This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File:                     1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier:          DRVCPFOwkO5uLr2xXMgoIHPrzUMI9mjUSHkQN1NRiFI=
Subject key identifier:   53:3D:D2:E6:B1:97:E3:61:A7:B9:7E:1A:C5:2B:9E:A6:40:07:AB:4B
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer:       /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial:       019C43C6C75AD223E1602A4738172D3C1B29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number:          178F
Signing time:             Mon 09 Feb 2026 19:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:26 +0000
Files and hashes:         1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: 05XZBla+ZRwKR7gftVTh+EQLwE1Q/Fea6n7xhaeWZZE=)
                          2: eGbytIohe-kr726dY0U9-5W_3W0.roa (hash: FCsduLoeE0W7ZOHD77VZfhJqVup/YNlpb0KlPrFDE1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:c7:5a:d2:23:e1:60:2a:47:38:17:2d:3c:1b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
        Validity
            Not Before: Feb  9 19:00:26 2026 GMT
            Not After : Feb 10 19:00:26 2026 GMT
        Subject: CN=533dd2e6b197e361a7b97e1ac52b9ea64007ab4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:25:26:95:7f:0e:a1:bc:39:88:b0:a2:9c:cc:
                    b2:4b:a4:de:45:29:77:ad:17:0b:6d:ee:c4:87:c2:
                    0f:98:29:19:f4:c0:4e:ea:88:25:98:60:64:d6:e1:
                    f2:56:56:c4:4d:0b:13:7a:e6:78:a9:ea:a8:a2:04:
                    63:33:b3:0b:30:d6:31:a2:05:af:8f:33:99:c4:d1:
                    3c:97:a1:78:c2:aa:af:0d:42:31:e9:5e:bf:b5:16:
                    dd:f7:6f:4b:e1:14:d4:bf:e7:c1:ec:29:5f:55:62:
                    1e:67:74:39:b2:fd:3e:bc:9a:4d:ba:ea:84:4d:a0:
                    0a:29:ab:39:a7:ab:83:bc:30:cf:9d:35:61:75:af:
                    82:a3:0b:40:b3:4b:4d:84:9b:e4:27:e0:3b:14:52:
                    c8:ac:14:cf:fc:cd:bd:ee:58:d2:36:e3:38:af:a1:
                    54:a7:b7:f8:50:f9:70:14:48:e5:e3:08:d4:bc:ae:
                    2a:b5:17:9a:f2:58:2b:9b:f6:76:0e:d2:99:87:23:
                    3e:99:ef:35:fc:4c:77:51:8f:df:fc:ba:7e:42:21:
                    8d:31:f0:da:1d:db:fb:10:d7:a4:1e:b4:f1:78:27:
                    d0:5b:02:25:dd:a0:97:ef:13:d7:cb:e3:8d:bd:9b:
                    b7:ba:5c:74:77:96:15:7f:67:d0:57:62:b1:38:96:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3D:D2:E6:B1:97:E3:61:A7:B9:7E:1A:C5:2B:9E:A6:40:07:AB:4B
            X509v3 Authority Key Identifier:
                keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:41:62:40:65:07:85:a1:fa:12:4d:5e:df:58:6e:e1:9d:d6:
         f7:b5:e9:a7:31:66:61:a5:5c:ad:78:ea:5a:ec:ee:fc:eb:08:
         8e:98:5b:21:b7:7c:81:6a:3f:1f:2f:c8:26:dc:fe:0c:31:e6:
         9c:97:47:c5:d7:34:fb:6f:ac:7d:4e:7e:fb:1f:ed:4e:d4:cf:
         50:b5:52:87:17:84:aa:81:f6:8b:1e:85:b0:79:a4:ae:8e:04:
         48:97:65:9c:88:92:3a:4f:4b:3e:49:73:a7:60:e1:0f:2a:a4:
         d5:57:11:11:90:8e:e0:f0:f1:4b:6b:19:1a:c1:28:88:20:7e:
         27:64:0e:25:3c:c7:64:fb:17:a0:5b:4f:b5:d1:01:60:77:97:
         db:e2:07:03:0d:7f:06:c1:75:64:87:fd:0c:2a:8b:64:fc:50:
         95:69:56:53:55:a3:c8:76:35:6c:1b:75:ba:17:4e:f9:72:46:
         0a:75:75:2b:57:44:26:fc:2e:6e:d9:f3:25:a7:6a:58:b2:dc:
         c3:96:39:6d:5f:6f:04:43:ad:1b:a6:50:88:d7:d7:1b:b3:b9:
         8b:36:a4:7c:09:e1:4b:df:c6:66:b2:37:06:47:e3:53:ad:4e:
         1a:cb:de:b0:e4:41:ce:17:f9:ac:50:71:08:fa:85:59:eb:60:
         d6:ff:a3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:59 2026 by rpki-client