This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File:                     FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier:          q9XULNbu+T+ndDcl5CitjQpK8Hckaox98EWwyot7Fi8=
Subject key identifier:   FA:44:70:90:43:08:91:F1:98:1A:F7:76:0D:AE:FD:16:B0:08:6F:16
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer:       /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial:       019C427D64964E10E469B824DA8E91FBCF08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number:          09E9
Signing time:             Mon 09 Feb 2026 13:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:39 +0000
Files and hashes:         1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: 5gzXISq7d9JPlwzyvXDqez45vqDIIOlbVs9m2UA+glA=)
                          2: wzKWY6Wt2mb7gzv6ILxVI9gqBVI.roa (hash: Ih5+NRozSgaecg0vA3twm5kYdnmkAGbTAu9H3wik/xE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:64:96:4e:10:e4:69:b8:24:da:8e:91:fb:cf:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
        Validity
            Not Before: Feb  9 13:00:39 2026 GMT
            Not After : Feb 10 13:00:39 2026 GMT
        Subject: CN=fa447090430891f1981af7760daefd16b0086f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:2a:27:5f:f8:e0:71:14:d0:60:4d:30:c8:
                    1d:25:df:aa:06:2c:9b:48:44:17:08:b1:de:db:c9:
                    78:74:44:03:53:0c:72:aa:74:7a:77:b7:74:bd:0b:
                    ad:30:8c:4e:33:48:d0:44:64:fd:40:a9:20:ac:f7:
                    3d:7e:b7:47:65:ed:73:44:fb:84:99:25:be:78:54:
                    87:ea:5c:bb:b5:35:c1:b3:7f:e2:c3:e7:96:ca:66:
                    8f:91:73:d6:d3:75:db:39:92:ab:0c:99:b1:81:2e:
                    6d:b2:fe:af:c9:a7:a8:b3:67:16:df:70:c1:0f:5c:
                    7f:9b:81:8e:9b:8e:a9:d6:29:92:35:44:50:b6:c1:
                    8c:2c:6f:15:52:0d:53:49:7b:fe:2d:07:c6:22:62:
                    6b:d6:6e:7d:e4:b9:f2:3f:5c:48:a4:fd:b6:99:f0:
                    28:b4:23:99:6d:aa:a3:66:ec:d7:88:58:f8:36:39:
                    2b:2c:6b:cc:59:31:c6:e9:1a:da:90:f9:e2:79:44:
                    01:1f:67:27:43:d4:5d:25:8f:e2:a5:b4:e8:d4:e1:
                    43:48:86:44:03:6f:8c:28:bc:af:7e:6f:9a:1c:04:
                    96:04:85:c2:d4:ab:27:90:15:64:82:fd:1b:e4:35:
                    8e:f8:5f:6e:0e:5f:b0:01:a2:b5:d8:64:a4:15:b8:
                    92:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:44:70:90:43:08:91:F1:98:1A:F7:76:0D:AE:FD:16:B0:08:6F:16
            X509v3 Authority Key Identifier:
                keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:21:6e:e5:88:2b:30:48:b1:b2:3e:72:4c:6c:4c:be:0d:2c:
         37:6f:2b:2d:8b:2c:de:0c:30:5f:60:dc:d1:87:52:89:7e:fe:
         24:a1:88:79:ad:4d:ec:e9:1a:4e:be:f2:10:8b:71:b3:4d:6d:
         72:69:ea:c6:61:66:4a:69:c5:ee:92:52:04:3a:18:dd:35:a3:
         e8:c0:70:27:4d:54:ed:b1:6c:24:2b:eb:52:ec:41:ef:7f:3f:
         18:ca:ef:62:ba:2e:c9:e8:63:f3:3f:25:90:50:0c:fe:01:43:
         3a:44:42:60:61:e7:cc:70:51:73:1b:24:5c:7a:08:68:e0:a0:
         fc:d7:57:bd:b1:d2:a3:68:a8:a7:e3:d6:34:5d:24:3d:35:2d:
         91:4a:30:55:b9:2f:62:b4:ac:71:0b:35:ba:b1:18:0d:ec:bc:
         f0:9f:8b:b7:41:96:0e:99:4d:26:3a:0c:73:fe:b6:a0:12:09:
         73:99:c9:4c:ff:37:c9:b0:4a:56:47:6a:e6:d0:28:c0:9f:9b:
         33:2f:56:d8:55:32:66:dd:f8:27:15:3d:7b:22:e3:79:ae:d1:
         cd:bb:53:39:56:c8:ca:2b:28:74:f0:9d:f1:61:32:e5:46:34:
         da:8a:65:11:59:8b:60:f8:6e:d9:52:b5:75:b1:0d:0b:b6:42:
         2a:da:ee:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfWSWThDkabgk2o6R+88IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ODM4MDUzMTlkODQ4NTU4NGRjMzljZjUzODE1ODNmYjY0
MzFkN2EwHhcNMjYwMjA5MTMwMDM5WhcNMjYwMjEwMTMwMDM5WjAzMTEwLwYDVQQD
EyhmYTQ0NzA5MDQzMDg5MWYxOTgxYWY3NzYwZGFlZmQxNmIwMDg2ZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHEqJ1/44HEU0GBNMMgdJd+qBiyb
SEQXCLHe28l4dEQDUwxyqnR6d7d0vQutMIxOM0jQRGT9QKkgrPc9frdHZe1zRPuE
mSW+eFSH6ly7tTXBs3/iw+eWymaPkXPW03XbOZKrDJmxgS5tsv6vyaeos2cW33DB
D1x/m4GOm46p1imSNURQtsGMLG8VUg1TSXv+LQfGImJr1m595LnyP1xIpP22mfAo
tCOZbaqjZuzXiFj4NjkrLGvMWTHG6RrakPnieUQBH2cnQ9RdJY/ipbTo1OFDSIZE
A2+MKLyvfm+aHASWBIXC1KsnkBVkgv0b5DWO+F9uDl+wAaK12GSkFbiS8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpEcJBDCJHxmBr3dg2u/RawCG8WMB8GA1UdIwQY
MBaAFBaDgFMZ2EhVhNw5z1OBWD+2Qx16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iMjVjZjQtMGEzNS00YmRiLTlkY2Qt
ZWUxNjA4NmNmYzcyLzEvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iMjVjZjQtMGEzNS00YmRiLTlkY2QtZWUxNjA4NmNmYzcy
LzEvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCFu5Ygr
MEixsj5yTGxMvg0sN28rLYss3gwwX2Dc0YdSiX7+JKGIea1N7OkaTr7yEItxs01t
cmnqxmFmSmnF7pJSBDoY3TWj6MBwJ01U7bFsJCvrUuxB738/GMrvYrouyehj8z8l
kFAM/gFDOkRCYGHnzHBRcxskXHoIaOCg/NdXvbHSo2iop+PWNF0kPTUtkUowVbkv
YrSscQs1urEYDey88J+Lt0GWDplNJjoMc/62oBIJc5nJTP83ybBKVkdq5tAowJ+b
My9W2FUyZt34JxU9eyLjea7RzbtTOVbIyisodPCd8WEy5UY02oplEVmLYPhu2VK1
dbENC7ZCKtrulQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:39 2026 by rpki-client