This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
File:                     7kw_wBItgx--qKuyCk6bZcVAObI.mft (raw, json)
Hash identifier:          rjmpHWAwBZ7q9H51mGPtw8k1IOhu1DqKmcAr50GcNAs=
Subject key identifier:   76:C4:85:F4:2C:1C:A0:61:6B:CC:90:D7:75:50:1A:F4:66:7D:9D:50
Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
Certificate issuer:       /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Certificate serial:       019BF5074AC8768B8E1411D07182434AD5C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
Manifest number:          177F
Signing time:             Sun 25 Jan 2026 12:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:54 +0000
Files and hashes:         1: 7kw_wBItgx--qKuyCk6bZcVAObI.crl (hash: 3LNT0X8nNteIluZrr3hruVBn3+jC+vyGksqPhKJxQsI=)
                          2: VUUp1uAX40MPKyDcAzJjGno-5LY.roa (hash: yAb3XZUvdevqGqaQ9+mhuyzglvHMO4AtEqM2+RGZpR0=)
                          3: vP7vlHll0pUsAYDnA7HZBa8Dv_A.roa (hash: u4s3et3xRD7wegNnSUcKT73wjZJAhCGvvUbznbj46B0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:4a:c8:76:8b:8e:14:11:d0:71:82:43:4a:d5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
        Validity
            Not Before: Jan 25 12:00:54 2026 GMT
            Not After : Jan 26 12:00:54 2026 GMT
        Subject: CN=76c485f42c1ca0616bcc90d775501af4667d9d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:ce:ba:9c:b9:68:67:82:f5:cd:4c:3e:d9:
                    95:df:b7:7b:d4:e7:64:98:5a:bd:77:7b:6c:08:3a:
                    bc:44:e2:e2:55:6e:24:9c:c1:a0:da:a2:d8:e7:0d:
                    9c:ff:67:63:9c:c7:72:88:4a:79:10:7d:41:d5:49:
                    32:5b:fc:8c:f0:5d:1e:93:f7:6e:01:86:cc:26:f3:
                    22:d9:55:86:df:00:99:eb:82:a0:fa:f2:09:f9:3d:
                    94:5a:92:6b:75:77:0d:a4:cc:ec:79:a6:2c:8a:9c:
                    a8:48:58:b2:81:87:1f:45:56:a2:82:cc:73:ed:08:
                    63:bf:6d:f0:13:d4:0e:41:d6:e8:ca:a6:c6:f5:c2:
                    5d:80:48:94:f9:45:dd:b9:79:21:73:ed:0a:6f:a6:
                    40:c0:9f:aa:ee:9e:14:c1:05:96:27:65:dc:d1:35:
                    ea:47:6a:6e:fe:af:2f:3c:3f:ad:4e:a8:69:ae:70:
                    a8:3e:b9:d2:23:92:eb:2d:31:2a:fa:d1:c1:39:53:
                    e3:fc:76:c9:8c:c7:00:5a:fa:4f:91:4e:08:5f:be:
                    b7:8b:3c:d8:0c:46:7b:a7:2f:0c:56:af:c1:db:6d:
                    2f:0b:ff:f8:8f:68:76:86:84:bd:ca:aa:97:d5:76:
                    82:a2:61:ed:cc:b9:ab:8f:79:7b:2f:73:fa:21:56:
                    fa:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C4:85:F4:2C:1C:A0:61:6B:CC:90:D7:75:50:1A:F4:66:7D:9D:50
            X509v3 Authority Key Identifier:
                keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:40:dc:a0:40:4d:c0:27:3b:30:2b:ee:e3:9c:3b:ce:35:
         d3:92:31:7d:69:ef:84:fc:34:65:27:0c:c0:50:00:72:7b:ae:
         07:05:d4:24:10:0f:67:46:2a:93:d3:9e:ce:2d:dc:df:04:6f:
         f6:31:21:de:c1:e0:4a:b1:22:1b:23:4c:5b:87:2d:7c:e7:1d:
         ee:92:af:c5:7b:29:6a:bf:87:a7:30:4d:9a:c7:d7:8e:27:d8:
         35:c9:68:42:85:31:b7:4a:93:2e:52:4a:e1:33:3e:8d:7b:b0:
         0a:46:27:38:e0:49:8e:d6:19:12:d1:2e:41:2c:15:29:fe:64:
         c7:d6:42:84:6c:a0:3b:94:30:37:2c:5d:f1:d9:ce:1a:0b:3e:
         73:58:fe:48:b9:d5:34:54:6f:26:ce:46:da:1a:2e:c1:41:b6:
         0b:51:c2:b1:58:23:1f:8a:b6:ba:87:a5:34:af:46:37:af:83:
         1c:2a:00:91:2b:ef:45:32:fc:28:3a:4c:02:ea:7a:7c:42:26:
         63:ab:3f:c2:73:cb:f0:e3:2e:66:94:50:55:60:e5:d8:e9:79:
         94:15:f9:ab:86:d9:bf:51:74:8d:8e:4f:5a:72:2f:ac:f4:b9:
         31:5a:75:54:d1:c7:61:ec:01:1b:75:ff:cf:51:3f:3c:80:25:
         6e:7f:14:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:33:20 2026 by rpki-client