This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File:                     FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier:          uPJIQsWMjU9vb6MTKuFKZtP9zgJAAYYUmmZCA6p7mDU=
Subject key identifier:   7F:78:81:B4:85:98:F2:F1:FB:56:F2:4F:EA:6B:15:15:A3:BE:89:68
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer:       /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial:       019C44DA14234D6B3DAE62D14BCFAA3D00B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number:          0AA0
Signing time:             Tue 10 Feb 2026 00:01:08 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:08 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:08 +0000
Files and hashes:         1: BwQVQ_CjJfdcPm0-S87mGB0Ours.roa (hash: Ta3LRpNzq0lEJK2G/WE3LSjK7WYr/aPEY/T1lVk/51A=)
                          2: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: vQOSsveyCVxuiSR9RyyMpvsnSYndglKp416qCg6iDGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:14:23:4d:6b:3d:ae:62:d1:4b:cf:aa:3d:00:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
        Validity
            Not Before: Feb 10 00:01:08 2026 GMT
            Not After : Feb 11 00:01:08 2026 GMT
        Subject: CN=7f7881b48598f2f1fb56f24fea6b1515a3be8968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:ac:15:57:e2:44:cd:63:ff:f8:20:b5:65:
                    72:c3:53:2c:0e:a1:f5:a3:08:6a:df:26:f5:e4:23:
                    21:a1:4f:96:3d:6f:1f:65:1b:63:76:6f:71:fa:d7:
                    82:8f:a9:e9:1e:19:dc:4d:42:00:ee:33:5b:2d:23:
                    7c:d6:52:e0:e1:c7:d0:2e:1b:33:78:3f:6a:dc:8b:
                    34:44:31:6e:df:d0:e6:61:17:3e:09:f1:10:d6:d7:
                    c4:53:50:af:6f:dc:18:b3:09:4a:3e:0e:5b:77:ce:
                    4a:5b:19:09:4a:29:76:ef:8b:64:9d:69:d7:62:08:
                    96:37:62:5b:06:ff:11:64:cb:52:95:86:1d:39:c0:
                    92:a2:89:d7:60:12:ce:4a:93:ab:b7:0f:ee:d3:95:
                    15:2b:65:50:b2:e0:8e:f4:ed:f9:93:7a:44:7a:67:
                    cf:31:8a:4b:86:5f:fa:5c:e3:f8:df:1e:d8:a6:d5:
                    b0:f6:1f:18:61:4e:b1:76:a4:5b:c4:ce:cb:bb:34:
                    92:7e:d3:a9:e5:c8:77:89:bd:05:49:a9:36:48:03:
                    76:09:fa:9f:0b:40:2b:c6:76:c9:e0:58:4d:93:42:
                    71:7e:09:91:99:5c:42:fc:cc:b0:0d:ed:59:19:54:
                    57:db:77:59:e8:6c:7b:25:69:21:9b:dd:26:bd:e1:
                    c5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:78:81:B4:85:98:F2:F1:FB:56:F2:4F:EA:6B:15:15:A3:BE:89:68
            X509v3 Authority Key Identifier:
                keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:34:11:9a:46:86:ef:da:07:1a:17:64:71:99:7b:a2:13:91:
         d0:d4:7f:6e:35:4f:1d:f2:aa:2b:34:b6:2b:f7:d0:09:ed:70:
         f4:2b:53:ee:70:df:e3:ff:b4:e1:f3:df:6f:f6:2e:3c:c0:51:
         31:fb:21:26:09:f2:a2:ff:60:98:1f:0b:ef:b4:0d:5d:f8:e9:
         ed:71:91:aa:da:48:96:e9:18:72:5a:a6:81:e6:52:dd:64:29:
         a1:4a:a2:14:f5:f2:98:c5:62:00:2d:0d:c2:23:97:4d:46:52:
         c1:59:e4:36:cd:9e:9a:53:dc:08:5d:42:72:d1:7f:be:8f:3c:
         53:01:5c:f1:c0:be:13:df:b6:2e:b6:0d:69:58:1a:42:1e:e0:
         0e:0f:2d:0c:64:d5:e9:e3:6a:0d:9f:96:cf:b4:2d:3e:3c:41:
         4c:aa:35:d8:dc:d9:03:d6:5c:12:21:30:f1:57:a0:11:81:20:
         61:70:33:49:13:f2:bb:b3:c5:33:c0:4a:94:28:32:2a:78:0b:
         01:b0:30:55:ea:a3:5a:28:f4:bf:4c:d0:24:18:fe:c6:4a:fd:
         03:e8:33:76:ab:d8:b5:25:0f:a3:37:cf:c7:2a:ca:34:fa:f0:
         c9:e8:c6:36:3f:ab:f6:1a:c3:5b:fd:c6:9c:10:eb:bf:a4:fe:
         f3:b0:36:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:05 2026 by rpki-client