This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
File:                     Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft (raw, json)
Hash identifier:          BUyFLGp9j27cp5N3NoS7S1UVKGmarx5SFLxu2SG35fk=
Subject key identifier:   C1:4F:FC:D4:28:43:19:02:CE:0B:D4:2E:12:5E:31:84:13:E1:10:AA
Authority key identifier: 17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
Certificate issuer:       /CN=171839a0b6476dfbf8335101613ce1a7721ef385
Certificate serial:       019C41344CF02A46DC08B3218DF73EFE551E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
Manifest number:          179E
Signing time:             Mon 09 Feb 2026 07:01:12 +0000
Manifest this update:     Mon 09 Feb 2026 07:01:12 +0000
Manifest next update:     Tue 10 Feb 2026 07:01:12 +0000
Files and hashes:         1: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl (hash: K5yqkdfeagBGVP/iNvT3WEshcZJpoKosS5OWu46uzXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:4c:f0:2a:46:dc:08:b3:21:8d:f7:3e:fe:55:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171839a0b6476dfbf8335101613ce1a7721ef385
        Validity
            Not Before: Feb  9 07:01:12 2026 GMT
            Not After : Feb 10 07:01:12 2026 GMT
        Subject: CN=c14ffcd428431902ce0bd42e125e318413e110aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:31:e5:66:89:98:12:c3:a9:fa:f8:f5:ff:
                    bc:6e:68:c8:5e:8b:30:1d:01:0b:32:0d:e0:fd:40:
                    07:4f:ef:b3:5a:80:f1:28:19:2c:16:3f:22:a6:c9:
                    4c:e8:ec:15:50:b6:3e:88:5d:08:f5:fa:f1:f6:73:
                    b1:6e:7e:92:46:4a:88:13:f2:8f:f9:78:ea:8c:86:
                    70:2f:4e:10:58:ae:c5:26:90:c9:7a:9b:df:ba:08:
                    78:7f:b5:8b:e3:91:4c:c7:a3:47:fb:f7:d3:61:c1:
                    ca:2c:5c:b9:ce:3f:b9:23:c4:0e:7e:d4:6c:75:af:
                    1f:40:5a:59:93:6d:2a:fe:fe:fe:ff:c1:87:92:a1:
                    34:d6:dc:de:2e:0b:c2:dd:ee:83:03:b8:3f:bc:47:
                    ad:95:8c:01:d7:99:95:51:7c:59:22:a8:5b:a0:bd:
                    be:e1:d9:38:90:cb:51:6a:b7:7d:14:7e:c9:5e:d4:
                    ae:03:c3:2c:c4:d0:70:cd:d3:7b:4f:b4:51:6c:b6:
                    8c:29:99:f1:fc:5e:8e:0e:54:59:57:d3:c8:f8:44:
                    80:6c:12:6b:49:15:41:78:c1:89:d1:fe:a5:b6:90:
                    ae:c7:ac:26:25:ac:58:e1:2c:2b:6f:8a:80:46:a7:
                    b2:d6:04:65:e6:bd:dc:62:db:e2:f9:a5:9e:9b:bb:
                    ba:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4F:FC:D4:28:43:19:02:CE:0B:D4:2E:12:5E:31:84:13:E1:10:AA
            X509v3 Authority Key Identifier:
                keyid:17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:10:ab:d4:6c:70:08:2e:95:0b:2c:72:c2:17:ea:94:8d:d5:
         1c:e7:d1:a3:4c:b1:8b:4e:82:fe:73:6c:a3:41:f8:65:cb:56:
         03:8b:63:b2:8f:2b:8d:8c:c0:b8:24:60:cc:f8:d4:b6:6a:58:
         6b:96:95:0b:c7:64:fb:b9:4b:b7:82:b4:69:ff:a2:f4:62:d9:
         40:de:b8:dd:9a:a1:4d:27:fe:02:6e:70:16:77:86:ff:58:ab:
         08:d8:3a:22:75:b2:78:c6:89:2d:a5:9f:b7:05:eb:b5:99:43:
         65:c3:25:f5:84:fb:5f:22:6e:49:76:d4:61:41:7a:ba:93:ef:
         06:f0:f5:79:fc:80:f7:c0:ba:43:3a:0a:d4:23:44:27:92:3b:
         76:89:7e:50:32:b4:68:e9:ca:1b:6b:f4:7d:6c:84:7f:90:6d:
         86:8b:8b:2f:7f:07:de:a4:9b:20:b7:e2:ed:42:d8:d0:57:00:
         e3:8f:75:ae:6c:da:7c:63:1d:58:00:b2:8d:c4:66:48:25:26:
         82:0f:a7:fb:d9:0e:cc:d1:67:2a:77:28:20:8d:bc:d3:11:db:
         c8:04:0b:86:14:43:90:b0:21:49:37:c5:93:24:01:eb:1d:96:
         7e:fa:7b:65:43:1c:2b:e2:ba:30:9c:9d:e4:7d:bd:67:83:3b:
         6a:a4:ce:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:22 2026 by rpki-client