This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
File:                     i7i2EnIdTUwtB8v-LklemGoPAm0.mft (raw, json)
Hash identifier:          ph4bnmVQQukRsebuMvMpUfwyxTz6GXEVY+p4USTaxBE=
Subject key identifier:   26:E6:3B:F7:E0:9A:B1:7D:47:59:D4:79:71:51:C3:98:70:FB:29:A6
Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
Certificate issuer:       /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Certificate serial:       019C420F5DA1F2E4CFB6E89C0D894AE6547A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
Manifest number:          07F1
Signing time:             Mon 09 Feb 2026 11:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:29 +0000
Files and hashes:         1: BN6g_D94xKyP47gk6IfNIcBTfDQ.roa (hash: 3HzJpZ8HtfAFz7+UBD2zP1SoqdzFz5KbeKPs56DQawc=)
                          2: i7i2EnIdTUwtB8v-LklemGoPAm0.crl (hash: g1TyxMN1n8N1yyzzRVZk4LPJs4RCj+mtrZiJv6QlcAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:5d:a1:f2:e4:cf:b6:e8:9c:0d:89:4a:e6:54:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
        Validity
            Not Before: Feb  9 11:00:29 2026 GMT
            Not After : Feb 10 11:00:29 2026 GMT
        Subject: CN=26e63bf7e09ab17d4759d4797151c39870fb29a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:bd:00:bf:61:a0:72:0e:16:51:32:32:37:
                    12:93:51:b0:6d:ba:65:5a:2b:e7:54:44:0b:70:59:
                    d4:fb:6b:ad:69:ad:ad:9a:17:f1:83:fa:30:ce:f2:
                    af:af:49:f9:9c:4f:18:d1:3c:58:12:32:eb:95:f4:
                    ee:d9:8e:43:b8:76:dd:ae:2a:28:f2:85:1d:5b:b7:
                    4c:b7:cf:00:b6:6c:49:b6:d5:62:52:a2:b4:3e:e2:
                    9f:0d:a5:a3:99:59:29:8b:36:d5:d2:01:76:0b:26:
                    2b:4d:03:21:08:35:e1:f7:2a:bc:2a:d5:8d:dc:98:
                    da:60:ef:dd:38:91:c5:fc:43:88:d7:59:d8:16:7b:
                    b5:2b:77:a4:02:ea:a2:92:8d:0f:88:cf:be:3c:36:
                    72:5d:56:93:8e:3b:ac:87:d5:54:dc:2b:49:70:ac:
                    6c:c6:fb:41:a6:b3:28:83:27:9a:74:96:df:92:f7:
                    7a:c1:52:b2:84:fd:8d:a1:8d:a6:93:72:56:7e:86:
                    3b:e6:1d:c8:20:b7:6e:a2:29:1b:97:91:8b:68:d7:
                    62:8f:43:1a:45:fc:a5:63:c3:99:a0:7f:a9:da:2a:
                    a2:05:d0:36:a9:fc:d4:9a:67:e4:5c:8a:aa:ad:f1:
                    27:4b:a3:57:6e:a6:a5:95:c0:49:88:e8:c0:96:5e:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E6:3B:F7:E0:9A:B1:7D:47:59:D4:79:71:51:C3:98:70:FB:29:A6
            X509v3 Authority Key Identifier:
                keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:60:65:7c:e3:7f:54:a3:c8:25:71:57:10:85:10:a3:60:df:
         8a:8b:a0:00:64:32:e0:be:11:41:41:3e:8f:6f:72:4b:e9:b4:
         1b:c2:f8:cd:36:bc:d0:ba:0a:8f:a3:c2:b9:dc:2a:a8:63:f3:
         9b:70:7a:ac:49:75:f2:08:c0:21:88:e7:29:ad:2f:58:90:f6:
         60:ac:ab:38:46:64:2a:bb:af:76:ee:91:37:e6:0f:f8:47:8b:
         39:b5:a2:fb:ef:cb:d5:2f:b7:7d:7e:cf:b3:82:a4:26:c2:3a:
         87:1b:fc:44:23:ac:ec:26:65:1a:0c:51:5f:24:b1:25:b3:fc:
         2c:e2:05:49:e6:79:6c:53:fb:2c:19:60:91:c9:7d:0d:8d:f4:
         2e:7d:9d:05:30:dd:ab:1c:de:db:da:fc:60:62:44:d2:e5:3f:
         5f:36:2e:a9:4f:55:cf:00:69:01:3d:74:74:17:6d:e3:a2:5e:
         96:bd:15:d8:38:33:a7:d4:90:ae:8a:fa:03:a0:1d:6f:30:8e:
         b6:e3:f2:03:63:17:e9:4d:d7:28:78:13:e7:93:e4:8a:fe:2d:
         ad:96:ee:43:3f:86:55:94:e0:45:4e:6a:37:b2:11:02:be:7c:
         71:5b:a1:01:48:0b:c7:1f:d0:ff:8a:c0:ad:09:02:50:9e:8c:
         0d:85:65:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD12h8uTPtuicDYlK5lR6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjhiNjEyNzIxZDRkNGMyZDA3Y2JmZTJlNDk1ZTk4NmEw
ZjAyNmQwHhcNMjYwMjA5MTEwMDI5WhcNMjYwMjEwMTEwMDI5WjAzMTEwLwYDVQQD
EygyNmU2M2JmN2UwOWFiMTdkNDc1OWQ0Nzk3MTUxYzM5ODcwZmIyOWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIi9AL9hoHIOFlEyMjcSk1Gwbbpl
WivnVEQLcFnU+2utaa2tmhfxg/owzvKvr0n5nE8Y0TxYEjLrlfTu2Y5DuHbdrioo
8oUdW7dMt88AtmxJttViUqK0PuKfDaWjmVkpizbV0gF2CyYrTQMhCDXh9yq8KtWN
3JjaYO/dOJHF/EOI11nYFnu1K3ekAuqiko0PiM++PDZyXVaTjjush9VU3CtJcKxs
xvtBprMogyeadJbfkvd6wVKyhP2NoY2mk3JWfoY75h3IILduoikbl5GLaNdij0Ma
RfylY8OZoH+p2iqiBdA2qfzUmmfkXIqqrfEnS6NXbqallcBJiOjAll71GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbmO/fgmrF9R1nUeXFRw5hw+ymmMB8GA1UdIwQY
MBaAFIu4thJyHU1MLQfL/i5JXphqDwJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83MTkyYzItYTc4OC00ZjU2LWJlNmIt
YmI0OTNjNDZkZjNlLzEvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83MTkyYzItYTc4OC00ZjU2LWJlNmItYmI0OTNjNDZkZjNl
LzEvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2BlfON/
VKPIJXFXEIUQo2DfiougAGQy4L4RQUE+j29yS+m0G8L4zTa80LoKj6PCudwqqGPz
m3B6rEl18gjAIYjnKa0vWJD2YKyrOEZkKruvdu6RN+YP+EeLObWi++/L1S+3fX7P
s4KkJsI6hxv8RCOs7CZlGgxRXySxJbP8LOIFSeZ5bFP7LBlgkcl9DY30Ln2dBTDd
qxze29r8YGJE0uU/XzYuqU9VzwBpAT10dBdt46Jelr0V2Dgzp9SQror6A6AdbzCO
tuPyA2MX6U3XKHgT55Pkiv4trZbuQz+GVZTgRU5qN7IRAr58cVuhAUgLxx/Q/4rA
rQkCUJ6MDYVleg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:04:05 2026 by rpki-client