This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File:                     FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier:          vofti8GGNGbD2huv6iaiMP2rn02m4q3Fddp5OuYlbLU=
Subject key identifier:   FB:C5:56:CD:BA:2A:54:C4:7A:AF:3A:9F:33:01:0E:7C:0D:67:D9:39
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer:       /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial:       019C427D2D75ED06370430DE6F130077D34B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number:          15B4
Signing time:             Mon 09 Feb 2026 13:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:25 +0000
Files and hashes:         1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: UW1l+cU921fg0NFKrsEJawCmOzZPglMtOzfgMcNkzqM=)
                          2: PAWQJ--pyQDWqisMk27pgjU-VTo.roa (hash: LFkt5XtALwLDqGdtvqPz4gaQ669NVQcvwDZAzQf4rZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:2d:75:ed:06:37:04:30:de:6f:13:00:77:d3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
        Validity
            Not Before: Feb  9 13:00:25 2026 GMT
            Not After : Feb 10 13:00:25 2026 GMT
        Subject: CN=fbc556cdba2a54c47aaf3a9f33010e7c0d67d939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0a:ae:b4:d8:fd:e9:c6:43:16:12:09:5f:c8:
                    05:47:c9:44:4b:78:a3:be:0e:61:4c:47:98:18:ee:
                    d8:11:b3:86:f1:17:bb:80:03:4c:e0:89:69:1e:01:
                    17:00:ef:29:9d:eb:a0:5e:be:12:71:40:3b:df:ce:
                    cb:fc:0a:22:e8:0b:f6:3c:d6:7e:8e:dc:32:37:e3:
                    59:1f:f0:99:c9:a9:3a:32:ab:82:46:d3:2b:86:ba:
                    f2:e8:23:af:bc:af:ee:41:fc:7c:b6:40:e3:49:83:
                    dd:d3:47:f4:d5:14:bd:b2:a3:70:c1:f8:99:f8:a0:
                    65:97:41:fc:3f:4f:b5:54:2c:29:bc:6f:ad:89:99:
                    33:2d:b3:7e:68:8a:dc:d2:4c:33:a6:36:fa:02:64:
                    9c:59:b4:5a:44:64:4a:5a:9b:a4:9d:a8:0d:4f:11:
                    b8:48:ee:20:69:4a:cc:c7:89:50:7b:d5:42:1e:c5:
                    2f:f2:86:64:cf:27:91:90:ee:06:c2:09:fc:37:6e:
                    82:d8:10:03:9d:18:74:12:21:c3:f8:07:78:3c:a0:
                    1f:00:ad:a1:57:e5:d3:ae:53:1e:03:43:54:f3:9f:
                    4e:52:51:02:77:49:da:bf:13:a2:5a:a7:c1:3a:d9:
                    b8:df:05:af:8f:03:16:1f:5a:6d:e7:c3:9a:52:c2:
                    c8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C5:56:CD:BA:2A:54:C4:7A:AF:3A:9F:33:01:0E:7C:0D:67:D9:39
            X509v3 Authority Key Identifier:
                keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0b:00:5b:07:bd:85:6d:29:7b:84:d5:d0:29:50:9f:34:43:
         40:fc:7c:28:18:d9:24:4d:d6:14:a0:8e:61:57:78:1a:9e:71:
         3b:7c:bd:ba:01:ee:d9:1d:1c:c2:04:ba:3b:14:a1:d7:4b:34:
         e3:de:d0:8f:f6:b0:3f:d9:b0:ce:03:9a:61:d5:f8:f1:df:32:
         02:01:27:01:5f:ae:e4:e3:d1:58:69:22:fe:f7:1f:33:2f:98:
         7a:ff:79:c0:73:7b:cf:51:2d:a9:ca:14:67:dc:2f:d9:ee:16:
         aa:f5:85:89:f7:37:bb:c1:cc:f2:cb:fa:a2:2f:46:80:4e:97:
         bb:00:5f:a8:56:38:4d:e8:60:07:e4:db:9e:77:17:37:c9:82:
         eb:c2:4b:36:7c:41:88:14:69:da:35:d8:9c:98:51:46:90:58:
         fe:34:39:e5:71:be:c4:02:66:3d:34:aa:c0:ef:41:d5:34:05:
         cf:d3:a8:fd:a2:a5:06:88:4e:b7:fd:41:a9:f6:0e:24:bc:02:
         e2:42:5b:50:0d:6a:1e:8e:58:92:f4:71:5c:2a:59:7b:09:6d:
         46:a6:e7:46:b3:2a:40:c9:eb:a6:30:e1:23:2f:37:2a:3d:c7:
         49:19:6a:d3:b7:d2:b8:b4:9a:f0:dc:79:29:2a:d7:e9:4b:96:
         87:5f:d5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:51 2026 by rpki-client