This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
File:                     FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft (raw, json)
Hash identifier:          soDi9q8TsYOOX2OJpyMTjQD6uKt+n9r0gFtyWlot71o=
Subject key identifier:   76:3C:F7:A1:5D:D6:58:C6:7D:AF:1A:1C:1A:6A:6B:F1:57:59:8A:48
Authority key identifier: 14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
Certificate issuer:       /CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Certificate serial:       019C4322250D47C4F9CBE3FF5B89F7CD9ABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
Manifest number:          0E94
Signing time:             Mon 09 Feb 2026 16:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:36 +0000
Files and hashes:         1: FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl (hash: G75Wqihq/tTCh/2PMOa04JvR3ewmvWZooR0OxFXhdYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:25:0d:47:c4:f9:cb:e3:ff:5b:89:f7:cd:9a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
        Validity
            Not Before: Feb  9 16:00:36 2026 GMT
            Not After : Feb 10 16:00:36 2026 GMT
        Subject: CN=763cf7a15dd658c67daf1a1c1a6a6bf157598a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:e3:30:c8:26:d8:2a:d7:f5:4c:98:8d:4a:
                    69:9c:27:ee:54:66:48:8e:30:57:95:04:cf:97:8d:
                    ef:d3:86:46:6d:11:5a:cf:6f:a8:31:62:aa:0a:57:
                    2b:87:41:26:e6:8f:48:48:b8:18:fd:0c:b3:5f:bb:
                    57:43:f8:83:b0:d2:22:d7:c0:a9:63:45:97:7e:f5:
                    9a:b6:f0:92:d0:e7:32:a4:97:c2:ad:6d:f0:b9:2f:
                    04:9f:15:9f:05:8a:2a:f7:6a:13:58:29:55:69:2d:
                    c2:36:cc:5b:44:a4:2c:da:08:61:8c:57:41:bc:c7:
                    4d:4a:c0:47:84:f4:1b:e0:d6:32:c2:1c:20:e1:39:
                    c3:12:5c:77:b8:76:05:42:58:3d:4a:d5:ec:60:9c:
                    89:0a:93:d8:76:85:55:6b:84:77:9c:12:54:de:61:
                    38:ab:6c:e4:83:a2:c9:e6:7e:7b:2d:e4:0d:f7:40:
                    c7:26:43:d4:b6:c0:fe:e3:28:d1:f7:28:d5:e8:65:
                    1f:6d:4c:20:2d:a3:fa:48:64:1a:9f:7d:0b:7f:39:
                    14:80:d3:ef:8e:ae:a3:3f:e7:e2:18:f1:bf:77:5f:
                    c0:93:60:0e:91:d2:fc:2f:ad:44:ba:db:02:bd:d1:
                    13:4a:8c:0c:9c:7c:cf:2d:bc:23:3e:66:23:7a:54:
                    d5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3C:F7:A1:5D:D6:58:C6:7D:AF:1A:1C:1A:6A:6B:F1:57:59:8A:48
            X509v3 Authority Key Identifier:
                keyid:14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d2:a8:ca:d1:85:3a:99:72:d5:63:ae:67:05:0b:e8:dc:a5:
         db:23:4d:79:e9:7e:ba:39:a4:15:4f:56:a5:ce:24:b7:bd:e4:
         ba:c4:0c:66:82:2d:2b:3c:d4:cd:83:d4:f0:3d:68:68:d0:90:
         b6:50:be:c8:23:e1:f2:20:96:20:5a:39:1f:d0:0e:b8:7f:ed:
         04:07:00:c9:d3:31:f8:dd:c0:f9:9d:48:a6:31:36:16:c2:b6:
         34:81:1a:4b:c7:8f:bf:f2:89:ef:a8:0c:46:24:ab:89:ac:05:
         a1:0b:1f:99:f0:44:7a:eb:f6:25:3a:71:0d:d1:29:29:ac:76:
         04:2f:2c:1a:8c:9b:e1:b0:4c:78:1b:0e:fe:c0:a2:be:bb:5c:
         2f:89:d5:26:3c:87:3a:ef:83:f4:e8:d3:fc:8f:fe:4a:43:b4:
         5b:18:c7:03:6b:87:d1:c8:e7:18:b8:94:3e:72:0c:51:d3:c1:
         e4:56:8a:ed:7c:b1:96:fd:ad:7f:a1:53:89:c6:4a:36:22:96:
         24:f1:da:0b:02:68:ab:07:4c:cb:f9:68:78:d3:2e:95:9e:7b:
         14:62:a2:12:23:7f:bd:64:35:e9:ab:a6:18:18:9a:aa:3a:9c:
         38:45:d9:3d:7c:2f:5d:0f:13:27:62:82:44:1b:dc:8c:63:60:
         06:9d:9c:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIiUNR8T5y+P/W4n3zZq/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDA4NDNiMjQ1ZmMyNzM1Y2YyNDc1MDRjNGYxYmQ4NTVm
ZmNlZmMwHhcNMjYwMjA5MTYwMDM2WhcNMjYwMjEwMTYwMDM2WjAzMTEwLwYDVQQD
Eyg3NjNjZjdhMTVkZDY1OGM2N2RhZjFhMWMxYTZhNmJmMTU3NTk4YTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn/jMMgm2CrX9UyYjUppnCfuVGZI
jjBXlQTPl43v04ZGbRFaz2+oMWKqClcrh0Em5o9ISLgY/QyzX7tXQ/iDsNIi18Cp
Y0WXfvWatvCS0OcypJfCrW3wuS8EnxWfBYoq92oTWClVaS3CNsxbRKQs2ghhjFdB
vMdNSsBHhPQb4NYywhwg4TnDElx3uHYFQlg9StXsYJyJCpPYdoVVa4R3nBJU3mE4
q2zkg6LJ5n57LeQN90DHJkPUtsD+4yjR9yjV6GUfbUwgLaP6SGQan30LfzkUgNPv
jq6jP+fiGPG/d1/Ak2AOkdL8L61EutsCvdETSowMnHzPLbwjPmYjelTVdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHY896Fd1ljGfa8aHBpqa/FXWYpIMB8GA1UdIwQY
MBaAFBTQhDskX8JzXPJHUExPG9hV/878MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5DRU95UmZ3bk5jOGtkUVRFOGIyRlhfenZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8wYzliMzUtMzk1Mi00ZTJmLWI0Y2Ut
NzIxYmViZDhhMWQ1LzEvRk5DRU95UmZ3bk5jOGtkUVRFOGIyRlhfenZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8wYzliMzUtMzk1Mi00ZTJmLWI0Y2UtNzIxYmViZDhhMWQ1
LzEvRk5DRU95UmZ3bk5jOGtkUVRFOGIyRlhfenZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9KoytGF
Oply1WOuZwUL6Nyl2yNNeel+ujmkFU9Wpc4kt73kusQMZoItKzzUzYPU8D1oaNCQ
tlC+yCPh8iCWIFo5H9AOuH/tBAcAydMx+N3A+Z1IpjE2FsK2NIEaS8ePv/KJ76gM
RiSriawFoQsfmfBEeuv2JTpxDdEpKax2BC8sGoyb4bBMeBsO/sCivrtcL4nVJjyH
Ou+D9OjT/I/+SkO0WxjHA2uH0cjnGLiUPnIMUdPB5FaK7Xyxlv2tf6FTicZKNiKW
JPHaCwJoqwdMy/loeNMulZ57FGKiEiN/vWQ16aumGBiaqjqcOEXZPXwvXQ8TJ2KC
RBvcjGNgBp2crg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:56 2026 by rpki-client