This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
File:                     S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json)
Hash identifier:          kyh9jh7daaQH9r/0W0mZvocBdw2chCkoxsoylQAzKNE=
Subject key identifier:   7D:2B:D4:90:77:5A:69:7B:B1:16:00:54:28:21:CC:22:64:CF:67:92
Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
Certificate issuer:       /CN=4bbbc1069775a804806b50baed7ece848abde8a7
Certificate serial:       019C4358D5E86788D14C1CAA4BFCD3F6F4B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
Manifest number:          10E7
Signing time:             Mon 09 Feb 2026 17:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:21 +0000
Files and hashes:         1: NtzUoTARnkc4QLuLuKK3L5i08Gg.roa (hash: WHzeIB9oGHBY17wslEieeVrvaTIjdjtqABPLJfiC5Hs=)
                          2: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: hlpLrraeFRRXR7wy0gMvHqmnQc84gAez4b2hTZqGRn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:d5:e8:67:88:d1:4c:1c:aa:4b:fc:d3:f6:f4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7
        Validity
            Not Before: Feb  9 17:00:21 2026 GMT
            Not After : Feb 10 17:00:21 2026 GMT
        Subject: CN=7d2bd490775a697bb11600542821cc2264cf6792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:96:f1:f5:06:07:70:8f:f5:3e:38:d1:19:
                    ba:d1:52:1a:88:61:da:33:2f:35:f1:2f:5b:a9:8d:
                    12:1f:7a:6b:10:b9:47:1e:52:e8:75:46:b4:f2:7c:
                    57:50:bd:eb:1d:8b:9a:c3:71:60:0f:f6:73:ff:75:
                    cc:63:6c:c6:c3:e5:72:b5:90:fd:fb:27:22:d7:70:
                    0a:0c:c7:ab:7e:b3:ce:85:93:4f:39:91:4d:f3:7e:
                    a3:7e:3f:1b:43:7b:4f:3e:63:c7:c6:a4:e1:a1:44:
                    08:f4:c9:eb:5d:44:22:b8:ce:ae:5d:13:4e:63:ee:
                    32:32:01:2d:13:d5:be:bd:0d:24:b2:38:58:c7:eb:
                    4b:bf:73:b5:13:bb:ef:90:86:87:79:f6:42:4a:e9:
                    15:d5:24:44:cb:b4:ae:43:a5:da:c6:f1:37:b9:01:
                    76:35:a3:59:9c:0d:2f:ab:a8:45:4c:d1:78:bb:1c:
                    c1:3e:09:d6:c8:e0:a0:2b:1d:b4:cf:bd:e0:a7:a8:
                    1d:ed:36:1d:80:5f:28:4b:36:d5:1a:e1:e6:b2:cb:
                    9e:a1:0d:70:43:7f:b1:9d:02:4b:cc:c9:7d:e8:c2:
                    34:d8:53:f4:6d:84:87:93:4a:4d:62:c7:66:4e:e9:
                    d4:f4:08:95:2e:ef:ca:ce:3e:b7:8a:f9:0c:75:9d:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2B:D4:90:77:5A:69:7B:B1:16:00:54:28:21:CC:22:64:CF:67:92
            X509v3 Authority Key Identifier:
                keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:6b:de:ad:13:03:22:c5:20:cf:87:86:13:7e:c5:6a:99:62:
         96:34:45:cc:5a:a1:6b:6d:28:b5:b1:21:55:93:6b:ef:bc:f0:
         24:37:2c:c5:98:d0:85:80:a3:24:f2:88:85:df:9e:9a:09:4d:
         d4:f1:6c:13:36:ab:ef:ab:5c:00:43:67:1b:65:4b:f9:10:6f:
         dd:fa:10:66:ab:45:9c:b1:8d:b2:f3:12:63:c1:0b:57:44:6c:
         73:70:73:ff:9e:08:57:47:9b:cb:45:b4:07:15:a6:7a:be:f5:
         c6:a3:4c:50:0a:66:55:aa:0d:ad:0d:f8:aa:8b:90:e4:bc:e4:
         af:53:7d:ea:40:b4:f8:35:ca:72:e0:4c:9e:dc:37:c5:67:5d:
         df:e5:0f:26:46:cf:f4:c4:1f:ec:48:5b:e7:cf:69:eb:9f:51:
         25:27:e0:ea:4b:ab:8a:73:9b:dc:e0:0c:de:1d:a0:70:14:87:
         ae:ff:dd:a2:e3:e1:4c:a3:50:ba:65:6a:ad:6e:78:69:19:71:
         b3:54:d5:d6:f3:70:56:7f:2d:1d:a8:99:39:a6:1d:5b:9a:b4:
         aa:8f:ed:03:84:03:f7:b1:24:ad:d5:00:a4:27:13:ea:35:da:
         5a:f7:d6:32:e7:bf:b4:a7:bd:51:28:b2:28:ff:ca:c7:0f:1a:
         da:ae:f3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:58 2026 by rpki-client