This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
File:                     m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft (raw, json)
Hash identifier:          RRcWhSv6d7kbxBkOuBNs7mr6rNJG4c2GPHJ8OWV0T+0=
Subject key identifier:   B8:12:70:08:23:C5:CE:11:18:38:0A:34:58:6F:C5:5B:A6:F3:C3:26
Authority key identifier: 9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
Certificate issuer:       /CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
Certificate serial:       019C4390248113470A3493A141F262C291B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
Manifest number:          1691
Signing time:             Mon 09 Feb 2026 18:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:45 +0000
Files and hashes:         1: m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl (hash: 11D1br8cB57PxKxy4Rv+6Lf+y1hmpyc9hUS5R2Au8iY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:24:81:13:47:0a:34:93:a1:41:f2:62:c2:91:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
        Validity
            Not Before: Feb  9 18:00:45 2026 GMT
            Not After : Feb 10 18:00:45 2026 GMT
        Subject: CN=b812700823c5ce1118380a34586fc55ba6f3c326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:20:be:2d:af:aa:0f:52:dd:76:e8:38:24:
                    fb:19:a3:c0:64:75:6e:d3:ce:b8:fa:21:6f:f2:21:
                    12:8e:6f:0f:34:7d:2b:14:94:41:18:bc:57:7a:f4:
                    25:8a:c1:f6:de:f0:a4:be:97:63:e9:04:ac:da:d1:
                    dd:3d:f0:ab:c9:44:63:bf:cf:04:8e:65:ef:71:4b:
                    87:b9:41:3a:38:cc:60:f1:d4:c4:f5:a4:24:2c:94:
                    64:40:4c:98:a0:7e:9e:84:bb:9e:a2:84:22:d6:3d:
                    bb:b9:2f:ad:f2:63:40:8d:da:7f:f0:52:8a:8d:88:
                    64:5b:0b:44:a5:86:96:d3:b9:10:0f:5f:b9:a7:23:
                    da:05:3f:3f:81:eb:e6:f3:dc:24:ab:85:49:3c:af:
                    93:27:24:de:9a:d8:be:f6:12:e4:74:c9:d7:4d:5b:
                    57:95:69:1f:00:02:f0:eb:b7:34:20:2b:0b:17:ac:
                    11:13:4e:22:7a:24:87:77:c2:d6:14:1e:e2:8f:e1:
                    10:00:a6:86:ea:ab:00:c2:9a:32:5c:d1:c0:c2:40:
                    31:9b:1c:3c:fd:6c:3b:ef:d0:52:2b:7c:92:18:10:
                    59:d8:5b:e0:d0:10:76:36:a5:75:5c:9e:70:6a:49:
                    1d:3e:65:fc:e1:25:42:94:b7:f8:8b:c4:6c:fb:e6:
                    55:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:12:70:08:23:C5:CE:11:18:38:0A:34:58:6F:C5:5B:A6:F3:C3:26
            X509v3 Authority Key Identifier:
                keyid:9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9d:ad:87:63:f4:f3:2d:2b:93:f6:18:fe:2f:4d:79:f0:14:
         1d:80:d7:89:01:c4:cf:1d:ae:78:c1:09:b8:89:1b:0e:13:8f:
         8a:53:fb:68:22:9e:3a:b3:7f:0e:54:95:a4:67:2f:64:39:38:
         7f:8c:88:1e:fc:9c:4c:c5:75:26:f8:3a:71:0f:b1:ae:7e:9b:
         16:4b:d7:14:84:f5:4d:58:73:7b:da:d5:cb:46:24:52:db:89:
         52:6b:e9:5d:5c:3e:f7:c2:44:87:e2:71:15:4c:f8:22:0d:d4:
         51:92:6c:f1:ec:a5:67:1c:6f:80:1e:ff:13:8a:05:e9:12:fa:
         93:61:81:30:f7:14:36:1b:5a:32:db:cc:4d:ec:43:85:15:f2:
         f2:cc:30:fe:d6:e1:ec:05:df:61:e8:7d:4c:23:cd:5b:66:67:
         f4:f4:da:29:9d:3e:e5:51:94:c7:f1:62:1a:1c:9e:fe:f4:ba:
         a7:27:bc:fd:bc:19:6a:a9:3b:1e:92:50:82:34:5a:5f:bc:7d:
         62:d8:fe:d8:46:5c:cb:a0:97:fe:8a:fd:1b:5f:c9:91:6a:c5:
         5e:c6:27:f8:53:3e:6b:65:80:71:05:c0:c9:f7:73:d1:16:36:
         a8:fd:f3:fa:ef:02:19:cc:65:41:87:2b:cd:e6:b5:3d:c6:a2:
         91:f9:77:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:22 2026 by rpki-client