This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File:                     FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier:          gfqEsPwy3mMOBYyUYxYMVZhfPcdmmaG1pHM0AgwDxpk=
Subject key identifier:   53:E4:FB:A7:6B:9E:83:BC:31:63:97:06:A9:17:8B:26:D4:2D:45:60
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer:       /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial:       019C43222500822AED35D281F11EF9E42C2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number:          118E
Signing time:             Mon 09 Feb 2026 16:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:37 +0000
Files and hashes:         1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: XJNzfgM9gNqQiED8UmiId09o9/B0aTJ0y2SNiv97XHU=)
                          2: ZHym1jgmQNO1769mOXVyUNOVMEc.roa (hash: 6HGTh8JhgEJnDcdwwWSa7+oUj2V8bxazwsUi6gBiFdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:25:00:82:2a:ed:35:d2:81:f1:1e:f9:e4:2c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
        Validity
            Not Before: Feb  9 16:00:37 2026 GMT
            Not After : Feb 10 16:00:37 2026 GMT
        Subject: CN=53e4fba76b9e83bc31639706a9178b26d42d4560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8f:53:27:ee:0a:2e:ac:7c:ab:5f:87:cb:1e:
                    2e:4c:15:7c:17:61:76:d7:d4:f8:7b:35:34:93:5c:
                    dc:f0:f2:e3:f7:81:2c:77:96:ff:4e:08:76:b0:27:
                    44:72:7b:d4:25:42:6f:e8:73:96:bc:a4:e0:04:84:
                    9a:99:d4:25:4e:bc:10:a2:88:40:5e:ad:f6:6c:ee:
                    3e:c0:fe:aa:3f:6a:aa:42:41:bb:f2:d0:da:59:05:
                    a3:83:cf:e2:52:60:dc:6a:bf:b4:1e:95:45:c6:f2:
                    62:e4:53:37:c2:91:65:fe:15:82:be:1c:f3:aa:75:
                    f1:d9:f4:7d:76:d5:f1:56:40:7e:07:61:d3:61:9b:
                    82:e0:e2:80:0e:f5:25:2f:18:6e:37:85:6f:af:46:
                    eb:df:3e:8b:4a:57:73:1d:1f:16:d2:f8:fb:9b:fc:
                    5f:d6:55:ca:a3:6d:d7:ee:df:da:a9:63:7f:86:c6:
                    0c:35:b5:98:1b:6f:46:66:84:4f:96:85:0c:48:02:
                    bd:ce:0d:3d:4a:b9:00:d5:25:f9:ab:4b:c2:7e:b6:
                    fd:4d:20:ad:8d:c8:b2:eb:c6:73:75:78:29:3e:3f:
                    01:fb:26:79:6e:48:87:82:b6:0c:b7:14:b5:36:30:
                    59:7b:b5:95:01:f6:4b:1e:80:64:74:16:73:be:4d:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E4:FB:A7:6B:9E:83:BC:31:63:97:06:A9:17:8B:26:D4:2D:45:60
            X509v3 Authority Key Identifier:
                keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f4:88:3a:fe:58:14:27:80:aa:b8:a0:03:bd:aa:0d:1c:6e:
         c0:58:12:8e:9d:dc:07:38:6e:49:f3:e0:cb:34:ec:42:7f:b0:
         48:fe:53:7a:47:8f:67:d7:e7:b8:8e:47:aa:68:1f:45:31:f3:
         af:42:aa:f6:67:7e:c6:be:2a:c8:6f:18:0c:09:e6:e0:68:16:
         ed:90:02:8c:3b:9a:b2:7e:cc:2e:af:13:cc:89:35:73:a2:ec:
         d9:c2:fa:5e:51:70:7d:c1:ad:b3:f4:a5:25:97:31:50:04:f5:
         e5:ff:58:36:34:52:ee:60:73:b0:77:77:62:d3:e0:22:6d:9d:
         0c:f7:3c:62:f7:e5:61:aa:4f:7e:07:aa:ab:4d:2a:19:26:11:
         85:d8:54:ef:18:34:1d:a6:dd:8a:07:9a:57:a1:65:8c:93:15:
         41:05:16:71:03:03:88:f9:d2:76:78:94:78:15:88:7f:fa:5d:
         a3:72:23:71:7d:ea:26:bd:5c:12:c1:26:c8:e8:23:bc:a2:b2:
         b1:b4:c3:39:b3:48:75:52:17:5a:a1:20:fc:a0:95:25:c8:91:
         09:35:b2:cb:9b:35:23:99:67:7f:39:91:01:02:ea:a1:83:2d:
         5e:61:7a:42:19:39:8f:42:50:95:b6:ac:da:33:f9:53:c0:88:
         8a:37:94:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:44 2026 by rpki-client