This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
File:                     f1Eig3R0LfVEqpMFjFo709FkIZk.mft (raw, json)
Hash identifier:          tXm28BMVZt4eIVaulQdP9XfN5t7x8GSH/QkbIqKKFyI=
Subject key identifier:   16:DB:91:54:65:13:A2:97:2B:F5:E0:C0:21:F0:FA:73:3B:9A:D2:BA
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Certificate issuer:       /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial:       019C44D988CA13271B9FD06481C418A1069B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
Manifest number:          0F81
Signing time:             Tue 10 Feb 2026 00:00:32 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:32 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:32 +0000
Files and hashes:         1: cT02IY7adaUVPz4V8e5RlFxqhK0.roa (hash: xlN+ALxnfT16I39GA28ld/SZObT/EUbBFR6U8Cqh9cY=)
                          2: f1Eig3R0LfVEqpMFjFo709FkIZk.crl (hash: MVQdeMnrcql6etoYww3xi6GqCssQcgS093YxOdn1tPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:88:ca:13:27:1b:9f:d0:64:81:c4:18:a1:06:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
        Validity
            Not Before: Feb 10 00:00:32 2026 GMT
            Not After : Feb 11 00:00:32 2026 GMT
        Subject: CN=16db91546513a2972bf5e0c021f0fa733b9ad2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:17:32:03:3e:71:48:8c:66:3b:e3:d3:ff:
                    8b:ad:2c:1e:16:ba:e4:6e:b2:7e:2c:37:7c:44:e0:
                    87:ee:35:53:db:24:9b:4d:a6:eb:45:16:66:89:7d:
                    7f:1c:cf:c7:09:5f:8b:87:30:71:51:31:85:d2:22:
                    de:43:8b:89:1c:e7:90:40:52:36:50:09:fd:d2:0c:
                    90:83:b5:fc:44:ad:fc:ca:57:1e:f6:da:56:28:b6:
                    0d:b3:cd:c1:a4:9b:5a:68:89:a3:00:6a:ee:0f:9d:
                    1c:be:7a:6b:67:b8:e9:cf:a9:79:cd:82:4e:47:d2:
                    27:da:b3:13:64:10:8d:04:27:e2:fd:f9:46:fe:bc:
                    d8:aa:17:e8:7c:62:bc:db:7c:b7:fc:1d:93:56:3c:
                    11:71:2b:65:c8:4a:ac:75:0c:d8:84:df:d2:de:b8:
                    fe:ce:54:8f:91:8b:ec:45:35:c8:f7:53:a4:41:78:
                    fb:ce:3c:1a:35:76:43:b3:a0:a6:9d:67:3a:b8:6a:
                    5c:20:97:0e:e4:b8:61:28:8c:16:65:c4:5f:ad:bf:
                    ac:df:6b:09:10:24:51:f2:29:e1:42:0d:26:cd:4a:
                    42:df:5b:7f:40:01:9c:fc:7e:24:1b:71:47:1d:39:
                    ff:21:ff:01:4c:0f:5e:1b:ba:37:7e:14:be:13:a7:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DB:91:54:65:13:A2:97:2B:F5:E0:C0:21:F0:FA:73:3B:9A:D2:BA
            X509v3 Authority Key Identifier:
                keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6a:0d:7c:f6:ab:91:b5:51:29:ab:94:3d:3c:9b:4f:ce:fb:
         2e:fd:62:02:fa:5c:4e:a3:53:db:b7:09:61:cb:3a:55:60:8f:
         c2:ba:3a:33:bf:12:93:47:e6:0f:e2:c0:c7:19:62:60:8a:4c:
         62:cf:28:2c:c9:e8:82:71:9c:29:9b:c4:70:39:d3:25:bb:12:
         e7:df:8e:78:13:74:f4:c0:19:97:cd:1a:1c:38:cc:21:2a:49:
         82:43:8b:21:79:87:bd:b6:a1:45:59:30:2f:21:b4:fc:8c:5c:
         47:3b:cd:a4:a6:6c:2c:9c:19:38:15:2d:cb:79:69:a4:08:eb:
         f8:a4:ce:95:2a:3b:71:25:f9:7c:61:38:7a:25:7c:7c:b4:22:
         09:2c:f9:54:20:bb:76:ca:2f:1b:73:72:80:62:57:72:2e:c2:
         50:80:b8:b0:52:94:6d:58:77:2a:48:4a:29:20:30:03:f2:87:
         4c:f9:9f:65:2c:26:7e:d7:04:9d:ec:53:e9:90:4e:5e:13:c8:
         8c:a6:c3:1e:76:56:2e:06:81:01:50:c6:8d:fe:12:6c:aa:4e:
         87:01:f4:ec:de:38:21:62:9c:45:84:1e:c8:5a:e9:16:ff:15:
         0a:7c:c1:ea:2e:85:b9:4c:ce:88:ff:78:aa:d7:4a:56:12:b3:
         47:8c:4d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:01 2026 by rpki-client