This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
File:                     7bkm-MYDqrectGqIO_YyVko_qr8.mft (raw, json)
Hash identifier:          M+7gehAoqDVnSthGLgsJ21T5XyXp9HDbweP+Q15lTEU=
Subject key identifier:   9B:28:B2:81:E1:7F:AD:A7:6D:36:3F:66:D4:B7:E4:3C:B8:B9:6E:78
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       019BF5AC7FEE5F2F68E00B9F359B9A2DE8F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
Manifest number:          1818
Signing time:             Sun 25 Jan 2026 15:01:21 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:21 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:21 +0000
Files and hashes:         1: 7bkm-MYDqrectGqIO_YyVko_qr8.crl (hash: q3p6W72CUW6AeGhfnycujemV4CnMy3jD91J3UY61H+w=)
                          2: ZOavrk-QF97rJP_2jNT7lmVgOvE.roa (hash: r2s3h1w3Hjfzrez9cKoP8cqtXCYOTfAkva8ue3B7Z2Q=)
                          3: b4zo6KiTgoc5L-wE1iEGLa3ot54.roa (hash: 7qq5CHWNx2oa5BEGotuEcxfckS6TczcC6U6UJrqCLzo=)
                          4: ffZakNnkJ9qo1A3shFhtl9qXd_Q.roa (hash: zf21A+pRvsATbzNE1edRMBnzKSA0PFpPQRbeA3NRvG4=)
                          5: i5sVIykITJhFoNGVdqX3qFf6Cc0.asa (hash: z2bcBM4bF0FCwzKB9WKDbXNW4is6WFRzNqcdWd30bYM=)
                          6: yAkFpEjxzs83ywPRwqAL5e8lJeY.asa (hash: UIEBVxj1ZzIVrxFkEdeMxmISP4feVXlw74eOZ0lv+Sk=)
                          7: ySpczFe0bFDpQcjPCdkMrRLgsk4.roa (hash: 4bkzvAWfxVndAxO5MdGK6YbLnfuFOHsrNBENCi5CdAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:7f:ee:5f:2f:68:e0:0b:9f:35:9b:9a:2d:e8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Jan 25 15:01:21 2026 GMT
            Not After : Jan 26 15:01:21 2026 GMT
        Subject: CN=9b28b281e17fada76d363f66d4b7e43cb8b96e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5c:8d:7d:b7:0a:fa:03:b5:c3:00:7b:79:d4:
                    a5:f0:c2:0c:a5:d8:bd:5c:a3:97:0c:5a:f7:a0:cd:
                    8f:d3:21:e7:90:08:0b:26:d0:19:b0:db:8e:2b:23:
                    73:3a:c9:78:3e:f8:9c:9a:21:36:0c:2c:7f:08:1a:
                    cd:23:ee:17:bc:3b:fd:39:99:84:39:29:c7:a3:34:
                    33:8f:a0:5f:57:da:13:91:c7:3c:03:86:88:3e:ab:
                    91:69:42:c5:0d:b3:cd:7c:d5:87:f4:92:46:07:e9:
                    77:2f:42:8d:ed:59:f6:4a:00:18:d7:bd:8e:b7:4f:
                    d6:a1:37:62:12:6c:e7:9c:87:dc:d1:2b:f8:16:22:
                    71:a8:63:a3:a6:c7:4b:21:fc:b9:03:15:04:8d:dc:
                    d9:cd:aa:82:6c:29:ef:f5:00:09:a3:04:58:22:e5:
                    01:1e:c4:b1:29:8d:aa:02:b0:f5:1f:7b:70:cf:9c:
                    85:7f:8d:e3:1a:50:6f:b6:f9:43:97:76:2b:8c:7c:
                    2f:ae:84:60:35:01:96:59:94:8a:76:1a:9b:12:f1:
                    d2:f4:4a:e9:a7:b7:58:ce:d1:5c:a8:6c:19:9f:7e:
                    59:c5:97:e6:bb:d4:f0:f9:5b:dc:b4:57:a5:eb:62:
                    7d:31:1a:bc:fd:a8:3f:ba:8d:8a:c6:66:46:7d:b8:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:28:B2:81:E1:7F:AD:A7:6D:36:3F:66:D4:B7:E4:3C:B8:B9:6E:78
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f6:7c:f3:8c:5d:c9:50:55:e6:08:e4:95:60:30:d3:00:7c:
         90:09:9c:31:f9:15:dc:6c:84:bd:a4:80:32:4d:75:9d:a2:81:
         d4:b5:ed:8d:32:74:fc:9e:f2:36:8b:0f:c5:63:c0:ff:b0:85:
         aa:0a:8e:91:48:df:11:ee:72:e1:da:ed:63:f6:9d:ad:bc:bd:
         64:7d:65:a3:b2:c6:8e:41:18:75:b2:7f:79:ea:1d:64:59:c5:
         13:a9:ac:b4:66:ba:2a:72:15:83:2b:8a:8b:8b:76:1e:35:7d:
         ac:e5:50:23:e4:e7:ee:a0:c8:b8:18:b3:63:b0:3f:23:2b:73:
         3f:c6:38:4c:8d:bd:42:24:09:7a:76:92:2f:a7:37:03:d5:9d:
         b8:1b:55:86:60:f1:a2:33:3d:0a:1b:0a:2d:b6:b6:dd:93:00:
         f6:27:da:4a:12:e9:b2:de:a8:00:62:47:44:43:bf:0b:39:27:
         73:32:2a:4e:6c:02:e4:ff:b1:f5:a6:2a:8c:d0:cd:c6:f7:9f:
         5e:ef:01:96:56:04:17:96:de:44:9b:5e:20:2c:b2:78:5d:e3:
         64:cb:9b:fc:49:0a:f0:0c:be:7a:91:ed:56:b6:3d:75:ff:4f:
         85:52:2a:da:25:9b:a6:26:54:56:c0:8a:af:8d:98:26:c5:07:
         24:33:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:54:39 2026 by rpki-client