This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File:                     _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier:          pfwYxmJGTDQMtgL5YcojRGsyLWf54sRJTLGg+oAieuA=
Subject key identifier:   6D:B8:75:6F:BA:F7:05:9B:07:53:CD:CA:B9:DC:A6:5A:5B:B9:2A:44
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer:       /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial:       019C438FE44038015A04417F5D6B5AF609F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number:          0C7D
Signing time:             Mon 09 Feb 2026 18:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:29 +0000
Files and hashes:         1: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: ZH4PrIUYEGqwN42Z2MW9MYA2TY12xAcU0yKOnqrHSEc=)
                          2: prQ66WR-2hX9fe4qngBkX-oQAis.roa (hash: qCnV7ilduwTB9MzFqgP4zRzlhz0MnbggECjM60aFcrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:e4:40:38:01:5a:04:41:7f:5d:6b:5a:f6:09:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
        Validity
            Not Before: Feb  9 18:00:29 2026 GMT
            Not After : Feb 10 18:00:29 2026 GMT
        Subject: CN=6db8756fbaf7059b0753cdcab9dca65a5bb92a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:5c:e5:57:ad:e6:ff:8c:ab:29:1b:4e:06:
                    72:07:d4:fe:9d:db:e0:22:f8:7b:ca:7c:fb:c8:12:
                    30:11:ef:43:40:5f:53:34:d0:7f:5d:95:bf:06:57:
                    12:e7:4a:10:0f:54:35:c1:6f:8e:59:72:1f:c4:1d:
                    57:84:2a:d4:73:48:b2:b4:ae:66:2e:db:a9:dd:2e:
                    cb:8c:8f:ca:a9:62:51:e6:81:3a:12:9e:02:bc:d8:
                    21:d0:ba:c5:7f:e6:98:83:ff:b3:68:b1:40:3c:d2:
                    75:ab:3c:cd:64:f5:f4:31:ae:46:09:6f:80:03:e3:
                    83:bd:b0:15:af:76:77:3f:82:4a:bf:2d:e0:04:22:
                    35:a5:87:0b:79:2b:22:50:8f:a1:59:ce:f1:84:24:
                    24:f5:e3:85:16:5b:a4:04:48:21:bd:d1:20:2c:bf:
                    e9:89:31:4c:bc:b0:a1:ac:f4:fc:ba:c9:59:85:48:
                    a9:1f:8f:87:45:1f:a3:14:56:b4:ae:5b:ab:08:7c:
                    2d:b3:91:7e:a6:4d:18:f7:34:ee:df:3d:ad:c4:dc:
                    f2:2e:a2:13:1d:a3:eb:2b:29:47:3e:e7:73:28:ad:
                    7b:02:19:d4:3b:ea:82:b2:6d:92:37:62:36:89:3d:
                    f3:5c:ad:81:16:ab:d1:22:04:c7:f4:cc:35:9e:1d:
                    c2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B8:75:6F:BA:F7:05:9B:07:53:CD:CA:B9:DC:A6:5A:5B:B9:2A:44
            X509v3 Authority Key Identifier:
                keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9c:ad:6a:75:fe:73:d6:e6:a0:47:08:f6:08:ab:0e:35:eb:
         ec:9f:ad:ef:e0:f3:32:a5:1b:31:cd:60:42:b9:dc:dd:c8:80:
         a2:cf:06:1e:9f:4b:1c:6d:be:ea:ef:1a:5c:68:d5:0a:e9:f7:
         16:eb:9a:00:6b:33:84:b3:be:cf:cd:c9:99:87:5c:de:53:1f:
         dc:8f:6a:c0:11:db:ea:b1:28:36:d0:58:cd:65:75:eb:25:4f:
         4b:9b:14:69:2e:8b:77:7a:5f:4e:c0:d8:8c:a8:3e:29:9c:fd:
         5c:d8:96:43:ed:9c:ac:4e:1f:aa:3f:8f:0b:6f:37:3b:a8:94:
         88:c2:e9:42:58:0e:11:81:b0:da:db:50:fc:d1:6b:1d:57:4f:
         5b:f4:db:91:03:c1:51:a2:cd:ff:45:4a:9b:1e:a2:a1:3d:fa:
         dc:c5:63:d8:c1:1b:2a:3c:0c:7c:80:37:58:b6:ee:67:3f:e5:
         23:4a:8d:e6:ea:8e:39:9f:83:77:fb:19:79:6a:fe:78:27:2e:
         0d:35:7c:57:52:18:ec:e5:5b:45:22:6c:77:c8:20:41:57:07:
         c3:fa:24:e7:59:e7:57:c8:0d:e7:90:2a:9e:f4:ee:8d:25:fd:
         5b:59:49:67:41:7d:3a:90:c4:2b:67:63:ca:8b:22:57:b9:88:
         c8:33:38:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:52 2026 by rpki-client