This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
File:                     _edsqF6WVBpa3Tysrx5eEU-qR-8.mft (raw, json)
Hash identifier:          O49JpG81QnyOzxO8gLGXxG1mooX53GthwSUpjkt5CBw=
Subject key identifier:   A4:4A:22:3C:AA:43:B1:93:D4:44:E8:7F:F7:08:81:AD:BB:22:DE:7C
Authority key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
Certificate issuer:       /CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Certificate serial:       019C4359495FCDAA0F197AF65FCA68C21EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
Manifest number:          0947
Signing time:             Mon 09 Feb 2026 17:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:50 +0000
Files and hashes:         1: _edsqF6WVBpa3Tysrx5eEU-qR-8.crl (hash: 2OaFt395/gonqlwPSNWe0pp053s/L08mOHDivSUL/dU=)
                          2: anzEyjHaXQLmItjwy5G_m7H0DIM.roa (hash: zkC5URyiIIzrvJgxvh+5tV7gFXiK26Z7Y7U8Tu17QQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:49:5f:cd:aa:0f:19:7a:f6:5f:ca:68:c2:1e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
        Validity
            Not Before: Feb  9 17:00:50 2026 GMT
            Not After : Feb 10 17:00:50 2026 GMT
        Subject: CN=a44a223caa43b193d444e87ff70881adbb22de7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:5f:7f:bc:f7:ad:3d:e5:40:d6:22:05:ae:
                    a5:03:5d:a7:ec:b5:ae:bd:69:ff:ff:60:b4:fc:48:
                    94:86:31:a1:e4:1f:75:f5:45:8d:02:ac:27:cb:c6:
                    26:cd:ea:2a:4a:a1:58:63:f1:2e:0d:7c:f6:fd:ed:
                    fd:06:96:d7:a8:25:d8:1c:e4:a0:e3:7b:47:ee:03:
                    81:69:1f:ed:6a:b0:6f:47:fb:2d:3f:fc:16:16:00:
                    ca:9e:2b:79:a3:90:3c:02:61:0a:d7:1a:99:13:54:
                    0a:ec:ef:d3:15:77:fe:21:20:c6:29:04:92:0a:91:
                    c6:d3:13:87:48:ee:0d:a9:09:62:d2:b4:5e:07:61:
                    79:b6:11:dc:f1:cf:38:74:e4:17:01:b6:db:eb:19:
                    5b:df:ed:39:ee:ef:8a:b9:18:d1:61:0c:aa:e4:16:
                    8f:65:87:ba:5e:b0:7a:1a:a2:b3:d7:d9:4a:cf:8c:
                    1a:f2:46:ea:48:15:a6:1e:dd:9a:ef:7d:b8:13:0a:
                    1b:e0:53:fd:09:f2:fb:a2:3a:14:5e:99:6d:21:c3:
                    93:27:56:e4:dc:9d:6b:59:5a:d5:ad:85:3e:76:3b:
                    86:e5:07:b9:de:a7:72:de:3a:4e:cf:65:c7:4c:f1:
                    52:df:52:ac:bf:7f:7e:5f:56:57:d3:27:38:7a:72:
                    48:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4A:22:3C:AA:43:B1:93:D4:44:E8:7F:F7:08:81:AD:BB:22:DE:7C
            X509v3 Authority Key Identifier:
                keyid:FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:62:e8:69:c5:e6:82:db:44:06:84:49:b0:05:a2:2f:75:34:
         b3:2e:4c:34:6e:7c:01:56:0c:b9:41:11:65:72:35:95:63:71:
         e9:cd:aa:1e:79:a4:5e:9f:98:b0:3e:d4:79:15:96:98:0f:98:
         a3:30:eb:2b:ce:a3:94:4d:83:40:37:9d:df:c0:6b:5c:bb:83:
         d5:81:4f:68:a6:95:7e:57:7d:2f:66:d8:e3:cd:7f:25:be:36:
         18:3a:eb:2a:5e:d7:eb:e7:60:c4:32:89:7e:9f:a1:84:74:e2:
         d5:bb:6f:0b:c2:65:53:1b:04:9f:83:e0:31:49:ce:07:96:9e:
         4e:4d:20:39:26:59:08:35:1e:4d:7c:d4:4e:40:44:6d:a4:16:
         95:fc:9e:8f:24:10:05:a4:a3:95:54:1c:ab:42:00:a7:75:66:
         e3:05:ca:4b:4c:09:f5:7d:55:c1:d2:81:09:b6:02:cc:0c:37:
         0a:ba:08:bd:f1:07:ed:20:4b:45:66:24:a1:46:e2:5c:e0:da:
         34:38:26:67:c1:12:e7:1e:ab:b6:87:4e:43:df:dc:1d:73:42:
         6d:47:96:eb:02:3e:73:00:db:1f:08:c6:b3:e3:95:e2:be:e2:
         80:f3:c5:b8:6f:a1:54:61:c1:83:da:49:85:00:0b:fc:48:b7:
         5d:ba:1d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:31 2026 by rpki-client