This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File:                     ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier:          J5AHq2xPucguIhgdx/KO+hwc/piNhHrBVMIjQ60hBMc=
Subject key identifier:   5C:00:6B:5E:A5:57:EA:70:6A:E5:A9:6C:0B:DE:09:DF:6B:8E:FA:AD
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer:       /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial:       019C42EAEE921AF4EA92FAAB767B712BC9C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 15:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:18 +0000
Files and hashes:         1: KrMG047MsDkcwkxBcUD2n7II2ek.roa (hash: 6Sar3x354qtl7kCtCHhcg2W3/WLEoHt036CjyIz1o2g=)
                          2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: Cwsv3L3P+qwkUFDQOPsTsdbgGR4JlCFPxVNhBHqftUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:ee:92:1a:f4:ea:92:fa:ab:76:7b:71:2b:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
        Validity
            Not Before: Feb  9 15:00:18 2026 GMT
            Not After : Feb 10 15:00:18 2026 GMT
        Subject: CN=5c006b5ea557ea706ae5a96c0bde09df6b8efaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ba:11:ae:43:a7:1b:cd:b1:98:c7:55:69:fa:
                    22:c3:00:39:af:4d:7f:9f:8a:bc:2c:d7:9e:3d:a1:
                    e5:7d:c8:39:9d:51:e6:61:1c:71:cd:e9:1a:00:20:
                    de:b1:37:5e:65:a1:b7:9d:d4:c7:d2:65:6e:ca:f2:
                    05:ff:29:b7:f0:8b:ba:18:1f:0f:c4:ab:fb:db:15:
                    be:3b:19:a0:ad:bb:46:64:97:33:35:03:3a:78:85:
                    33:d0:85:de:14:8c:bd:ba:02:39:d1:90:18:bf:9b:
                    b8:8c:b2:6e:43:9d:ae:68:00:9a:32:45:3d:77:fd:
                    78:9b:a9:4c:ff:5e:24:a4:6e:7b:d3:73:37:c2:82:
                    ba:2f:67:18:4c:65:a6:45:42:00:12:06:b4:58:4f:
                    76:a4:6a:96:b9:9a:81:68:f3:64:cf:72:0c:12:63:
                    f9:3f:6d:85:35:e0:4b:f4:3f:c1:43:0c:fa:57:6e:
                    8b:d8:05:f3:6d:62:a8:23:27:8b:64:6f:42:cf:4b:
                    da:ff:29:ea:5a:0d:c2:30:c4:6b:97:a0:0d:59:a6:
                    ce:98:c6:a4:26:31:a0:b6:08:4b:72:b7:31:ee:25:
                    06:c5:c1:8c:1f:33:9c:dd:1a:16:ed:ab:ca:c7:dc:
                    95:55:f9:cc:13:1b:66:eb:b2:f5:a2:9f:75:f9:29:
                    9d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:00:6B:5E:A5:57:EA:70:6A:E5:A9:6C:0B:DE:09:DF:6B:8E:FA:AD
            X509v3 Authority Key Identifier:
                keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:d7:dc:c2:00:e0:2b:ae:c0:ff:93:3a:e8:3b:fe:7a:59:34:
         39:f5:54:b0:da:aa:a6:13:3e:dd:4e:cf:14:4e:12:ed:fb:21:
         d9:bd:34:8e:34:a1:5d:cd:8f:ad:4f:6c:e2:58:0e:fc:4d:ef:
         39:74:e7:32:06:46:d4:17:b4:37:fd:c2:cc:3c:b9:1b:0d:77:
         7a:3f:59:13:6a:55:f2:35:69:c9:6a:f9:82:4e:b7:cc:b6:0d:
         61:8e:10:cd:66:2f:b0:ea:8e:1b:f4:89:aa:3f:66:04:12:3a:
         68:c7:48:4a:3b:14:09:80:1d:93:a7:8b:02:a4:f6:50:7c:a5:
         51:cf:f1:35:2c:79:8b:82:b9:8d:cd:30:b9:ce:bc:0b:52:97:
         eb:b2:5f:78:7c:5b:17:fb:e8:5c:42:1b:ce:b0:b6:b7:71:5d:
         96:31:c4:38:14:b9:c3:6b:48:33:18:f1:9a:5e:d1:fe:c8:5f:
         3b:fc:1a:84:ac:ec:5a:a4:38:55:7a:b3:38:95:fa:23:45:7f:
         43:3d:92:a4:95:be:ff:f3:f7:b7:3f:36:07:40:30:af:88:c4:
         cf:c6:f9:67:2e:a3:ff:5c:c3:47:07:d4:0b:0b:ee:34:3c:96:
         1b:15:b9:ff:96:08:9b:30:81:15:05:60:8a:88:6e:91:bf:25:
         56:16:1a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6u6SGvTqkvqrdntxK8nAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDA4YzBjY2RhODAyY2YyMGNlN2FiZGVlYTIwMjE0ZTA1
ZTQ3YWYwHhcNMjYwMjA5MTUwMDE4WhcNMjYwMjEwMTUwMDE4WjAzMTEwLwYDVQQD
Eyg1YzAwNmI1ZWE1NTdlYTcwNmFlNWE5NmMwYmRlMDlkZjZiOGVmYWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7oRrkOnG82xmMdVafoiwwA5r01/
n4q8LNeePaHlfcg5nVHmYRxxzekaACDesTdeZaG3ndTH0mVuyvIF/ym38Iu6GB8P
xKv72xW+OxmgrbtGZJczNQM6eIUz0IXeFIy9ugI50ZAYv5u4jLJuQ52uaACaMkU9
d/14m6lM/14kpG5703M3woK6L2cYTGWmRUIAEga0WE92pGqWuZqBaPNkz3IMEmP5
P22FNeBL9D/BQwz6V26L2AXzbWKoIyeLZG9Cz0va/ynqWg3CMMRrl6ANWabOmMak
JjGgtghLcrcx7iUGxcGMHzOc3RoW7avKx9yVVfnMExtm67L1op91+SmdSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwAa16lV+pwauWpbAveCd9rjvqtMB8GA1UdIwQY
MBaAFH7QjAzNqALPIM56ve6iAhTgXkevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRDTURNMm9Bczhnem5xOTdxSUNGT0JlUjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYTIwZDgtZTkwMi00MWY1LWJlZmEt
YWI1ZjM5ZmI4ZDM2LzEvZnRDTURNMm9Bczhnem5xOTdxSUNGT0JlUjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zYTIwZDgtZTkwMi00MWY1LWJlZmEtYWI1ZjM5ZmI4ZDM2
LzEvZnRDTURNMm9Bczhnem5xOTdxSUNGT0JlUjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6dfcwgDg
K67A/5M66Dv+elk0OfVUsNqqphM+3U7PFE4S7fsh2b00jjShXc2PrU9s4lgO/E3v
OXTnMgZG1Be0N/3CzDy5Gw13ej9ZE2pV8jVpyWr5gk63zLYNYY4QzWYvsOqOG/SJ
qj9mBBI6aMdISjsUCYAdk6eLAqT2UHylUc/xNSx5i4K5jc0wuc68C1KX67JfeHxb
F/voXEIbzrC2t3FdljHEOBS5w2tIMxjxml7R/shfO/wahKzsWqQ4VXqzOJX6I0V/
Qz2SpJW+//P3tz82B0Awr4jEz8b5Zy6j/1zDRwfUCwvuNDyWGxW5/5YImzCBFQVg
iohukb8lVhYamA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:39 2026 by rpki-client