This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
File:                     7E-wYalCbk-yiF2CKGdXKhtYpMA.mft (raw, json)
Hash identifier:          IYaboeinIXrQsy1RLdz+xVUNwpi5pGf9AwfUUcMSNII=
Subject key identifier:   EE:CF:79:67:61:DB:C0:A4:A7:E0:FD:4B:25:A9:EC:0D:8F:DC:C0:FB
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Certificate issuer:       /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial:       019BF53E08E480C7860E225F5195C6BFEFD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
Manifest number:          1809
Signing time:             Sun 25 Jan 2026 13:00:41 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:41 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:41 +0000
Files and hashes:         1: 2fDseKScrEQh0sSbvytiE06uK9I.roa (hash: CLozqrOGLvVC4xTilwXOTbi5gGsIQCgs35MI//GmCeE=)
                          2: 4dbfLFgTwDYrqXnFB2f4xHMplQw.roa (hash: qdee12QBSfwV430rgWvKnONQnxAQwUpDJUc9sSl89Tk=)
                          3: 7E-wYalCbk-yiF2CKGdXKhtYpMA.crl (hash: 0rLV7ODrwOQ0NgdQ1Dx4vFIoG4JWAtF9pc1MkAs2fu0=)
                          4: K2LNv1z48hNFFlzRSYowSy0Ha38.roa (hash: rgP0qv2b0VyfQUIaOOjPzTbyBIqlmlW8gSl7h4qofNM=)
                          5: ONxDY1rhD3kU42V5HpJ9nZuvq1A.roa (hash: v75jSOvDfshGc0u/qVs6GxzqaTcy95i546WBOIXYfM8=)
                          6: QAfMhvFz23E5j-VZNuNUHJaS27A.roa (hash: 1c6wEWGOfe30pbIdsgVXmuoN1jcDboRJaqg+bTctZUo=)
                          7: fScuGoqudu5TxiE70DprlLcKYsM.roa (hash: Qna0Roz67B/VzCkvRv3pYKjnRZOrhXbgEhbWUZJL9So=)
                          8: x_MESfhEqxOpfv7-RrmmKFZTQsM.roa (hash: CgnbbvmY6nJeIwGOkAE0qQBeAzVO6strLDPz3xd7ol8=)
                          9: ymuaW4C8o-lO-r5wBm-7A05dtLg.roa (hash: g3AL+YyG28zpjRvk8zWwYh7S+XChprFtrfTtHo1inzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:08:e4:80:c7:86:0e:22:5f:51:95:c6:bf:ef:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
        Validity
            Not Before: Jan 25 13:00:41 2026 GMT
            Not After : Jan 26 13:00:41 2026 GMT
        Subject: CN=eecf796761dbc0a4a7e0fd4b25a9ec0d8fdcc0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:d6:4f:43:66:12:25:0f:8e:4c:89:27:96:
                    8d:db:a1:55:87:0a:59:39:54:11:22:a8:b4:77:8f:
                    68:4d:74:ca:18:55:a5:60:55:5a:51:1b:96:70:08:
                    a1:5d:bb:5f:7d:0a:38:86:93:d3:51:49:90:57:5a:
                    34:3e:40:fb:dc:9d:00:63:7d:3f:a8:58:b8:ee:b1:
                    c0:e1:ec:36:15:b0:5b:f0:ee:65:b6:f2:55:77:52:
                    9d:da:cf:c8:72:0f:cf:99:f9:27:6c:15:9d:3c:be:
                    50:fa:7d:3c:a4:f2:f6:28:56:6e:16:d6:fd:1d:2f:
                    6f:b0:e8:68:7c:f5:11:12:7d:19:dd:74:8e:35:b1:
                    cc:e4:b6:58:60:5f:cf:db:f8:64:78:bd:7c:2b:35:
                    92:87:87:bd:2f:5f:df:db:0a:10:f6:d7:04:77:dc:
                    93:6d:a8:6d:e3:1f:4c:22:c9:ce:ad:60:73:98:8b:
                    b3:a4:af:44:8c:8f:2e:b2:e3:4a:08:7a:9f:88:92:
                    4d:13:6d:17:31:ff:fc:86:0c:29:2e:f7:b6:fc:1d:
                    a7:9c:87:43:41:1e:69:31:51:85:95:75:4b:c6:ba:
                    1f:7d:84:47:f6:a6:ef:4f:af:5c:1f:4a:5d:73:64:
                    c9:c7:dc:40:1e:81:ff:9e:b1:a1:45:00:d1:6e:b9:
                    1e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CF:79:67:61:DB:C0:A4:A7:E0:FD:4B:25:A9:EC:0D:8F:DC:C0:FB
            X509v3 Authority Key Identifier:
                keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:82:65:17:f9:f5:66:6f:83:18:c9:ec:47:d9:59:22:f9:87:
         af:be:09:30:e4:85:b0:96:d7:ac:f1:e1:e1:ef:e5:27:19:70:
         ee:50:b8:36:c3:ac:36:24:a6:43:4d:93:de:b8:30:91:34:de:
         b4:45:5b:3d:5e:61:5a:87:9f:10:1a:64:be:1d:a6:4d:6d:59:
         c1:df:39:6d:86:06:a1:82:2b:dc:6a:1f:33:30:84:b6:1c:fe:
         fe:66:74:d0:d9:af:f2:db:b7:e0:69:b3:6f:26:f5:49:22:c2:
         0d:61:06:59:c1:4b:66:45:ed:da:73:33:f4:6a:b7:14:61:0c:
         f6:ab:08:8a:14:b9:b3:54:79:a6:33:c5:e7:80:4d:ff:d2:88:
         b0:9a:02:13:96:4e:42:0b:9b:50:61:12:19:17:e5:1a:f3:b5:
         56:84:74:ef:d1:70:95:a1:53:9e:6c:5c:18:e5:f1:2a:55:17:
         11:bd:74:08:cc:8b:c9:8a:7f:f7:3a:7d:ca:dc:98:b3:47:4a:
         02:55:3a:78:82:4f:5f:40:9a:97:f6:57:fc:33:12:43:50:8e:
         34:a2:b8:b2:6d:a7:e2:51:b4:2e:1a:80:32:0e:2e:1a:43:9d:
         27:c2:ff:e0:77:d0:73:17:c9:f9:60:a7:a5:12:5e:41:0a:31:
         c5:0c:2b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:32 2026 by rpki-client