This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
File:                     7sxM83JBztFGfJGKonbTiLCoLtU.mft (raw, json)
Hash identifier:          UnZR7wBWkMSPopPfrU7Pdc6lohJIzhxx/q0TAJHJbGg=
Subject key identifier:   05:FC:CC:8A:79:C8:FE:AE:D2:E6:14:7D:74:D7:10:31:98:31:B0:79
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Certificate issuer:       /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial:       019C41D867B6C6DC68DD4FF3594DAEC5B7E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 10:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:27 +0000
Files and hashes:         1: 7sxM83JBztFGfJGKonbTiLCoLtU.crl (hash: y5zUiA8Q7zS3wyOOSHS8Rrt+wFu8U0DGcx/H3JVLxO8=)
                          2: QxCjxkjtj8M1Cw8s1SanJKG1uKw.roa (hash: yUeAAf/exzaMVpONZcSdDF3y2oSzL/ioLlZZZr6Czjg=)
                          3: hYf0wiSt5UOQBZRTWRiBOS988RY.roa (hash: 4jDomdS9bAQ98ArIxK0xlDy/5jdmzb5p/if3uxmbpbI=)
                          4: jXTSk0KpzmwKGlT8c0WjRwEGGZY.roa (hash: NnQHdGOV+Y72Fq5VRgEhZrBnuzQZy/8YU6VukVFGbMo=)
                          5: yaUBqNTaQMWqSltcjWLwAbI6Dic.roa (hash: sOTKYTUCmoiXCQC706JaxDQN8FM9bOIQlniRkh/J3lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:67:b6:c6:dc:68:dd:4f:f3:59:4d:ae:c5:b7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
        Validity
            Not Before: Feb  9 10:00:27 2026 GMT
            Not After : Feb 10 10:00:27 2026 GMT
        Subject: CN=05fccc8a79c8feaed2e6147d74d710319831b079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:90:99:ca:54:76:4d:a2:e5:88:6a:ee:ff:
                    16:1e:3b:29:df:7b:07:d8:19:e3:ab:ca:b1:25:93:
                    08:92:ba:63:3e:ee:23:f0:fd:63:35:6c:0e:12:e1:
                    82:82:75:63:24:94:80:90:9a:f8:78:8f:23:61:79:
                    42:59:17:06:fd:c9:cf:89:7d:3d:f8:cb:da:44:28:
                    8f:d1:f1:1b:ac:69:8f:4b:9f:25:fc:c0:c3:17:c4:
                    3c:a4:24:3e:1e:9a:42:26:66:81:0f:af:3e:db:ae:
                    54:f4:4a:12:c9:13:91:ff:35:22:bf:f6:5c:12:13:
                    b1:b6:aa:fa:b7:e0:59:54:d8:a1:7e:5e:21:0f:9d:
                    25:fd:68:ac:08:37:20:81:9d:44:6b:b2:37:c9:f7:
                    a2:49:8f:68:94:fe:14:c9:53:08:f0:3c:3f:02:4c:
                    dc:40:34:de:ae:b9:1a:4e:bc:b7:c9:ec:01:bf:2a:
                    c5:f8:61:f4:4e:dd:cf:46:c6:c2:ed:c0:13:67:19:
                    72:1e:f3:67:b8:34:da:43:7a:1d:8c:60:d4:af:c7:
                    b5:6e:02:53:80:b0:ad:50:24:a8:89:89:8c:3e:64:
                    5b:05:8d:91:ab:fb:ab:4e:dd:98:b7:07:17:d4:dd:
                    26:b7:13:98:fc:18:06:6f:40:12:e7:d6:eb:91:6c:
                    d6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FC:CC:8A:79:C8:FE:AE:D2:E6:14:7D:74:D7:10:31:98:31:B0:79
            X509v3 Authority Key Identifier:
                keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:1e:80:c3:ea:0a:ed:43:24:fc:ab:ee:fe:50:4a:77:0c:cb:
         cd:59:03:5d:7f:f6:12:c7:92:dd:78:4c:f4:ed:cd:af:48:a9:
         5c:f2:38:b1:ec:9c:7d:11:2c:0a:db:0d:28:52:61:b2:7e:c2:
         b6:4a:87:d8:11:3a:09:af:bc:34:9c:19:e5:71:de:cc:04:a3:
         6f:b7:3b:a0:3a:e3:ee:68:0e:7d:97:b9:e2:cd:ea:71:6c:2c:
         df:e7:48:0d:8f:32:a9:0d:42:0d:00:36:60:72:95:db:aa:91:
         fe:46:72:8b:c9:7d:59:60:5b:74:5a:b6:63:7b:41:a1:c2:32:
         6a:ef:8c:33:34:06:89:ef:ce:7c:0a:75:69:43:6f:8c:52:0d:
         ee:0d:ae:06:90:af:57:c3:fc:21:c7:94:06:dd:cf:87:81:4e:
         e3:5d:d3:4a:2b:15:b7:eb:3b:20:67:35:55:d8:aa:7f:4e:9d:
         45:f8:76:d6:59:45:4f:9e:6e:35:e9:f3:07:5f:e2:af:55:7f:
         55:ea:e0:8b:61:3f:e2:f2:bf:08:60:c7:49:c1:5a:e3:31:cf:
         bb:a2:46:e1:74:66:56:3b:0c:85:15:86:0e:6e:ef:b6:c3:cb:
         f6:7f:4a:98:cb:3a:aa:ee:01:9b:7f:f2:b1:fa:41:f0:7e:0a:
         4e:87:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:10 2026 by rpki-client