This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
File:                     F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft (raw, json)
Hash identifier:          qluve9N+jL9k0mi2wjt8AVsyK5iwAc7+cYjJ+y7L6cw=
Subject key identifier:   4C:8D:28:A5:F5:14:F2:7A:73:A1:06:BE:D4:ED:F8:34:88:86:75:A0
Authority key identifier: 17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
Certificate issuer:       /CN=17a16657a2497737ca03621cc668d20c762136d5
Certificate serial:       019C43FDD85B17753AF10447F96C8BD0570B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
Manifest number:          0FB2
Signing time:             Mon 09 Feb 2026 20:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:35 +0000
Files and hashes:         1: F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl (hash: MlKNLOoj7l0/CaEsz8oxd5u8G3SsTGnB0BPkHhw+9do=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:d8:5b:17:75:3a:f1:04:47:f9:6c:8b:d0:57:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a16657a2497737ca03621cc668d20c762136d5
        Validity
            Not Before: Feb  9 20:00:35 2026 GMT
            Not After : Feb 10 20:00:35 2026 GMT
        Subject: CN=4c8d28a5f514f27a73a106bed4edf834888675a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:f1:21:1d:f2:31:fc:cc:17:e8:be:3f:8f:
                    a5:be:ba:f3:85:b3:57:5d:a1:b5:cc:c7:75:aa:15:
                    a8:91:f9:60:f2:87:36:67:93:3a:4b:12:a4:a0:c4:
                    ae:0a:90:05:71:bb:e5:ea:45:23:11:de:59:19:86:
                    f2:7c:b8:cc:95:0f:2f:27:10:1e:75:ef:30:90:88:
                    05:12:42:b7:b0:02:99:88:10:14:c4:fe:2b:e1:9c:
                    73:92:e4:5f:a6:69:3e:73:9f:93:6e:c7:9e:21:a4:
                    f6:a8:4e:84:2d:c7:1b:2f:20:33:aa:85:4c:c3:ee:
                    b5:c2:ca:b6:71:d4:d1:b5:6d:92:f9:50:1d:3b:9d:
                    1d:17:bf:ee:19:29:3f:06:68:8c:00:94:e1:b4:d0:
                    f4:a1:c2:ee:bd:b7:bf:88:b8:b7:e1:ad:20:39:a5:
                    d9:3f:d6:5a:80:3f:15:b0:99:dc:66:c1:38:65:f8:
                    d4:2e:68:db:78:98:41:f3:ad:d5:a4:49:94:0a:99:
                    74:14:dc:15:3a:92:34:23:03:d7:24:78:a4:95:7c:
                    6b:db:1c:5b:7f:99:dd:4b:7f:74:40:17:07:27:79:
                    9c:26:a1:8f:16:48:b6:07:fa:98:93:1e:d3:b5:96:
                    fc:3a:cf:e5:37:0f:ce:8a:b6:f7:e7:2f:2f:1b:00:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8D:28:A5:F5:14:F2:7A:73:A1:06:BE:D4:ED:F8:34:88:86:75:A0
            X509v3 Authority Key Identifier:
                keyid:17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:74:8a:a8:ec:97:7c:5f:87:92:8e:72:f3:d4:42:e1:04:cd:
         70:30:44:00:58:03:fc:98:db:09:32:a5:28:5e:dd:73:dd:66:
         c7:c6:bf:8b:35:c7:ca:e7:ba:8e:53:66:6d:3e:ac:c5:52:f6:
         f1:7e:53:b8:b6:57:6a:ba:46:fe:75:a7:47:11:3b:9d:73:a8:
         a7:45:5a:f9:c3:58:b8:78:03:39:a7:dd:0f:e4:dc:a1:c0:52:
         0f:93:d2:6a:2f:35:fc:a2:db:c6:6b:fe:41:11:51:40:d9:12:
         02:19:25:9b:6c:b9:f2:74:5d:1e:59:e3:6e:60:9e:18:69:3a:
         0a:64:f3:ea:44:77:e1:4b:22:5d:fc:26:41:df:db:96:8e:50:
         a7:05:20:1c:4d:29:01:36:74:74:2b:39:4e:72:d4:4c:49:ca:
         af:da:6d:d4:6a:e3:4a:30:53:1d:3f:80:35:b8:02:53:54:75:
         da:48:4e:8e:98:32:04:1b:57:76:e6:b4:6f:ea:19:7d:24:87:
         f1:3f:5a:31:b0:4f:43:df:1e:e0:34:82:62:f0:3d:d9:d5:89:
         b7:e3:d3:bd:1b:13:37:b5:f0:ed:9f:eb:90:3e:42:12:26:cd:
         e2:eb:0c:92:fa:ed:39:65:2c:1f:58:7c:36:2b:a5:50:64:12:
         88:fa:d8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:44 2026 by rpki-client