This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
File:                     s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json)
Hash identifier:          QxsRZmkbBLWk9N5qqJDToFEDr1Iod6dFWZVcM0jxjso=
Subject key identifier:   13:E1:2D:AF:62:C4:FA:68:8D:05:F0:27:9B:AD:2B:58:1A:72:90:C9
Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
Certificate issuer:       /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Certificate serial:       019C4359243E46A136FE6ADE2C0659F356C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
Manifest number:          0D69
Signing time:             Mon 09 Feb 2026 17:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:41 +0000
Files and hashes:         1: h5TBAsD0PIrK8ZbXvXzmuZYvjfc.roa (hash: vh2mYfpn9jYyEFKZRDPA3enKaVdAJO56xPGBRHR7x4E=)
                          2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: xsJ3HDveeuD3bExX3zDLTkjvT2fIa/AM/NGpH/dVtnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:24:3e:46:a1:36:fe:6a:de:2c:06:59:f3:56:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
        Validity
            Not Before: Feb  9 17:00:41 2026 GMT
            Not After : Feb 10 17:00:41 2026 GMT
        Subject: CN=13e12daf62c4fa688d05f0279bad2b581a7290c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cd:ba:b2:16:d3:f1:cc:00:72:d5:36:ae:62:
                    de:52:81:2c:9a:ee:e1:a0:1a:6e:06:22:9d:fc:b2:
                    36:94:b8:23:66:2e:27:09:1e:da:88:42:a8:fe:93:
                    11:36:c4:c2:6f:62:f7:8f:c7:30:bd:5c:ef:ee:f3:
                    0c:75:7b:51:45:d1:92:8b:0c:f0:c3:d4:d5:79:fc:
                    61:7d:30:45:c1:03:1c:ba:47:ef:7a:97:4b:15:27:
                    65:f7:93:86:f1:6e:93:e8:79:7a:ba:da:67:ec:a3:
                    9e:94:62:0b:c8:1b:a7:c7:91:06:5c:e7:cd:c0:33:
                    e3:07:2c:47:24:7b:ea:bc:dd:93:e6:26:0a:fb:82:
                    26:96:ad:7b:b9:d1:1f:a4:aa:93:5d:4f:f1:db:82:
                    68:e0:96:6f:cd:09:6f:62:9a:5b:3e:5f:1e:63:e0:
                    a8:8f:d6:ca:91:c1:44:34:53:7a:e1:04:f4:1e:ee:
                    13:3c:a1:cc:3c:0b:54:28:3d:28:c9:07:89:f2:30:
                    13:9d:e3:bd:c3:82:49:5b:36:98:c3:63:be:b3:71:
                    51:90:cb:c0:7c:85:3c:21:34:08:75:33:32:9b:6a:
                    2a:88:36:c7:ef:6f:40:f1:3e:15:9a:51:e5:66:3f:
                    f5:c7:be:dd:36:1f:70:37:8a:5f:7d:c8:69:c2:9a:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E1:2D:AF:62:C4:FA:68:8D:05:F0:27:9B:AD:2B:58:1A:72:90:C9
            X509v3 Authority Key Identifier:
                keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e3:56:cd:c8:23:28:10:3f:e5:d8:f3:3e:b7:8f:f2:81:71:
         2e:19:eb:36:d5:44:9f:98:40:d4:e0:18:a5:f8:30:35:3b:2d:
         b5:76:0e:8f:fe:b0:38:b0:43:9f:ff:c5:de:98:66:95:c3:41:
         0c:0b:69:d8:c0:14:fb:3a:c6:08:64:ca:b3:ed:38:80:10:b1:
         ea:95:fb:ad:20:88:dd:77:e3:ba:00:23:0c:d7:b5:0e:cb:ab:
         b5:ce:6a:8e:c9:c3:c4:b6:85:c9:79:6c:66:5b:0e:74:2f:38:
         21:90:b5:94:24:7f:94:c9:9f:1e:d3:da:ee:de:c6:c0:b1:31:
         8b:32:16:6a:12:92:73:e5:12:0f:b7:bb:b5:d7:3c:67:58:ef:
         78:fa:40:cf:3d:27:46:e2:13:2e:5c:aa:13:49:07:12:8e:11:
         55:4f:16:82:5a:e6:33:05:78:32:4c:5a:b2:43:8b:41:8c:80:
         a5:34:b1:b8:68:f6:ff:bb:20:3f:16:71:79:6c:25:e0:7a:9f:
         77:82:07:14:fb:11:34:5c:d0:b9:74:a4:a7:84:77:c5:82:32:
         54:03:3b:42:9e:f7:01:55:65:d6:6d:0d:1d:e4:d0:2d:c1:65:
         4d:9a:86:ad:be:ec:2f:67:4e:85:0f:1b:bb:b9:92:77:cd:1e:
         d9:92:8e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:21 2026 by rpki-client