This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
File:                     brhre7AKRC4IyzuFpj57SEh0LnY.mft (raw, json)
Hash identifier:          Y4hMG66r3V8BmnpiVibKdGTBGfI7fD2hvNNl+ETW6Yg=
Subject key identifier:   7C:4F:1B:6C:28:BE:F7:66:28:75:71:17:90:32:87:C1:1E:DE:2C:8C
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Certificate issuer:       /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial:       019C42462C4F05CB317C560EAD365B1623FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
Manifest number:          0EE5
Signing time:             Mon 09 Feb 2026 12:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:20 +0000
Files and hashes:         1: 69rAqslmUNQ4jxhqRukN3nUhlgk.roa (hash: IDmbzyv/bIKti6JCgd65/6aVCqu//LwD+RovZywUSK8=)
                          2: brhre7AKRC4IyzuFpj57SEh0LnY.crl (hash: BGkAoksp84bvY36yX2EEgIbBF0eiVXfjCjQHvN3+5q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:2c:4f:05:cb:31:7c:56:0e:ad:36:5b:16:23:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
        Validity
            Not Before: Feb  9 12:00:20 2026 GMT
            Not After : Feb 10 12:00:20 2026 GMT
        Subject: CN=7c4f1b6c28bef76628757117903287c11ede2c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:ae:c2:51:61:c0:00:ed:0c:78:e5:f6:35:
                    ea:26:ba:c5:75:9f:16:29:ff:be:a2:34:88:c8:9d:
                    49:bf:6f:18:b8:ae:15:47:42:0c:c7:0c:94:5d:e8:
                    b0:8d:8f:f0:05:02:8d:f5:ec:5e:a2:b0:ea:37:71:
                    c1:69:45:85:33:28:24:f8:f2:bb:b3:ee:9e:2f:10:
                    07:f2:59:e7:32:8f:54:87:d3:02:37:1f:5b:a9:87:
                    27:ad:aa:20:d0:f7:55:b0:41:87:e7:76:87:d9:b3:
                    84:5c:15:62:7d:c5:32:b6:06:34:02:d0:8e:e8:60:
                    dc:bc:57:4a:46:f3:b4:20:ed:ae:6d:3e:ef:2a:ae:
                    48:95:42:fa:f2:8e:d1:d1:1e:1a:b0:2f:2f:af:9c:
                    87:ca:81:d5:3e:9e:9b:ac:11:c5:de:c7:37:7c:1c:
                    b5:7d:6d:82:11:a6:79:5c:46:20:06:0c:ca:81:b8:
                    ca:2d:4d:9f:9e:62:4a:7f:e6:6a:c3:bf:3b:9f:93:
                    60:78:cf:bc:a2:50:04:f8:4d:36:90:42:fe:4a:51:
                    a1:fc:39:42:23:7a:aa:a1:4c:a2:84:7e:b0:9a:db:
                    fc:55:64:8c:69:f5:95:25:cc:2f:fa:f7:21:11:a6:
                    47:31:41:d8:a6:c8:d7:9f:e1:a5:b1:7b:b5:7f:e3:
                    0b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4F:1B:6C:28:BE:F7:66:28:75:71:17:90:32:87:C1:1E:DE:2C:8C
            X509v3 Authority Key Identifier:
                keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:25:ec:4d:d4:9b:e6:33:2e:41:ef:c7:52:6f:e4:51:e8:22:
         f4:60:94:17:4b:52:81:3e:e1:26:09:b3:c0:48:d7:ed:25:17:
         cc:29:70:5b:20:ff:48:79:2c:48:89:17:c3:6a:15:11:03:27:
         8c:18:90:7f:d7:fa:9d:32:4a:46:6f:8c:1b:4e:53:c7:62:f1:
         df:7a:68:97:6f:fd:47:fb:38:70:a4:ca:ce:1a:7a:10:bd:fa:
         a2:5e:40:1e:4d:5a:df:45:03:eb:6f:11:f0:ad:75:5a:e6:96:
         55:1e:b6:70:b4:90:08:b8:5e:18:07:0e:c6:b1:9f:53:32:42:
         89:7d:e9:4f:97:3b:2b:19:6b:aa:14:3d:c1:34:80:3a:95:3d:
         8a:11:46:f8:c4:08:cb:44:aa:32:e2:c2:5b:de:27:26:16:5b:
         26:99:da:27:0b:af:4e:ef:1e:3e:79:f4:14:75:00:1b:03:83:
         3f:ee:8e:17:10:d4:b4:e8:da:58:94:43:73:bb:44:43:b9:98:
         ef:64:eb:b8:37:9d:dc:76:40:30:08:07:9a:1b:cc:b0:12:2b:
         f1:9c:5f:88:a0:6a:ec:fb:7b:f5:e0:40:2e:69:2f:0c:19:af:
         02:34:42:a6:07:dc:9b:12:0d:43:c5:07:7f:8b:c4:98:c2:75:
         b1:78:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:36 2026 by rpki-client