This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
File:                     fvh727KV4chetLDjVmFTwiGEX4E.mft (raw, json)
Hash identifier:          yAoBJchomjF2a9THSGzhOwDo80PMByLxS6Pkpx14EHU=
Subject key identifier:   D0:91:32:F9:04:B7:3A:84:C4:A9:0C:FB:02:DC:BF:C4:98:D8:20:F5
Authority key identifier: 7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
Certificate issuer:       /CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Certificate serial:       019C427D4FBD6179E3F16454ED6CA7C586EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
Manifest number:          0358
Signing time:             Mon 09 Feb 2026 13:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:34 +0000
Files and hashes:         1: 3rus813YuNoFCPm5gVNfCetKB0o.roa (hash: 2Psn64fFe1lFh4gbe2ww6CEoWYkZWI81wssdO4TcKTk=)
                          2: fvh727KV4chetLDjVmFTwiGEX4E.crl (hash: 91Uwj0J+NvZVNYN20j1O6enBbQRouh/Utdz1gs+7wIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:4f:bd:61:79:e3:f1:64:54:ed:6c:a7:c5:86:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
        Validity
            Not Before: Feb  9 13:00:34 2026 GMT
            Not After : Feb 10 13:00:34 2026 GMT
        Subject: CN=d09132f904b73a84c4a90cfb02dcbfc498d820f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:3e:84:4a:77:ad:e0:69:91:e1:4b:65:d1:
                    ac:9c:6a:2a:5d:71:ce:5a:ae:26:93:82:ec:64:f5:
                    b4:8c:ee:74:98:8d:0e:c3:8b:8c:b9:e2:bd:3c:3f:
                    ca:05:01:3e:13:fc:69:4b:be:4e:66:c6:98:b2:5e:
                    3e:aa:11:80:d1:4f:f2:db:a2:eb:5d:ac:e0:68:84:
                    43:f0:3b:d1:ee:7e:43:ef:83:20:df:3e:4a:69:00:
                    c2:36:cc:63:b0:59:19:5f:d4:8c:f1:b2:f4:19:89:
                    e5:03:b2:da:42:18:df:87:53:f5:ec:39:1f:cf:d4:
                    5e:52:68:a3:9c:40:89:47:9c:cb:5d:38:a1:6b:ba:
                    da:33:c9:8b:45:2c:34:b5:d7:99:22:be:5d:27:29:
                    83:73:81:fe:7b:f9:de:af:3d:e8:16:44:75:bf:0a:
                    14:88:12:56:cb:ff:39:cc:15:01:03:16:d6:cc:be:
                    a9:20:1f:f4:5a:11:5d:bc:95:4e:a0:10:98:47:df:
                    3d:5c:f8:42:0b:43:60:e9:ee:82:92:6e:ed:24:5d:
                    3e:df:c9:30:34:a1:62:4b:e4:44:c3:0f:1a:7f:ed:
                    0c:fa:ba:98:24:ee:0e:bc:dd:3e:4f:f0:2d:dc:7f:
                    c8:2a:21:f7:f2:0b:8c:b3:27:37:ac:c4:28:ee:9f:
                    61:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:91:32:F9:04:B7:3A:84:C4:A9:0C:FB:02:DC:BF:C4:98:D8:20:F5
            X509v3 Authority Key Identifier:
                keyid:7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:3c:b9:26:43:62:42:44:d2:c6:0c:6e:bb:24:c2:4d:ab:5d:
         da:9c:89:a8:18:66:9a:34:18:14:e2:19:b9:57:66:81:59:33:
         d5:01:1a:1a:f8:30:94:d2:52:f3:51:52:27:78:ff:53:75:55:
         59:31:fd:b1:48:ff:39:a1:ba:16:36:25:33:e7:12:9b:e8:aa:
         01:12:93:f8:f5:ea:07:f6:fc:f7:1b:3e:b8:08:0e:3a:0e:71:
         70:d4:3d:7d:9d:ec:ed:fb:e8:5e:75:62:82:be:b4:60:a5:36:
         e9:41:fa:60:ed:11:c4:b5:b8:f9:60:05:4b:aa:d5:8a:38:6f:
         6d:21:3f:7a:50:fb:3a:b7:bf:f9:f4:20:fd:7a:76:2d:b0:ef:
         99:17:61:5c:45:2f:7e:8c:e0:73:51:f4:d0:97:bf:69:ec:66:
         a5:f5:88:d7:95:1d:a3:40:d3:61:59:34:00:00:3a:70:d3:c2:
         a7:a8:ba:c2:66:08:d6:bc:dc:63:ab:8f:39:6a:57:d4:ac:ed:
         09:e4:21:27:ff:3c:31:ce:57:1c:ae:29:bb:57:c2:44:2d:8b:
         0a:3e:3d:3d:39:b0:64:ca:9c:9d:2e:1e:b7:98:ae:a0:cd:ed:
         2f:71:9f:44:84:3e:4f:28:6e:5b:46:c7:e0:93:a4:03:1c:d0:
         dd:a4:3d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:07 2026 by rpki-client