This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File:                     FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier:          MlZuKRTIEpBMHsgTsxiY0IoIYgyaY2IHRbXuPTRnBRs=
Subject key identifier:   98:EC:72:7E:1C:C8:17:37:17:38:62:2C:2C:ED:67:8D:1C:06:57:CB
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer:       /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial:       019C427DE1E3FD408EE343D839E1F0A2ABEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number:          06DF
Signing time:             Mon 09 Feb 2026 13:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:11 +0000
Files and hashes:         1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: luRw4B2yZ7w5KaytiCOwF1NafM4qdZOFPQ6ljvCOCCY=)
                          2: mSf_6hw9LbwczEGLxS7bvwkiv9c.roa (hash: CPUV5PHm53/ZGx8XFmHD3voe3NEDlMd+rbTwW6kMNMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:e1:e3:fd:40:8e:e3:43:d8:39:e1:f0:a2:ab:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
        Validity
            Not Before: Feb  9 13:01:11 2026 GMT
            Not After : Feb 10 13:01:11 2026 GMT
        Subject: CN=98ec727e1cc817371738622c2ced678d1c0657cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:43:69:83:27:0a:ae:08:7c:2e:28:97:10:06:
                    92:72:33:97:66:6c:09:00:19:6e:5b:7e:9b:51:1a:
                    0a:67:5c:65:07:46:08:96:59:9f:c7:7d:e9:f7:8e:
                    32:ec:8d:7e:95:f6:df:bb:66:59:bf:34:07:a6:66:
                    b9:62:f3:f6:fe:6a:f3:da:ce:7e:13:89:60:4e:98:
                    d3:a0:16:2a:00:ef:b2:15:32:f1:2e:54:71:39:85:
                    3d:4c:f8:1a:48:67:20:50:e6:61:7d:18:5f:2c:85:
                    f4:7d:ea:d1:a7:aa:f5:91:39:47:7e:cc:5d:c2:77:
                    29:b0:e3:49:20:04:43:67:e3:39:65:46:e4:b3:05:
                    ef:e1:10:85:d6:a2:43:f9:98:db:3c:78:90:e7:dc:
                    d1:34:7d:f8:4e:88:ba:ed:a7:72:22:ee:30:30:fe:
                    f5:6e:67:fc:5d:75:4f:61:e5:e8:b9:dc:e2:4b:23:
                    2b:2d:ec:ca:87:9e:6a:9f:c6:3f:78:28:75:08:25:
                    ce:16:a7:2b:ef:09:be:40:0c:de:ea:d9:29:bf:0c:
                    d4:c5:2e:5e:5e:d5:c9:fc:d4:13:0f:5f:00:1e:63:
                    b4:87:6f:5d:77:5a:d1:ed:74:6e:50:61:41:2b:53:
                    6d:b9:e4:b8:80:d1:37:ce:60:e2:ee:4a:d2:90:df:
                    49:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EC:72:7E:1C:C8:17:37:17:38:62:2C:2C:ED:67:8D:1C:06:57:CB
            X509v3 Authority Key Identifier:
                keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:94:c0:71:a9:d8:82:cc:9e:96:3f:a0:49:a8:6c:0b:7f:f3:
         4b:ea:b9:e3:53:41:b1:3d:d2:33:c3:db:c5:1c:f6:83:c2:83:
         b4:34:3c:a9:18:3c:7d:59:b8:dd:55:1c:47:19:17:25:26:55:
         4f:59:19:cc:e8:9c:31:a1:47:c8:88:6e:5d:a4:f9:b6:30:d1:
         74:12:de:5a:44:8a:6b:e4:cb:00:b4:80:1f:66:86:47:6d:c3:
         28:7b:3c:73:c2:90:01:cf:ea:68:75:28:69:5b:97:7d:dd:dd:
         17:a6:19:25:34:e0:37:59:22:5c:c8:54:5d:44:9c:6b:44:ee:
         0d:a4:60:30:03:49:23:b8:cc:b6:97:d3:4b:4e:ef:57:a6:aa:
         39:88:84:ec:a0:01:52:03:e8:e4:bc:f5:14:49:50:96:a0:98:
         0e:73:7b:4c:f8:b6:c7:23:a2:7f:60:00:64:fd:29:97:ed:cd:
         c1:55:7c:95:4b:49:b7:61:34:d2:e0:ff:0d:ad:2b:1b:e5:5c:
         7b:6c:05:e7:34:37:ef:dd:7b:5e:7f:98:d2:be:ea:07:17:d1:
         ff:f2:e7:67:07:a1:54:46:aa:c5:f2:ed:79:d2:40:44:6e:78:
         23:a0:38:70:8c:5c:c9:a6:80:9b:f1:b5:81:35:42:13:1a:3c:
         b2:6b:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:40 2026 by rpki-client