This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File:                     7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier:          MxLJxnbRZNcQdw4gt7ub0oRHdIWSFgLeW2+FlV/l47E=
Subject key identifier:   91:39:DB:2D:BA:B1:D0:55:B1:F9:92:D9:44:7E:79:6E:49:71:6E:01
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer:       /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial:       019C44A27191DB1F87BE42F2B1003257A7FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number:          0FE6
Signing time:             Mon 09 Feb 2026 23:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:22 +0000
Files and hashes:         1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: BXwl9f5xvPiInz8oPl3ypCZRFTrsaDvNDXcjVqJ9VPY=)
                          2: rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa (hash: reSEL9M69wAKbL5gRtqeNyqy/DyxKPTT8rPI7JNy6Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:71:91:db:1f:87:be:42:f2:b1:00:32:57:a7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
        Validity
            Not Before: Feb  9 23:00:22 2026 GMT
            Not After : Feb 10 23:00:22 2026 GMT
        Subject: CN=9139db2dbab1d055b1f992d9447e796e49716e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a2:73:82:93:34:39:2d:1b:17:01:8d:92:05:
                    8e:df:53:80:c9:bc:20:57:95:f7:b9:5a:30:ef:23:
                    56:5e:eb:d4:c3:33:73:67:c0:e1:23:ff:0d:9b:7c:
                    55:aa:21:73:aa:df:78:e6:1e:07:71:fc:7e:69:33:
                    ec:b4:5a:2d:de:aa:a2:53:23:3f:5b:25:e7:85:7d:
                    e7:0b:49:71:74:10:c0:13:97:6a:ca:c9:9a:f7:1c:
                    79:5f:21:f7:e9:d5:c1:37:df:e4:71:77:43:09:5a:
                    27:d4:58:bd:51:34:15:e0:d7:8b:eb:5b:d9:85:84:
                    6f:05:b8:26:46:c6:9d:d8:39:c1:ba:73:bf:3e:4e:
                    d0:44:6a:ba:83:52:a3:8e:0c:49:77:f9:91:1c:10:
                    c3:8b:f7:e5:73:fa:5f:27:85:5a:43:05:ac:50:ea:
                    2e:80:41:92:37:46:e7:3b:06:3b:ea:85:fb:1b:8a:
                    67:fc:6e:57:80:71:e1:ae:61:18:d6:05:b8:7b:94:
                    96:1b:97:db:1f:00:70:4d:e2:62:44:0d:12:b0:d7:
                    ea:71:cd:c0:4f:3b:7d:11:68:48:f8:8f:67:76:3e:
                    6b:60:ba:99:3c:0f:9f:2e:17:e3:d4:3c:b5:30:82:
                    71:53:5b:70:eb:e2:75:6f:2e:a8:99:be:8b:8f:a2:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:39:DB:2D:BA:B1:D0:55:B1:F9:92:D9:44:7E:79:6E:49:71:6E:01
            X509v3 Authority Key Identifier:
                keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:0d:5a:6d:6d:3a:e3:38:3b:a0:95:f5:95:84:cd:6a:2e:90:
         e8:e3:fd:7f:8f:4f:b8:7d:ee:aa:e1:97:e5:62:f8:ed:d3:eb:
         fe:05:7a:38:59:c9:8b:b0:27:9b:9a:58:fe:41:39:fd:a4:77:
         88:39:e6:95:df:44:19:84:64:c5:55:db:5f:a7:81:60:af:01:
         73:33:55:30:4a:03:20:ca:e1:60:cc:17:fa:c5:bb:73:76:86:
         6e:e1:9c:2c:f0:62:3b:d2:1a:7f:cd:21:ca:dd:97:8c:77:db:
         00:ad:40:09:8b:61:47:86:a3:08:b2:25:1a:23:2a:d3:de:25:
         d2:27:9d:7c:73:6e:e6:95:ee:3e:2b:59:3d:1e:6f:b9:1e:df:
         21:52:60:4c:9e:64:1c:ad:28:e9:86:12:31:35:61:6b:b6:53:
         4e:bd:db:fd:ee:8c:ca:38:61:a8:8b:60:3c:11:e3:55:7e:eb:
         3b:42:1d:e7:3c:10:84:82:1d:7d:7f:ba:d5:f2:e4:c9:25:95:
         c9:93:92:0b:d8:fc:fd:ed:ad:cd:20:0a:b5:13:58:30:04:dc:
         72:9f:64:ce:ac:65:d6:7e:7b:f0:11:a6:0b:01:20:fe:d3:35:
         44:e5:6b:a1:34:22:63:dd:50:58:fc:9d:1e:4d:f3:a5:5f:21:
         1e:e9:31:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:08 2026 by rpki-client