This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File:                     7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier:          bCORllo0vGYhzZ+4k1Mbm4MGrNRRed+1c0mcnbz2VH4=
Subject key identifier:   4E:02:47:6E:73:19:D6:8B:AD:C0:21:28:AD:60:4C:A0:BB:29:F7:9C
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer:       /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial:       019C42B40EB6880DD90DB1AD5877CEEFB255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 14:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:22 +0000
Files and hashes:         1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: EBlYC+H9kvySWQ5KqurprAEr2si3C2v+3p3DDaGdI5g=)
                          2: dZLilwWHDcTBgw2vlgqQEo8wXmI.roa (hash: vNrKzB7jLGfmCB0/mX4ygPzITD3M9syDqPUvmlc8/PY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:0e:b6:88:0d:d9:0d:b1:ad:58:77:ce:ef:b2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
        Validity
            Not Before: Feb  9 14:00:22 2026 GMT
            Not After : Feb 10 14:00:22 2026 GMT
        Subject: CN=4e02476e7319d68badc02128ad604ca0bb29f79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fb:d4:23:35:2c:a9:2d:77:13:df:48:2d:08:
                    c4:55:cf:53:51:fe:4f:73:f1:35:65:b6:9d:00:22:
                    18:05:e8:a0:07:8b:b8:ef:91:17:b3:39:e9:11:5b:
                    0d:34:58:00:7f:2f:7e:35:f9:95:37:7e:3a:85:b3:
                    d6:76:00:b1:82:3e:e7:92:55:57:97:1b:28:18:7e:
                    86:7a:8b:b3:ff:c3:9f:c5:d1:4f:15:c7:a2:4c:b4:
                    ab:fd:d1:5f:b6:c3:1b:38:76:d9:45:5f:9a:1e:8a:
                    0b:e8:a2:49:28:11:97:f1:29:1d:e0:15:2f:78:44:
                    32:27:af:00:32:c1:21:cd:16:22:23:74:d8:9b:c8:
                    4d:41:6a:98:4c:22:13:57:a8:13:8d:41:eb:3b:d6:
                    8e:c7:0d:a7:16:5d:80:4f:2c:bb:e0:cd:52:2f:8c:
                    0c:e5:2b:99:98:07:d2:74:9f:f1:b7:db:91:44:ab:
                    32:72:90:fb:9b:b9:17:d3:78:13:2f:7a:7c:31:b6:
                    2a:36:13:dc:19:60:02:c8:f0:40:8a:cf:4a:19:c5:
                    ac:f8:37:86:9f:38:70:fc:de:12:72:3d:16:10:d8:
                    92:df:24:9f:7a:19:6a:d7:41:d7:29:cf:a9:06:b1:
                    29:27:fd:01:2f:bc:b8:df:57:c0:de:07:6d:aa:bf:
                    e0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:02:47:6E:73:19:D6:8B:AD:C0:21:28:AD:60:4C:A0:BB:29:F7:9C
            X509v3 Authority Key Identifier:
                keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:29:3f:d7:c2:aa:ab:8a:d3:02:23:3f:fe:82:ee:ef:5f:48:
         bc:ef:0b:98:bd:bd:17:fa:d8:43:26:13:1a:94:bd:fc:07:c8:
         dd:0d:be:9e:d2:2e:86:6c:09:1f:37:df:ea:29:9f:a6:43:e1:
         5a:d6:a7:03:ea:96:0e:5a:c7:4c:c6:a0:76:fc:c4:49:aa:f1:
         3c:79:bc:fd:73:78:df:c9:6a:05:cf:47:cd:59:a4:82:7c:cf:
         17:1d:b4:4b:3f:84:84:9b:7b:99:54:af:eb:44:9f:df:6f:1a:
         8f:c5:cf:81:7a:1a:86:4f:61:ae:de:e0:c2:d9:ed:61:2a:48:
         b1:5f:26:2a:08:8c:11:8f:f6:36:39:4b:b4:2f:d5:bc:42:2f:
         8c:d3:a0:3a:04:4b:b0:2b:55:ed:ad:03:f6:d7:0b:39:66:e6:
         40:d3:e7:85:46:59:01:69:d8:bf:4f:c0:26:61:6e:aa:c8:f8:
         ff:f0:04:17:d7:c9:44:bd:31:4f:ce:f1:1b:ef:80:4e:9b:34:
         1e:a3:5d:c4:74:bb:51:51:98:61:1f:db:6f:b9:d8:70:c1:7a:
         8e:7a:9b:e1:3b:58:48:b6:de:e8:02:4d:24:39:d5:3a:c9:51:
         2b:ed:a9:39:90:13:d9:fd:61:0b:bd:6f:f3:79:ec:d8:28:0c:
         9c:5c:d6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:15 2026 by rpki-client