This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File:                     fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier:          mVQZh2PNsg7MCKhgZoCjRdFukvY8oFyziiIkGwgaek8=
Subject key identifier:   61:B4:50:24:3A:AC:68:4B:9C:06:02:A4:6A:96:EA:FC:51:FC:BD:D7
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer:       /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial:       019C446BE8B7576FA86883A5138E1AEC3E57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number:          0F25
Signing time:             Mon 09 Feb 2026 22:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:48 +0000
Files and hashes:         1: CUW86B2DR7frkjRXhMj0tpGfzR0.roa (hash: +AMltbCrgBtIU8+BHyMcK4ZbfgEd7AgGyNWp1F2ZA24=)
                          2: FG6edaLthXtNRXgQz784XZNgYd8.roa (hash: 5nX8hTmpLoy7w0liaeZHVLXCjdNjFlEQzahTMpZo9sE=)
                          3: FOLDqKxEVMdWWcpgZnPDCyuO3M4.roa (hash: 0gkvmBgKUujlvBMJPfV/1P6cRqx430AdiJwroTPunR0=)
                          4: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: Rqwlc3+gtSWJFHW8J3rQtA2mqdC4tN8Zscwep3NpIi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:e8:b7:57:6f:a8:68:83:a5:13:8e:1a:ec:3e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
        Validity
            Not Before: Feb  9 22:00:48 2026 GMT
            Not After : Feb 10 22:00:48 2026 GMT
        Subject: CN=61b450243aac684b9c0602a46a96eafc51fcbdd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cc:cd:d5:da:29:ef:7b:6a:53:78:15:8c:59:
                    18:0d:b8:44:4e:d6:a9:f7:c8:87:ca:42:d9:17:07:
                    97:43:4a:7f:a5:5a:47:01:95:bf:9e:f6:bb:05:22:
                    aa:d0:3a:40:f9:5c:d5:e7:aa:b8:eb:5c:e1:5c:b2:
                    84:66:f5:0c:63:f0:1e:23:2c:16:ab:0a:a0:b9:ad:
                    6b:1a:b8:0c:c9:ac:d6:d5:d1:b1:4b:2e:0a:9d:98:
                    d6:08:5b:2e:2d:17:3c:6b:0a:03:32:80:3a:d2:2b:
                    6a:7b:c8:5f:73:62:11:98:5c:d4:bd:f2:6e:ef:73:
                    b3:5b:d9:74:2f:28:b4:4e:df:27:02:fd:68:dc:c9:
                    e1:2f:a5:10:cc:0e:37:ab:88:16:3b:a9:65:06:d5:
                    30:52:61:4d:b1:01:4b:a3:36:50:c5:86:32:e5:89:
                    6c:d8:c1:63:08:d3:bd:cd:13:31:ab:4c:2b:45:8f:
                    07:f7:7e:bc:01:10:95:86:b2:36:e6:85:4c:14:02:
                    49:de:ea:a5:70:2d:a6:d1:7e:f3:57:7b:8a:01:23:
                    84:aa:0d:91:97:1d:b4:d1:e0:76:1f:be:24:dc:f8:
                    9c:53:32:9f:fe:c5:a8:3b:1c:f1:8d:78:d1:c8:96:
                    65:83:94:1c:3a:31:6a:72:90:b9:37:fd:cf:8a:e7:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B4:50:24:3A:AC:68:4B:9C:06:02:A4:6A:96:EA:FC:51:FC:BD:D7
            X509v3 Authority Key Identifier:
                keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fd:43:8b:fe:3c:7a:a6:43:ea:8d:36:65:84:4c:b6:2f:19:
         b1:4b:54:96:ed:2c:d6:c2:f0:74:93:36:bc:16:4d:71:a9:4f:
         29:82:19:a1:f9:35:c2:6e:e4:8b:93:50:dd:9e:c7:f0:ef:11:
         bc:53:b2:f7:2e:0c:f1:f2:93:ed:c3:75:7e:f3:c5:bf:20:d8:
         47:a2:d3:c8:83:fb:8c:4c:26:0f:07:e0:7b:88:75:61:11:d4:
         b6:99:ca:1f:f7:7d:b4:b7:df:fd:c6:71:62:13:4d:da:68:88:
         f7:9e:50:ed:4b:15:61:24:4e:cf:ba:0c:45:dd:f8:de:0f:15:
         dd:8d:fd:6a:47:55:cb:d7:10:4a:82:f5:c3:af:33:01:a7:b3:
         a9:4e:ef:d0:5b:99:62:b8:28:a6:df:74:0a:db:88:27:e7:51:
         03:fd:41:c7:3c:ce:de:b3:b1:9a:f3:c4:b6:a0:42:23:9e:64:
         74:a0:7c:8c:f8:2f:30:6c:bc:e6:19:57:1a:f3:90:fe:89:77:
         c8:73:32:f1:3f:03:5f:27:d4:50:d3:63:8e:53:44:21:5e:87:
         84:49:9f:41:70:c9:b0:fe:cb:ae:6f:d7:e1:23:29:3b:af:9e:
         fc:99:82:ba:b8:b5:f4:2f:67:53:6b:38:7f:50:96:15:76:2e:
         17:da:f2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:47:12 2026 by rpki-client