This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File:                     fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier:          FYv2zWGAW+WCNtkw/1Mm7xAc2CrOzRa8kBwd8mVX4Xs=
Subject key identifier:   49:93:61:26:5E:F2:6C:25:67:53:5E:C2:7E:FB:9D:D7:2B:45:00:02
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer:       /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial:       019C420FD4DE1EF71F64AC5D77ABE88A5B00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number:          1110
Signing time:             Mon 09 Feb 2026 11:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:59 +0000
Files and hashes:         1: 2lNKUKMFEbf99s5ruYSyx3kpqBA.roa (hash: frbfhLN2U1B/a1tCRS0GooGGeNzUszrYFqD6uG7ghHw=)
                          2: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: jlKQu2+LL6iAidcNNiIOiNMIM6JEEagHM6W5s9FLAog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:d4:de:1e:f7:1f:64:ac:5d:77:ab:e8:8a:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
        Validity
            Not Before: Feb  9 11:00:59 2026 GMT
            Not After : Feb 10 11:00:59 2026 GMT
        Subject: CN=499361265ef26c2567535ec27efb9dd72b450002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6b:a8:45:d6:a2:fa:e9:94:82:1a:81:b6:4c:
                    da:67:c2:02:a4:8b:6b:32:7d:28:20:79:7e:b5:1a:
                    36:42:e1:75:96:65:6b:24:71:23:e5:fc:77:cd:81:
                    e3:30:83:d9:86:3b:6e:cb:a6:a0:9c:75:33:ed:d0:
                    76:86:d7:15:3d:8a:c9:a2:03:7e:c8:cc:61:4c:fd:
                    8b:7f:7d:f9:53:10:1e:c1:5e:0a:0e:a3:3b:7e:40:
                    de:dc:e9:fc:c9:d3:00:6b:05:b0:ff:8c:98:a6:c2:
                    a4:8b:47:7e:f6:f8:aa:bf:bf:db:8c:19:cf:d6:b1:
                    7f:d9:29:7f:37:c1:4c:27:a9:1e:fd:07:4a:86:4a:
                    07:71:97:16:a3:0e:37:06:49:31:77:44:58:20:7c:
                    07:7f:92:2d:8d:f6:e5:fd:4f:7b:c9:b1:0a:29:a5:
                    71:fd:2c:be:c5:e7:9d:e7:46:f9:2d:2a:8c:7e:07:
                    e6:b4:58:27:c0:fb:d3:e9:ce:3f:e3:1b:8e:b3:8f:
                    77:ee:f0:62:69:c7:12:8b:74:a7:9e:9c:7d:24:e9:
                    54:a8:2a:6b:97:d7:fe:f2:ee:10:db:2c:6a:49:8a:
                    85:89:77:7e:0d:e8:c1:08:ee:94:f3:42:93:a2:76:
                    29:2d:0f:09:51:84:41:4b:a8:cb:5b:1c:d3:e4:72:
                    d8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:93:61:26:5E:F2:6C:25:67:53:5E:C2:7E:FB:9D:D7:2B:45:00:02
            X509v3 Authority Key Identifier:
                keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:3e:91:5d:56:fb:77:38:cd:79:da:f2:9e:50:99:75:b0:90:
         3b:8e:0e:79:9d:b4:a0:3b:68:04:fc:76:db:26:d1:c5:a5:1e:
         e2:43:e3:72:e8:f6:dc:c1:5a:c8:7f:22:f8:db:14:6d:f0:fa:
         e3:0a:13:55:5c:f2:69:e4:71:08:e3:4a:26:08:a1:e5:9b:b7:
         23:25:db:61:e0:bd:0b:fd:cb:b2:e3:48:19:c6:2b:68:07:d6:
         86:15:03:54:b7:55:8c:7a:20:11:7b:e6:0d:9b:fe:3b:09:42:
         34:9c:bb:11:20:09:55:c9:7c:87:44:48:8b:5e:3e:aa:c5:b6:
         27:1e:61:e0:15:99:38:0d:bc:19:44:fe:de:38:aa:71:c0:89:
         f5:27:26:d8:14:48:17:66:98:ec:09:60:4a:0b:a9:fe:46:dd:
         a2:64:f3:9d:5f:d9:33:1c:9d:9b:c6:9d:ac:3a:eb:1f:43:fb:
         43:7f:d9:0d:ea:78:4c:bb:76:66:87:9b:c2:3b:27:0f:45:c6:
         b2:60:f7:29:06:ad:37:0f:b4:90:31:c0:f1:85:bf:2d:74:8c:
         b9:5a:a7:2c:ef:f8:b9:a3:7c:7a:57:ba:32:7b:44:61:35:ba:
         79:30:b7:3d:fb:9e:0e:a9:8c:a8:3b:42:99:d9:ef:ca:b5:8d:
         be:06:1e:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD9TeHvcfZKxdd6voilsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkN2NiMjk3OGJiNTRlYjU1N2NhZTNmZmIzNWU0NmFjNGQ1
YzIyYmYwHhcNMjYwMjA5MTEwMDU5WhcNMjYwMjEwMTEwMDU5WjAzMTEwLwYDVQQD
Eyg0OTkzNjEyNjVlZjI2YzI1Njc1MzVlYzI3ZWZiOWRkNzJiNDUwMDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWuoRdai+umUghqBtkzaZ8ICpItr
Mn0oIHl+tRo2QuF1lmVrJHEj5fx3zYHjMIPZhjtuy6agnHUz7dB2htcVPYrJogN+
yMxhTP2Lf335UxAewV4KDqM7fkDe3On8ydMAawWw/4yYpsKki0d+9viqv7/bjBnP
1rF/2Sl/N8FMJ6ke/QdKhkoHcZcWow43Bkkxd0RYIHwHf5Itjfbl/U97ybEKKaVx
/Sy+xeed50b5LSqMfgfmtFgnwPvT6c4/4xuOs4937vBiaccSi3Snnpx9JOlUqCpr
l9f+8u4Q2yxqSYqFiXd+DejBCO6U80KTonYpLQ8JUYRBS6jLWxzT5HLYrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmTYSZe8mwlZ1Newn77ndcrRQACMB8GA1UdIwQY
MBaAFH18speLtU61V8rj/7NeRqxNXCK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82Y2VhMzctZDI3MC00ZDFjLWE5Mzct
MjRjM2Q5ZTI1NDAxLzEvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy82Y2VhMzctZDI3MC00ZDFjLWE5MzctMjRjM2Q5ZTI1NDAx
LzEvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlz6RXVb7
dzjNedrynlCZdbCQO44OeZ20oDtoBPx22ybRxaUe4kPjcuj23MFayH8i+NsUbfD6
4woTVVzyaeRxCONKJgih5Zu3IyXbYeC9C/3LsuNIGcYraAfWhhUDVLdVjHogEXvm
DZv+OwlCNJy7ESAJVcl8h0RIi14+qsW2Jx5h4BWZOA28GUT+3jiqccCJ9Scm2BRI
F2aY7AlgSgup/kbdomTznV/ZMxydm8adrDrrH0P7Q3/ZDep4TLt2ZoebwjsnD0XG
smD3KQatNw+0kDHA8YW/LXSMuVqnLO/4uaN8ele6MntEYTW6eTC3PfueDqmMqDtC
mdnvyrWNvgYe5w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:21 2026 by rpki-client