This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
File:                     fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json)
Hash identifier:          sdbcdpWu63vHQF934rjh4eLosw47HKFo/DnzM2seoFY=
Subject key identifier:   1B:83:4D:8A:BD:53:45:4E:78:E4:A3:11:58:5C:E9:DB:9A:04:C2:3E
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Certificate issuer:       /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial:       019C43905DBA8F9ACF94718A42CA870E721C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 18:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:00 +0000
Files and hashes:         1: BMUh6giJ2NjrKl7YKu0d2xZtEZc.roa (hash: bjj+EiIZMtUCLQ7A849Yk7cP7W1t0jST2f2u4ZKj78g=)
                          2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: W8u8pSmc81CamnjFkpZ4vrDAWIVu5Hi/Gu3J0xJEaJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:5d:ba:8f:9a:cf:94:71:8a:42:ca:87:0e:72:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
        Validity
            Not Before: Feb  9 18:01:00 2026 GMT
            Not After : Feb 10 18:01:00 2026 GMT
        Subject: CN=1b834d8abd53454e78e4a311585ce9db9a04c23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:be:52:0b:98:9c:a0:7c:dd:f7:2f:62:31:99:
                    46:d5:81:c8:5f:30:fc:b9:ee:a2:0d:04:47:51:4c:
                    bb:16:e6:95:d2:cc:1a:d8:2c:f3:0d:23:90:68:83:
                    ce:c1:09:27:5e:27:d5:25:a3:00:99:2d:aa:3b:13:
                    41:bb:cb:5c:2f:cb:a5:b1:a5:7b:73:74:02:c1:0b:
                    64:42:b2:f9:81:41:c5:14:6e:89:ad:4c:8b:b0:4a:
                    6b:b3:b6:94:8c:d1:bd:94:8b:f7:fb:aa:b4:d6:90:
                    a1:5e:a8:7a:0d:16:a1:81:b0:b8:8d:f2:35:5a:89:
                    99:4a:0d:ed:7e:5b:3d:d5:22:d5:93:2f:55:80:3f:
                    b1:59:85:7b:e0:f9:29:96:90:a9:64:3e:64:5e:c3:
                    c5:d0:fe:49:64:4f:c3:e1:d2:bb:04:9a:7c:6a:92:
                    1d:5e:c4:b4:0d:a3:d2:58:3f:0b:e9:37:3b:06:9a:
                    f1:a6:2f:8b:59:d5:07:51:83:11:e8:4c:20:56:2a:
                    29:15:13:8b:a3:b7:05:7c:ad:00:e5:70:16:be:15:
                    8b:d9:ef:b1:88:4e:5e:61:cd:99:bd:b2:83:6d:5c:
                    a8:b4:6f:ba:d7:2b:0f:00:a2:fa:ae:c7:2c:e9:72:
                    15:7c:83:09:4f:7a:a1:49:24:e6:94:3a:58:d1:c3:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:83:4D:8A:BD:53:45:4E:78:E4:A3:11:58:5C:E9:DB:9A:04:C2:3E
            X509v3 Authority Key Identifier:
                keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:00:40:c2:82:82:e7:0b:20:87:ce:72:ea:83:82:90:d2:8f:
         e5:f3:52:07:65:c8:74:cb:2d:9b:46:45:46:45:d5:12:71:43:
         31:f3:37:04:77:87:9b:2d:04:97:92:df:b9:6d:98:7d:b7:b0:
         5e:f2:3c:54:74:3c:05:d5:e6:59:25:0d:63:57:90:01:fb:de:
         d9:5b:db:57:4c:fb:b4:0b:1a:52:c0:1a:82:de:5a:8f:89:33:
         08:2d:c9:a2:c5:8f:39:65:13:df:ab:b0:4e:98:a7:51:0d:f8:
         da:77:ed:91:c8:87:8e:68:d4:ba:ad:4b:b0:ae:00:e5:12:59:
         52:3e:38:80:f0:df:8e:f0:66:48:c1:5f:4a:2d:6e:46:53:9d:
         79:60:20:02:cf:30:25:b4:ca:57:c3:27:e8:0c:46:2f:81:2c:
         cd:1f:c7:e4:15:ee:ed:96:57:ef:a5:de:57:fb:51:7a:e0:2b:
         bd:fd:6b:9d:10:bf:c1:c6:3e:ef:b7:72:fe:7a:aa:77:e0:92:
         c7:60:ac:13:f1:a1:a1:5a:0d:34:5b:34:43:18:63:f0:50:29:
         7c:5a:94:f5:9a:de:54:18:02:a3:da:64:cf:3e:51:da:c7:5d:
         3e:84:9b:4b:5f:80:56:05:ee:09:bf:54:0b:df:e2:1e:51:09:
         e2:03:3f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:01 2026 by rpki-client