This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
File:                     ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft (raw, json)
Hash identifier:          mmEg/GeGVJoUo/5hIw1I6f3XLiE2eV3xIKCgsGZ0ah4=
Subject key identifier:   26:8C:38:56:87:28:0C:84:BD:B8:35:FB:82:F0:7F:11:34:67:4A:F9
Authority key identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
Certificate issuer:       /CN=7ed77eafdb387afd17574272c9374c8180370f52
Certificate serial:       019C44A2847DE8FFF82A332BC5AFE8341479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
Manifest number:          02C5
Signing time:             Mon 09 Feb 2026 23:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:27 +0000
Files and hashes:         1: ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl (hash: 7hBrTYNAoK54VeG7+ptrOvs51AW4ZzZJqAt6+n7m1vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:84:7d:e8:ff:f8:2a:33:2b:c5:af:e8:34:14:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed77eafdb387afd17574272c9374c8180370f52
        Validity
            Not Before: Feb  9 23:00:27 2026 GMT
            Not After : Feb 10 23:00:27 2026 GMT
        Subject: CN=268c385687280c84bdb835fb82f07f1134674af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7b:ad:50:f3:e0:f1:fc:f9:3c:e8:7c:70:80:
                    49:36:2f:48:8e:4d:f4:72:07:fe:ea:63:8e:ef:9e:
                    f0:a0:79:bf:cb:fa:71:83:c5:dd:dc:6d:62:c6:65:
                    ce:51:5e:53:e5:d7:ff:46:e7:a5:71:b3:5a:d9:65:
                    96:bd:4a:66:ee:b5:4e:e5:c5:e6:86:24:47:4a:bf:
                    f9:4e:4c:aa:e9:5e:6e:08:cf:62:9f:77:6a:1f:cf:
                    48:ce:7e:f3:ef:9b:c8:3f:45:8e:f2:20:21:fd:f7:
                    62:09:a4:27:68:1f:0c:9f:7c:0a:f6:c0:c9:0e:03:
                    7c:be:48:e0:03:36:58:59:6e:0d:68:30:d3:6b:0e:
                    55:76:bd:4d:1e:4c:1a:d4:d5:cc:88:77:d0:e0:4f:
                    0f:7d:0e:12:b8:39:8e:73:d5:b5:3d:29:12:81:52:
                    3c:e3:ba:8c:fc:3a:56:4f:fc:ec:e0:93:fe:a9:19:
                    c1:0c:d5:f5:57:1b:e5:d4:0c:07:d6:39:ff:04:c3:
                    b3:e9:0f:6c:0a:aa:33:cc:73:bb:57:49:07:e6:d1:
                    19:ee:0e:96:b4:8e:e5:80:d0:3d:fd:0e:ba:31:1d:
                    c9:85:48:dc:7c:fa:7c:e0:b7:69:10:d0:7c:c6:7e:
                    d7:c5:80:82:db:e4:55:a3:86:78:3e:03:0a:a1:1f:
                    69:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8C:38:56:87:28:0C:84:BD:B8:35:FB:82:F0:7F:11:34:67:4A:F9
            X509v3 Authority Key Identifier:
                keyid:7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:86:e4:85:d8:a4:45:ae:7c:2d:e2:17:ba:77:38:11:70:f4:
         ae:e1:ec:84:b0:84:dd:c8:8d:40:1a:a5:32:45:36:21:c5:e2:
         fc:46:8d:e2:64:bc:a8:00:70:cd:e3:19:8b:1a:65:d1:3b:e0:
         95:69:06:95:9b:f8:06:c7:d3:d5:60:f6:58:fc:b7:61:2c:e5:
         76:ca:13:8f:28:3d:47:cf:dc:7b:e8:27:47:f7:98:e9:e7:0a:
         17:a3:21:20:68:7d:ef:d3:90:ad:77:80:bc:ee:79:03:09:3e:
         44:22:11:d2:c0:75:10:62:c5:97:86:17:cd:0b:cc:8b:c0:45:
         cf:b4:38:73:ab:16:14:4e:04:e6:4a:be:94:3a:50:9a:1a:f0:
         99:42:fe:08:45:55:fd:7a:7e:b7:d5:f9:83:ce:f6:ee:b9:cc:
         ed:07:2e:e9:ac:27:3d:4e:c0:45:a2:e5:1b:3b:5f:c4:80:63:
         f1:78:93:9f:07:0f:db:40:e6:e7:45:cf:a2:fd:03:46:6a:eb:
         44:89:7e:74:42:da:7e:28:ad:d3:1a:00:28:12:1f:3e:a7:5e:
         9c:81:46:f0:8d:f6:75:2d:15:2c:00:e9:8c:ad:74:e1:eb:31:
         e0:07:de:ba:fe:0c:7e:18:04:37:ad:f1:fd:8a:c1:49:5d:21:
         2c:32:f9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:19 2026 by rpki-client