This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File:                     fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier:          IHQvWqWlFMqcS2LXj/8NaNkgccICMam2GQlQGa5uvGQ=
Subject key identifier:   93:A3:83:14:68:2E:1C:79:37:F2:80:AD:E5:1B:E5:C1:26:61:2B:EF
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer:       /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial:       019C44D987B8A3C1D933D13C245B650BC1C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number:          12CF
Signing time:             Tue 10 Feb 2026 00:00:32 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:32 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:32 +0000
Files and hashes:         1: Rc3STN1au0eE3KIt2vDHqH2ZA2E.roa (hash: 4CQWjqMCa9ZSxhQWZORkOAVze6+tQcY1MdPTo5paRKo=)
                          2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: CA2/LGF0jwux2Qf99nUW7c7+cmkMBrp9zvdhGwhIfUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:87:b8:a3:c1:d9:33:d1:3c:24:5b:65:0b:c1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
        Validity
            Not Before: Feb 10 00:00:32 2026 GMT
            Not After : Feb 11 00:00:32 2026 GMT
        Subject: CN=93a38314682e1c7937f280ade51be5c126612bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:99:d5:1f:dd:6f:3f:38:ef:3a:79:9d:90:
                    22:86:c3:e4:92:15:7f:df:62:ec:7a:f6:3e:a0:a4:
                    6e:6a:e9:21:f4:a9:d1:cd:db:f1:66:96:d2:f3:ff:
                    4b:eb:0f:80:e1:13:00:af:39:4f:d5:95:86:92:92:
                    2d:39:aa:fc:06:d5:7c:ed:76:d5:c7:55:7c:1a:9b:
                    a4:e4:00:42:4e:c6:6f:72:71:a9:5b:bf:e8:57:3e:
                    24:07:ee:6c:51:2c:db:5a:97:96:d6:bb:ce:11:82:
                    df:d3:5e:e5:5b:54:b9:2c:01:14:4e:e0:17:4e:96:
                    6a:c9:50:0b:95:fe:82:72:44:c4:ed:cd:1f:b3:a7:
                    77:05:77:e1:d6:99:2b:5e:ae:83:1c:cf:fe:a4:a9:
                    08:60:07:27:c0:8b:ea:0a:8d:df:6b:05:78:65:c3:
                    d0:19:8c:63:20:bb:5a:90:d1:e9:4d:fd:3a:6d:ba:
                    c0:23:a2:d3:a5:e0:08:bf:fb:fb:4a:de:6f:84:57:
                    dd:e9:8c:d9:4e:74:2e:5d:8f:72:e9:f5:96:60:85:
                    46:6f:57:20:94:79:a3:9d:42:e8:a2:51:b4:b3:6b:
                    92:45:61:22:8b:77:9a:8f:34:e7:c5:5a:a5:9d:45:
                    5f:c5:5b:f5:e6:19:6f:2a:ac:13:78:ef:d5:86:5c:
                    41:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A3:83:14:68:2E:1C:79:37:F2:80:AD:E5:1B:E5:C1:26:61:2B:EF
            X509v3 Authority Key Identifier:
                keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:cb:b2:02:a8:f2:6e:c2:24:4e:9d:97:1d:89:67:a1:5a:4b:
         2f:e9:aa:4d:ed:93:8b:b0:df:b1:80:02:83:f2:97:8f:66:75:
         79:0e:c9:e8:00:f4:ef:ad:31:b2:f7:02:f9:d4:d0:4a:a7:3e:
         9d:f9:dc:4a:e6:4a:40:ab:da:96:b4:ef:ef:1c:2c:45:d5:f2:
         38:14:15:8a:5f:53:57:09:16:b6:f7:51:21:e0:84:51:5b:d7:
         d6:79:ea:02:04:cc:6f:63:9c:f2:c7:ab:15:c9:b7:7a:fa:86:
         9c:25:3b:c6:ce:a9:85:a4:73:f4:a8:32:36:25:f6:30:75:63:
         e8:6f:1c:62:31:66:ee:27:ac:77:bf:67:c9:a1:ef:58:5e:0c:
         30:bf:e8:5f:ae:9a:a0:e1:d0:2f:df:39:f1:fd:5e:92:c5:56:
         9d:52:74:48:40:84:d2:70:7e:5f:3c:13:41:c6:a9:ae:4a:02:
         d8:53:20:c4:b7:6c:d7:80:7a:a8:48:3d:46:6f:99:bc:f6:73:
         08:b9:41:fd:01:4a:aa:5b:05:9d:8b:34:a0:5e:0f:1f:80:99:
         02:a3:16:00:86:4f:18:8f:b0:84:aa:a1:d6:03:6d:40:8f:d3:
         68:e2:9a:00:93:81:eb:be:8b:a6:f9:52:44:8f:39:44:ec:be:
         86:78:ed:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxE2Ye4o8HZM9E8JFtlC8HIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMjViZTcwNDA2ZDM4MWU3MjVkM2UyYmVmMTJmNmE4ZjNk
ZDgyNTcwHhcNMjYwMjEwMDAwMDMyWhcNMjYwMjExMDAwMDMyWjAzMTEwLwYDVQQD
Eyg5M2EzODMxNDY4MmUxYzc5MzdmMjgwYWRlNTFiZTVjMTI2NjEyYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGmZ1R/dbz847zp5nZAihsPkkhV/
32LsevY+oKRuaukh9KnRzdvxZpbS8/9L6w+A4RMArzlP1ZWGkpItOar8BtV87XbV
x1V8Gpuk5ABCTsZvcnGpW7/oVz4kB+5sUSzbWpeW1rvOEYLf017lW1S5LAEUTuAX
TpZqyVALlf6CckTE7c0fs6d3BXfh1pkrXq6DHM/+pKkIYAcnwIvqCo3fawV4ZcPQ
GYxjILtakNHpTf06bbrAI6LTpeAIv/v7St5vhFfd6YzZTnQuXY9y6fWWYIVGb1cg
lHmjnULoolG0s2uSRWEii3eajzTnxVqlnUVfxVv15hlvKqwTeO/VhlxBLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOjgxRoLhx5N/KAreUb5cEmYSvvMB8GA1UdIwQY
MBaAFH0lvnBAbTgecl0+K+8S9qjz3YJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82YTMwMWMtODUzMi00NmYwLWEzM2Ut
ZWI2NWYxZjQ2ZTBiLzEvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS82YTMwMWMtODUzMi00NmYwLWEzM2UtZWI2NWYxZjQ2ZTBi
LzEvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcuyAqjy
bsIkTp2XHYlnoVpLL+mqTe2Ti7DfsYACg/KXj2Z1eQ7J6AD0760xsvcC+dTQSqc+
nfncSuZKQKvalrTv7xwsRdXyOBQVil9TVwkWtvdRIeCEUVvX1nnqAgTMb2Oc8ser
Fcm3evqGnCU7xs6phaRz9KgyNiX2MHVj6G8cYjFm7iesd79nyaHvWF4MML/oX66a
oOHQL9858f1eksVWnVJ0SECE0nB+XzwTQcaprkoC2FMgxLds14B6qEg9Rm+ZvPZz
CLlB/QFKqlsFnYs0oF4PH4CZAqMWAIZPGI+whKqh1gNtQI/TaOKaAJOB676LpvlS
RI85ROy+hnjtxQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:40 2026 by rpki-client