This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File:                     p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier:          FGWA/BVVCXgVaVEJLKiYvI7K2K/oFMfW29RY4Wn/x3E=
Subject key identifier:   F6:63:FB:EB:A2:95:40:4E:4D:67:06:DC:A3:40:3D:85:25:C0:9F:B4
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer:       /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial:       019C446C1FD12C4AFA328BC9070E06CC4496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number:          1522
Signing time:             Mon 09 Feb 2026 22:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:02 +0000
Files and hashes:         1: 2U0mDkF6k188FlI68TZ1uJWmy1k.roa (hash: 7JEOUa3UIN+/J9E0Zd5VhYU2fI+uSkBnOTYRU58DUPc=)
                          2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: 4lZaCRV0kHBmFrFoh6voFPDWWLHnM+ZF7NhSDha6sTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:1f:d1:2c:4a:fa:32:8b:c9:07:0e:06:cc:44:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
        Validity
            Not Before: Feb  9 22:01:02 2026 GMT
            Not After : Feb 10 22:01:02 2026 GMT
        Subject: CN=f663fbeba295404e4d6706dca3403d8525c09fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:5a:6e:ff:b3:41:f2:32:d6:cb:7a:e4:9b:
                    45:8a:05:82:93:45:54:9b:e6:f6:8a:92:3e:69:e9:
                    89:04:76:5f:b1:b3:16:d7:56:7f:f5:9f:1e:0d:06:
                    95:ec:78:5f:a6:2c:6e:b3:d4:3f:15:6b:93:d6:e6:
                    21:ec:44:b9:88:a8:fe:64:df:39:6e:a3:ee:b7:b5:
                    4a:55:d9:f8:d3:8a:58:be:49:5c:b2:18:7c:ec:d9:
                    ad:61:be:90:ad:8d:ff:28:69:7b:41:66:33:31:cd:
                    45:bc:cc:97:8e:f0:33:f4:24:70:b0:0e:80:b5:29:
                    a5:84:f7:27:09:03:c5:8f:75:ef:07:86:37:7c:5c:
                    2d:bc:80:e3:8a:b6:60:98:d9:e3:89:39:44:24:e9:
                    9b:0e:c4:1c:f2:24:19:a4:c2:15:5f:0e:0d:85:25:
                    fb:b1:a0:f9:61:54:62:25:7a:9e:81:1f:dd:22:2c:
                    9d:20:c6:b3:06:33:95:f4:4d:79:19:cf:b2:a0:a4:
                    fd:e7:01:5c:0d:69:b0:fc:b1:3d:26:39:05:3c:01:
                    7c:42:2b:88:c6:1c:58:19:e9:e5:27:76:ba:fe:c8:
                    c4:26:f8:d1:0e:05:6d:85:3f:2b:48:6e:46:bc:8c:
                    cf:a2:c7:96:ec:57:24:78:2f:19:31:97:0d:5f:ff:
                    7e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:63:FB:EB:A2:95:40:4E:4D:67:06:DC:A3:40:3D:85:25:C0:9F:B4
            X509v3 Authority Key Identifier:
                keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:94:6a:7e:5d:46:aa:ea:30:46:62:42:0e:91:37:a6:a8:75:
         9e:f0:07:84:06:99:b3:83:7b:0c:8d:c7:1a:0a:03:81:59:2b:
         84:54:79:12:7f:5c:49:04:61:75:66:44:93:e4:2f:e3:3f:7c:
         b9:27:fd:c1:99:4b:86:2f:48:07:4c:db:77:b7:49:b5:a4:94:
         3d:1a:26:0a:87:5d:a0:de:e5:fc:90:aa:54:78:3a:d1:3e:fe:
         24:18:1f:b9:06:60:2c:ec:f7:89:76:de:45:29:fb:44:5f:42:
         43:d0:01:8d:b9:a9:ae:f4:9d:f9:81:94:57:c1:1a:a4:c0:d3:
         c0:13:67:3b:38:8c:7a:4a:18:fa:6c:f6:cd:f4:b2:c5:4a:62:
         c7:14:e0:54:44:c1:e7:6a:cc:e2:f9:9e:33:40:68:94:05:d5:
         6e:49:8b:dd:23:43:df:40:30:5e:96:cb:e5:8f:27:5b:c1:b5:
         fd:fd:ed:22:16:87:2d:6e:b9:12:29:af:79:b7:ef:d0:ec:df:
         18:6b:ed:95:39:9f:f7:46:31:41:c9:60:07:dd:1e:f8:0f:cd:
         de:1f:de:95:7d:4c:80:7b:0a:db:ed:bc:8c:38:e6:95:e6:ec:
         9f:12:f4:69:83:99:be:8b:5a:98:0a:8c:43:cd:83:a5:a9:cf:
         a1:02:87:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEbB/RLEr6MovJBw4GzESWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZWVkYTY1ZGNkNDM4N2Q3MjI3MDA1YzFlMTNhMDZkNDQ4
NzdiNmYwHhcNMjYwMjA5MjIwMTAyWhcNMjYwMjEwMjIwMTAyWjAzMTEwLwYDVQQD
EyhmNjYzZmJlYmEyOTU0MDRlNGQ2NzA2ZGNhMzQwM2Q4NTI1YzA5ZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYBabv+zQfIy1st65JtFigWCk0VU
m+b2ipI+aemJBHZfsbMW11Z/9Z8eDQaV7Hhfpixus9Q/FWuT1uYh7ES5iKj+ZN85
bqPut7VKVdn404pYvklcshh87NmtYb6QrY3/KGl7QWYzMc1FvMyXjvAz9CRwsA6A
tSmlhPcnCQPFj3XvB4Y3fFwtvIDjirZgmNnjiTlEJOmbDsQc8iQZpMIVXw4NhSX7
saD5YVRiJXqegR/dIiydIMazBjOV9E15Gc+yoKT95wFcDWmw/LE9JjkFPAF8QiuI
xhxYGenlJ3a6/sjEJvjRDgVthT8rSG5GvIzPoseW7FckeC8ZMZcNX/9+YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZj++uilUBOTWcG3KNAPYUlwJ+0MB8GA1UdIwQY
MBaAFKfu2mXc1Dh9cicAXB4ToG1Eh3tvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgt
YzE1NWY5NTQzNmUxLzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgtYzE1NWY5NTQzNmUx
LzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5Rqfl1G
quowRmJCDpE3pqh1nvAHhAaZs4N7DI3HGgoDgVkrhFR5En9cSQRhdWZEk+Qv4z98
uSf9wZlLhi9IB0zbd7dJtaSUPRomCoddoN7l/JCqVHg60T7+JBgfuQZgLOz3iXbe
RSn7RF9CQ9ABjbmprvSd+YGUV8EapMDTwBNnOziMekoY+mz2zfSyxUpixxTgVETB
52rM4vmeM0BolAXVbkmL3SND30AwXpbL5Y8nW8G1/f3tIhaHLW65Eimvebfv0Ozf
GGvtlTmf90YxQclgB90e+A/N3h/elX1MgHsK2+28jDjmlebsnxL0aYOZvotamAqM
Q82DpanPoQKHlA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:39 2026 by rpki-client