:
         a3:2b:8f:04:a0:d0:8b:08:fd:80:1f:32:2e:5a:9b:4a:98:d6:
         9a:97:cb:04:60:81:a9:1b:99:63:b9:bc:50:07:03:7f:72:bc:
         d8:49:b4:d7:cc:cc:dc:ac:7e:65:c1:cc:85:af:4f:8f:17:f7:
         50:93:52:ca:82:4c:d2:51:40:68:e3:66:67:44:e6:4f:6b:b3:
         40:ea:3d:6d:cc:b2:1c:78:33:f6:1e:fb:70:08:3b:55:b8:6e:
         8c:0e:23:de:e3:ae:b6:2b:59:a0:97:58:bc:88:89:35:b8:f8:
         ba:03:b4:0c:69:77:a0:0a:7e:42:bd:ed:c9:23:34:28:f5:cc:
         c6:8f:4f:eb:aa:14:cf:21:7a:00:1c:2a:ec:06:4c:ba:1e:73:
         f8:80:92:67:49:79:30:91:ab:0a:33:9a:b7:45:b9:c4:29:59:
         9e:44:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:47:24 2026 by rpki-client