This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
File:                     _u7-64gyDdP1gKaLWxzwpiQxBcw.mft (raw, json)
Hash identifier:          Y7B6Gly/XHbd4XWTu/J9/ZeuEjBosLRM4obI0Jz6dK0=
Subject key identifier:   EA:66:2B:30:3A:69:71:B6:99:EC:56:E0:DA:1F:8F:0D:3C:27:1F:A0
Authority key identifier: FE:EE:FE:EB:88:32:0D:D3:F5:80:A6:8B:5B:1C:F0:A6:24:31:05:CC
Certificate issuer:       /CN=feeefeeb88320dd3f580a68b5b1cf0a6243105cc
Certificate serial:       019BB05DD220D8AFA40D298A9663B3E8AA2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
Manifest number:          0B62
Signing time:             Mon 12 Jan 2026 04:01:37 +0000
Manifest this update:     Mon 12 Jan 2026 04:01:37 +0000
Manifest next update:     Tue 13 Jan 2026 04:01:37 +0000
Files and hashes:         1: _u7-64gyDdP1gKaLWxzwpiQxBcw.crl (hash: 0LfwYDjY8a4wxsmnlCdIHzFg2YtnLMsgDvvXcanI2XA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b0:5d:d2:20:d8:af:a4:0d:29:8a:96:63:b3:e8:aa:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feeefeeb88320dd3f580a68b5b1cf0a6243105cc
        Validity
            Not Before: Jan 12 04:01:37 2026 GMT
            Not After : Jan 13 04:01:37 2026 GMT
        Subject: CN=ea662b303a6971b699ec56e0da1f8f0d3c271fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:ac:30:24:60:80:7e:87:8c:5f:c3:04:40:
                    15:3c:12:86:04:ec:75:56:54:46:04:db:0d:1c:f5:
                    f0:cb:49:e2:7e:1e:37:20:3d:1d:bd:3d:1d:65:f9:
                    b7:de:7e:94:63:1e:09:b4:46:8a:55:14:9d:96:f0:
                    57:9f:b5:0d:51:f0:60:00:6e:42:6d:f5:dd:98:35:
                    12:fb:4a:54:17:83:0b:98:01:7b:e8:83:46:34:b3:
                    66:f7:e0:41:1b:20:5c:24:fd:eb:70:81:10:10:39:
                    4e:18:67:58:87:81:33:ae:49:ed:af:7a:1e:8e:f6:
                    8b:b0:c5:a3:e8:c2:36:06:3c:ee:d0:09:e8:38:e6:
                    bf:d1:25:45:6a:b1:82:06:2f:59:80:9a:21:c8:a1:
                    77:cf:ae:cb:ba:c6:d2:3d:60:4c:bf:1c:e3:cc:b3:
                    f8:b6:af:3a:5a:28:11:07:92:e2:de:2a:1f:f9:38:
                    88:03:de:16:a5:39:08:23:21:48:56:a8:ec:c7:df:
                    87:8d:fc:a0:fc:38:08:80:0c:19:ea:8f:ef:b5:07:
                    e2:97:02:e9:af:24:56:7c:b6:d0:dd:30:8a:63:fd:
                    16:98:7e:2f:32:5e:b4:94:e3:06:1e:f5:e4:77:9f:
                    f7:13:35:27:d0:a1:cf:01:1f:7e:e7:68:87:56:8a:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:66:2B:30:3A:69:71:B6:99:EC:56:E0:DA:1F:8F:0D:3C:27:1F:A0
            X509v3 Authority Key Identifier:
                keyid:FE:EE:FE:EB:88:32:0D:D3:F5:80:A6:8B:5B:1C:F0:A6:24:31:05:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ce:bc:0c:2c:2a:5e:1f:15:b6:19:ad:fe:0b:14:42:9c:ad:
         34:d7:20:1d:48:e5:b8:fd:7b:22:d4:71:9f:94:18:ba:89:b4:
         63:b7:3a:99:ba:a4:13:16:c7:d0:27:7d:a9:99:66:d4:d6:35:
         57:1f:61:91:5c:1c:e0:b2:a3:c9:e4:6c:a7:59:7a:2a:ec:32:
         dd:1f:cf:85:00:00:41:5b:6b:6d:c6:98:ff:42:34:c9:7f:87:
         cd:f1:98:c4:a4:df:b1:cd:2d:a6:c9:eb:e8:9a:f5:c9:62:5b:
         7b:54:fc:86:31:f4:fc:8a:8d:2e:5c:83:51:8e:15:10:0e:aa:
         74:a6:e4:3a:45:78:07:64:93:e9:a2:70:fa:6e:b7:6c:9f:58:
         f3:e4:43:be:ac:21:5a:eb:76:9c:15:0c:11:d9:9d:fd:c5:3c:
         6d:63:be:13:07:61:3b:74:8e:c5:16:f8:ea:1f:b8:9c:a1:3b:
         53:2f:39:40:22:31:48:41:b9:bb:87:41:4a:be:ca:bb:c5:82:
         b3:54:66:75:a1:26:4b:18:23:8e:87:7e:64:52:cd:49:8a:c6:
         c0:73:64:69:53:17:2e:b9:c9:e6:e3:89:30:31:49:32:60:7b:
         31:26:5d:7d:a2:96:b7:55:24:a0:0b:1d:ca:ba:75:37:79:f7:
         ce:3e:3e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:45:56 2026 by rpki-client