This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
File:                     FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json)
Hash identifier:          rX0U5Mh1JISZPz+xcgbgrtiop3plG1WkZdtXt4YdANU=
Subject key identifier:   EA:A9:39:29:4E:D3:E2:25:7B:FA:13:E3:1F:DA:07:C6:3F:00:31:EC
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Certificate issuer:       /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial:       019C4510E92C09C51BE0A06D8B58F3BA62DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
Manifest number:          0716
Signing time:             Tue 10 Feb 2026 01:01:01 +0000
Manifest this update:     Tue 10 Feb 2026 01:01:01 +0000
Manifest next update:     Wed 11 Feb 2026 01:01:01 +0000
Files and hashes:         1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: DfKw2Q1ozF1OtzjNEzItJ7TBFRnBN+dWiJNnL38pKp8=)
                          2: aPjK_e6JWAnpVJTimjzF8YUqBy8.roa (hash: CxFxcDSyGy+oCI+MZq7LPshirwWX4b3dsefQvQRFoI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:10:e9:2c:09:c5:1b:e0:a0:6d:8b:58:f3:ba:62:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
        Validity
            Not Before: Feb 10 01:01:01 2026 GMT
            Not After : Feb 11 01:01:01 2026 GMT
        Subject: CN=eaa939294ed3e2257bfa13e31fda07c63f0031ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:55:4e:c2:10:a5:0d:5a:87:3a:45:0f:c0:47:
                    ca:16:c7:3d:59:f3:46:d1:36:71:a7:1b:20:cb:90:
                    19:d3:21:28:3c:35:9b:43:e7:78:7c:08:1c:4d:9d:
                    3d:54:0f:69:5a:92:72:9d:db:ae:34:3a:97:da:4f:
                    97:74:59:18:77:6a:c1:03:75:31:e7:86:37:ad:a8:
                    10:ba:74:60:6c:f4:c2:a9:c2:27:2b:ce:9b:ec:b2:
                    10:3f:3f:bb:27:70:d9:30:ff:03:87:9f:80:35:60:
                    db:7f:55:34:27:6e:a1:00:37:4b:17:7c:de:de:0c:
                    76:01:81:b5:9d:40:90:81:a0:2f:a9:91:6b:9f:a8:
                    b3:7c:c3:c8:d2:64:53:e4:ed:19:bc:61:78:7d:aa:
                    aa:d4:d3:94:f6:fb:97:c0:f3:68:43:80:f7:b6:c8:
                    c9:2f:d9:3f:4c:0b:93:8e:fc:0a:5d:b3:1c:68:35:
                    18:c0:9c:57:7e:c7:58:2b:45:73:cf:ef:f1:06:e7:
                    c9:78:7a:b1:d0:88:73:ac:ce:29:0b:13:22:39:a6:
                    b0:64:cd:ad:2f:64:63:9f:06:b0:dc:51:6d:40:58:
                    f5:d2:4e:a2:d5:48:93:bc:b7:dc:e2:42:06:5a:74:
                    3b:28:e0:80:5c:9a:38:5e:49:1e:e4:3d:ad:4a:60:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A9:39:29:4E:D3:E2:25:7B:FA:13:E3:1F:DA:07:C6:3F:00:31:EC
            X509v3 Authority Key Identifier:
                keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:64:ca:e3:00:c1:9a:25:7c:d3:4d:0c:3f:4d:c4:20:b6:80:
         b1:69:f4:9b:d6:da:38:6e:fe:2d:ac:01:5a:73:4d:2f:f5:74:
         eb:4f:6c:ad:d4:0c:c7:35:43:6c:af:bf:63:77:4f:02:c3:09:
         18:2a:d3:ea:73:1c:0d:58:30:9e:1d:58:29:c1:cf:64:28:70:
         59:b4:eb:e7:d3:36:36:2b:0c:22:c8:75:a0:1f:37:19:54:3d:
         ac:b2:e4:d1:a9:70:64:c9:b3:38:b4:5a:6f:47:51:cf:63:eb:
         4b:66:03:9f:aa:a7:8d:7c:69:74:b2:49:b4:09:28:49:e9:72:
         b7:73:1e:f2:ce:e1:83:d2:18:74:86:19:fd:74:6d:b3:dc:02:
         51:80:fc:46:1e:c0:c5:13:45:d9:c0:28:ad:9c:c3:ff:7f:d2:
         ce:a9:39:ef:91:a6:8b:d1:ba:a4:cf:33:1b:2f:34:3d:ca:3a:
         7e:92:c7:34:33:06:6e:b7:b3:15:1f:94:4a:63:dc:05:78:a8:
         bb:10:19:52:7c:9e:11:b3:42:83:1f:3a:f8:02:96:95:19:5f:
         12:4e:40:4d:9b:09:b8:7e:dd:7d:3f:f6:ea:28:8a:c6:b6:93:
         d0:25:bc:90:21:c7:6b:c8:5e:bf:ec:23:fa:cf:43:92:57:85:
         68:8a:6c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:58:56 2026 by rpki-client