This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
File:                     7t4TuXp8d4rYAT-v-isbtkh2LPw.mft (raw, json)
Hash identifier:          l7Znfd+FMHfo/rb5yOV244Bia3C6vXL7CG0bT3zedj4=
Subject key identifier:   02:59:D3:E7:1B:85:7F:74:EC:A5:6E:4E:43:F8:1A:85:A2:1F:6F:65
Authority key identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
Certificate issuer:       /CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Certificate serial:       019BF4D06D20A68C063586BB9C5DA1FDA275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
Manifest number:          37
Signing time:             Sun 25 Jan 2026 11:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 11:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 11:00:58 +0000
Files and hashes:         1: 7t4TuXp8d4rYAT-v-isbtkh2LPw.crl (hash: A/GW6z86FSqvAjCub2A91/arju1qYJUtMjhndghdCmk=)
                          2: rJsk5UMhrb6yg-v-N5l8AaeXSUI.asa (hash: r6SGrYKI+ASOCBn2fHuASlLRkC7+wUAXBFPIKFArmfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:6d:20:a6:8c:06:35:86:bb:9c:5d:a1:fd:a2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
        Validity
            Not Before: Jan 25 11:00:58 2026 GMT
            Not After : Jan 26 11:00:58 2026 GMT
        Subject: CN=0259d3e71b857f74eca56e4e43f81a85a21f6f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:dc:3d:0e:72:7e:9d:f1:26:9c:01:ca:29:
                    dd:a2:d3:6c:ae:5a:34:1e:21:75:2e:0a:c0:86:a4:
                    e2:60:2c:03:7b:a4:43:b0:45:8f:8d:22:5d:83:df:
                    24:ed:5f:0b:b2:19:c7:d5:0a:d5:80:0a:35:17:4c:
                    90:d2:24:fe:2f:b9:1a:bc:15:e7:30:d8:73:81:50:
                    26:2a:b8:12:93:7a:3d:bd:24:5e:0a:30:b8:a4:ba:
                    7b:72:96:78:2a:ad:31:3f:78:3c:31:50:c5:7f:c9:
                    77:6b:d7:78:d2:34:fc:59:96:8f:35:48:19:58:88:
                    1d:f3:71:fd:a4:69:e0:05:73:43:fc:81:b5:32:85:
                    0a:5a:1a:e2:5d:a2:26:ce:bf:09:fc:8d:72:b7:c5:
                    ac:c1:99:60:36:6d:0c:39:63:48:f9:90:5b:fb:fa:
                    23:15:a3:19:78:08:7e:5c:6f:75:52:85:6c:c3:46:
                    1a:28:e2:08:ab:b9:3e:86:d4:52:80:7a:b2:4b:2c:
                    05:34:e8:61:0e:57:14:89:fa:9d:fd:07:ee:41:b0:
                    d9:14:25:c3:f1:ee:9d:e1:df:29:4c:38:47:19:dd:
                    1c:a9:b3:4e:51:c1:f0:8d:9b:dd:3e:a1:e7:d9:22:
                    0a:e2:09:90:43:9c:19:bf:c6:e5:48:7e:71:50:06:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:59:D3:E7:1B:85:7F:74:EC:A5:6E:4E:43:F8:1A:85:A2:1F:6F:65
            X509v3 Authority Key Identifier:
                keyid:EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:1b:6f:07:24:2b:a0:b1:37:a2:e2:d6:4f:8d:18:55:f9:4e:
         1f:b0:5f:94:98:d0:45:3d:48:a3:2d:50:a9:0d:4b:fd:5f:92:
         cc:9f:d9:8a:96:65:d5:2f:93:c1:b0:32:6b:b3:98:a7:f3:6a:
         06:d3:c8:b1:95:1c:b2:0b:08:f9:54:27:3e:04:8e:8c:d5:3a:
         5d:41:49:fd:cf:80:74:61:c2:13:34:d3:bf:1a:44:e7:be:bb:
         84:82:b7:2f:b0:6b:b8:61:42:28:b6:a7:98:17:90:dd:96:db:
         66:d9:9a:70:0a:4e:9a:a8:91:16:17:21:7c:7c:34:1b:ad:f9:
         9f:5c:90:05:10:9d:41:e1:63:e0:d5:27:71:74:f3:8d:0d:06:
         80:47:a1:ec:4c:01:a6:2f:c6:e0:33:25:fd:ae:96:0d:c3:48:
         77:91:54:c0:c3:94:47:1b:11:87:72:76:a8:39:03:53:0e:73:
         f5:27:99:a0:e8:45:8f:f7:90:ec:c6:d6:58:9d:63:ba:35:86:
         11:62:e4:d4:e9:b7:4f:b5:d9:7d:ed:0a:a2:2b:16:3a:29:51:
         ea:9f:bd:90:8f:03:b6:9d:8e:c4:78:51:86:96:a4:49:11:cf:
         88:2f:1a:15:ce:43:33:fe:9d:ab:0e:d9:0e:b0:73:70:f4:fb:
         66:3b:76:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:59:57 2026 by rpki-client