This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File:                     sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier:          VeHlaaifwQI1Lmr0/5HIDkKrM8wRzeobNSzZnLRrgts=
Subject key identifier:   3C:81:6F:19:D8:98:55:15:0D:B2:C4:9C:BE:1E:F1:24:93:3F:CC:38
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer:       /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial:       019C42B41DC5B2BEDD0CB1898E3892E44063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number:          15CB
Signing time:             Mon 09 Feb 2026 14:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:26 +0000
Files and hashes:         1: RSgAiFfFUDOLRRmOCmbncd53Jto.roa (hash: R29MYZiBKSn2Fy47uX6Yiye7bvq2OW5L5W2duo3Eaes=)
                          2: SwUYDEAlxO6M5eWOj4TfdQ0JQ2c.roa (hash: kp4VVBnJ9x9RoYER3ShnXFsDjH+5JSgU9IM02fkmGYw=)
                          3: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: KHnXhZmL/OwSNvcIYnqVOo6Wv+yYk/HFlX08vIw/VQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:1d:c5:b2:be:dd:0c:b1:89:8e:38:92:e4:40:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
        Validity
            Not Before: Feb  9 14:00:26 2026 GMT
            Not After : Feb 10 14:00:26 2026 GMT
        Subject: CN=3c816f19d89855150db2c49cbe1ef124933fcc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:bc:b0:69:d2:47:59:ea:7f:73:6b:bc:d8:
                    c2:8d:a1:0b:24:33:ae:a7:de:eb:04:f4:aa:d9:64:
                    b8:5a:8b:7e:7c:23:63:aa:1e:a9:86:6b:72:7e:e8:
                    9e:e4:d6:8e:67:33:8a:5e:74:ca:74:4a:6a:f9:bc:
                    2a:c6:c7:9f:e1:28:ee:90:0e:9a:cb:27:7d:25:69:
                    b5:6e:e6:d1:f9:eb:94:c3:52:45:4d:09:c3:b3:d1:
                    8c:ef:d8:9c:c3:ea:2c:67:c3:5c:62:b5:7d:7f:80:
                    d9:0a:6d:8e:7d:a0:7c:b7:86:fa:af:77:2a:a2:93:
                    52:96:4b:23:65:13:b7:c7:99:37:94:30:f6:cc:ca:
                    b8:ca:c4:d2:65:62:c7:7f:f0:6e:0a:9e:89:0e:b9:
                    a9:94:a8:4f:4a:ab:62:d7:94:cc:8a:93:4e:96:9f:
                    7a:be:cb:28:0f:20:ef:c1:5d:64:42:d4:18:91:9b:
                    63:bd:d5:de:3f:bc:34:d2:d6:01:69:c1:96:d0:cf:
                    f4:54:49:ec:ba:1b:d7:aa:b6:7b:a4:a1:86:35:e3:
                    61:c3:d3:8a:8b:ef:23:49:02:96:a7:6d:26:f1:66:
                    0e:8a:f1:54:39:0a:52:29:86:43:c4:f5:a2:d6:5b:
                    7a:d3:02:09:22:2c:26:82:80:91:05:4c:5a:bd:64:
                    92:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:81:6F:19:D8:98:55:15:0D:B2:C4:9C:BE:1E:F1:24:93:3F:CC:38
            X509v3 Authority Key Identifier:
                keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:fd:49:f1:46:56:18:c2:4f:35:15:4b:c8:d8:c6:20:89:03:
         f9:65:d1:68:91:36:6d:1b:61:21:f6:09:79:e4:a2:2e:97:70:
         f9:41:1e:88:26:4e:41:0c:35:58:75:88:5a:72:d4:1e:24:c1:
         03:ba:f6:73:96:36:67:f3:5f:22:6a:00:5a:c9:0d:7f:45:21:
         45:42:18:88:3c:38:9a:51:57:11:26:b2:68:db:b7:ce:11:0f:
         8f:d4:f7:86:52:09:6e:e0:bc:f5:7c:0b:6d:fe:e0:f8:38:50:
         da:20:bb:85:81:81:64:a8:46:d7:78:3f:9c:85:44:09:5a:ac:
         bd:cf:ad:49:c3:e0:b4:2b:f5:29:d3:c3:38:59:2b:9b:bf:25:
         9b:c0:ab:7e:b9:45:44:69:42:bf:a0:39:b6:6d:b4:21:a4:db:
         7b:80:f3:6c:b1:4d:58:91:8a:cc:01:ca:44:27:50:fa:8d:3c:
         a7:2c:bc:06:10:50:2e:03:2f:6d:f7:44:4e:80:74:91:c9:da:
         a8:70:02:b2:05:43:03:80:3f:9a:db:72:1e:57:9a:3a:9a:27:
         98:3e:84:98:03:b4:a4:17:31:e2:09:8d:b3:6c:0b:78:71:c7:
         27:0a:c1:17:ac:0a:d2:c7:16:d7:db:56:72:b9:6f:c3:d9:2f:
         53:be:4b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:51 2026 by rpki-client