This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
File:                     7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft (raw, json)
Hash identifier:          OXJZJRyMkRFvAOtc0Q8IoADxYujEtfi1X4XjbBiAyeM=
Subject key identifier:   FE:82:22:5C:5B:D9:7A:F2:D5:30:14:67:A1:F2:36:13:AE:5F:13:DF
Authority key identifier: ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F
Certificate issuer:       /CN=eda8529160585381f07801656ffc4c551298449f
Certificate serial:       019C4510C62CB5AE50CEA82DF10A8531D4CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
Manifest number:          0197
Signing time:             Tue 10 Feb 2026 01:00:52 +0000
Manifest this update:     Tue 10 Feb 2026 01:00:52 +0000
Manifest next update:     Wed 11 Feb 2026 01:00:52 +0000
Files and hashes:         1: 7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl (hash: 83SjvuVs4JMUnJ7gtTrPhw6hxRllzQqWFldw3xX9GFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:10:c6:2c:b5:ae:50:ce:a8:2d:f1:0a:85:31:d4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eda8529160585381f07801656ffc4c551298449f
        Validity
            Not Before: Feb 10 01:00:52 2026 GMT
            Not After : Feb 11 01:00:52 2026 GMT
        Subject: CN=fe82225c5bd97af2d5301467a1f23613ae5f13df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7f:d0:2e:e8:86:55:ae:2f:f9:b1:5d:a8:69:
                    87:09:98:0a:59:78:8d:6e:42:d9:49:ad:d8:65:d5:
                    51:cc:b5:fc:2b:96:ff:af:5a:82:0d:4b:9c:07:83:
                    14:19:7e:70:ce:36:48:d2:69:0a:c2:56:3b:98:59:
                    8c:77:29:b1:b7:51:6a:dd:b3:5e:0c:5a:69:67:3c:
                    88:98:c6:28:bc:12:79:2b:52:7b:ff:fb:88:09:0c:
                    02:6c:14:fa:0c:ed:83:09:7f:fb:46:ed:ab:08:e7:
                    9d:fa:40:5b:42:97:40:4c:ae:f6:f1:56:95:c2:4f:
                    ee:88:4d:23:fd:87:9e:2f:9b:21:d2:9d:38:34:81:
                    a0:51:00:a2:10:ca:45:95:7f:12:a1:bb:c3:e9:07:
                    a7:26:3b:6b:07:c3:79:71:45:33:66:4d:62:93:c6:
                    0a:ea:1b:9e:d3:94:8d:97:13:2f:1a:da:5e:af:2f:
                    26:fc:1c:0e:07:83:ba:de:5d:61:4d:3b:eb:27:ca:
                    0b:66:1b:2c:08:d8:1f:53:c1:56:8e:d0:88:8c:ad:
                    46:4d:b1:f7:6d:23:47:d0:90:66:ba:ad:ba:d9:83:
                    bd:5c:cf:9f:df:0b:4d:2f:b0:91:5a:9f:6f:7d:bc:
                    e9:1b:8d:62:14:a5:6b:23:16:4e:35:8e:d0:ea:06:
                    78:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:82:22:5C:5B:D9:7A:F2:D5:30:14:67:A1:F2:36:13:AE:5F:13:DF
            X509v3 Authority Key Identifier:
                keyid:ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d2:07:cf:d4:e8:d3:70:cf:dc:a3:64:65:46:f0:b5:c2:4e:
         fb:38:87:e0:fe:f9:1e:34:92:0b:f1:5e:04:2d:7c:df:e1:4f:
         46:61:fc:82:58:88:43:38:88:ed:6c:9b:fd:51:0d:da:83:2a:
         59:a4:b5:e3:81:ce:e0:b0:ef:61:22:4d:ef:5d:c9:c3:7b:5e:
         df:73:c2:56:a4:b3:de:a8:00:df:00:35:26:b7:74:a2:08:78:
         d3:88:9a:0c:c7:22:7e:24:09:dc:78:54:f3:36:5c:73:79:4d:
         9f:da:6e:cb:98:36:6d:b5:9f:52:03:c3:18:02:dd:c5:9d:0a:
         52:a0:30:86:83:07:00:4a:57:85:1f:34:8a:e4:db:db:6b:68:
         c6:69:52:82:45:a5:36:31:8c:91:2c:61:2f:56:1b:82:9b:ca:
         f0:82:66:94:92:f0:f8:f8:c3:6a:e2:5c:52:a8:17:59:cb:e3:
         61:33:12:ed:65:7b:10:f4:7f:9b:cf:c1:dd:ff:12:e0:12:63:
         2f:95:2f:88:97:20:1b:2c:3d:03:9d:6a:10:f1:8b:80:87:33:
         4a:ab:68:f5:28:c5:c9:d8:9d:02:49:6c:ec:e4:c9:32:f0:e3:
         83:f0:27:4a:35:bd:fa:1c:02:31:9c:12:4a:c4:d8:bb:1d:a1:
         79:c1:01:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:39 2026 by rpki-client