This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File:                     FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier:          uOqM0hA2fQgS8URHGRUgId1Pz2D5crnVgCAyn3KHf2s=
Subject key identifier:   CA:78:3D:11:7C:C7:10:2F:BF:90:47:8E:A0:08:8B:B7:C4:4C:CC:72
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer:       /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial:       019C4246972AC61FC26A73DB4F2D946B9D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number:          0237
Signing time:             Mon 09 Feb 2026 12:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:48 +0000
Files and hashes:         1: 14moTVCPRDZ_u1h30FOe4lYZ_Uo.roa (hash: wcUkVN7ia2xJx1oMg8zn/LuYUzAy2xjBnV4ceG0F+9o=)
                          2: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: d9VxmO40vRInsmaCrv5gns/616pjzmz+1OOlbnwpV3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:97:2a:c6:1f:c2:6a:73:db:4f:2d:94:6b:9d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
        Validity
            Not Before: Feb  9 12:00:48 2026 GMT
            Not After : Feb 10 12:00:48 2026 GMT
        Subject: CN=ca783d117cc7102fbf90478ea0088bb7c44ccc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a0:ed:19:36:43:0d:8b:0b:32:33:2c:bb:19:
                    30:68:f9:cb:95:fd:dd:eb:ad:13:2d:a7:81:aa:f5:
                    d5:e8:85:a2:9f:ed:df:d4:42:46:a3:1d:62:64:53:
                    96:bc:21:7a:22:a6:18:4a:96:05:0f:e5:15:a9:4f:
                    d1:a1:c6:f5:d1:b7:e4:be:85:44:74:d4:48:89:07:
                    e3:9f:51:6a:7a:d6:94:67:be:31:c7:85:22:25:3b:
                    18:75:99:f2:48:7e:be:d3:20:a7:98:73:07:ee:76:
                    52:f7:dc:87:92:62:90:52:b6:60:30:d7:25:df:21:
                    c2:c7:e5:b3:f8:c4:48:cc:08:c7:fb:2c:2c:60:6f:
                    87:c4:03:fb:56:50:70:b3:f2:63:20:51:1b:27:95:
                    74:95:2b:e7:44:5e:c8:44:b1:cd:94:e1:4a:cf:e7:
                    26:58:48:0a:3e:90:7d:d6:bc:a0:5c:c5:38:39:c5:
                    63:ed:ad:42:b2:8c:fa:72:c9:93:52:96:bb:54:d9:
                    00:df:31:c7:75:1e:48:47:1f:78:30:84:c1:b7:02:
                    af:73:e2:eb:dc:8f:f8:3c:9b:c2:5b:01:af:1a:1a:
                    0a:c8:45:00:23:53:6d:01:c4:80:4c:04:49:30:4e:
                    6a:a7:77:5e:1e:92:fb:4c:28:d1:58:a0:65:22:45:
                    3f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:78:3D:11:7C:C7:10:2F:BF:90:47:8E:A0:08:8B:B7:C4:4C:CC:72
            X509v3 Authority Key Identifier:
                keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6d:d6:aa:89:d9:3e:1a:bb:ad:aa:6a:49:b5:44:07:5a:52:
         71:bf:6d:00:0e:d2:08:54:cb:07:25:6f:b0:e8:63:89:36:f6:
         66:cc:ae:0b:20:3d:39:10:c0:59:be:5b:e2:75:db:f9:7a:cd:
         5d:46:da:eb:c4:b3:14:68:c5:3d:05:f7:46:f4:67:c0:5b:40:
         30:eb:9c:b6:e0:3e:cb:59:9a:cf:06:0e:a1:9d:2b:e8:92:87:
         c3:a9:a8:ee:0d:86:60:7b:fa:5d:65:47:b5:88:15:71:d1:b9:
         2a:c8:f0:7a:25:09:1e:18:c4:a4:31:aa:61:a5:e7:98:20:03:
         c6:50:5a:f6:65:3f:d2:24:d6:75:f1:9b:76:09:86:a9:bb:bc:
         f5:72:7b:ed:da:83:31:25:a1:e2:6e:01:54:17:35:01:63:38:
         6e:50:33:90:5f:47:dd:0c:1d:9b:5f:75:5b:b5:20:8c:fc:89:
         b9:7b:a0:6b:99:f9:cd:5a:e0:09:9c:b9:8d:f8:ef:62:53:5c:
         79:03:0a:fd:4c:88:54:e8:a8:45:ea:86:1d:d6:84:9c:1a:65:
         41:f9:d7:8a:27:c9:61:e6:db:84:05:d1:6b:2e:09:6b:5d:d3:
         19:ff:5d:25:d3:02:2f:2b:09:3b:15:98:68:94:fe:5e:97:d8:
         7a:b6:fe:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:24 2026 by rpki-client