This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
File:                     _FlUn23SuDFEuIDCPwb7o7JdOYY.mft (raw, json)
Hash identifier:          TsirmqlTNyruipm+ioJ4/R1NA/o8J8VEoUOU8fg77r0=
Subject key identifier:   E3:B8:45:2A:F5:4F:2D:4B:70:65:5E:F0:C7:DA:37:56:D1:84:39:3E
Authority key identifier: FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
Certificate issuer:       /CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Certificate serial:       019C427D07BAEC52AE04CDEA01BCC1CF7F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
Manifest number:          120A
Signing time:             Mon 09 Feb 2026 13:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:16 +0000
Files and hashes:         1: _FlUn23SuDFEuIDCPwb7o7JdOYY.crl (hash: LkURhG6/aJFPD3IZYK57697zHzr9rIEzbRjoeMl4ZXg=)
                          2: o_T_HTHs0KSiz-VeTzvUEtH700c.roa (hash: j5lWUOt2iKu1wnonlrAU9TS/DtJ/+Bc/VySYwnhPo7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:07:ba:ec:52:ae:04:cd:ea:01:bc:c1:cf:7f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
        Validity
            Not Before: Feb  9 13:00:16 2026 GMT
            Not After : Feb 10 13:00:16 2026 GMT
        Subject: CN=e3b8452af54f2d4b70655ef0c7da3756d184393e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:76:8f:ea:f3:d9:f6:95:a0:9c:6c:8b:3d:8f:
                    5b:9e:fb:19:bc:c4:ad:76:b3:31:25:ea:d4:90:83:
                    45:7a:8c:4d:7a:5f:0b:c7:83:aa:5c:5e:e2:1a:81:
                    87:2a:0a:63:f6:20:12:b1:ae:7e:af:0a:ab:f4:8b:
                    cc:0a:80:89:e0:33:5f:dd:b5:08:42:d0:86:19:50:
                    43:c3:0c:46:c2:ce:68:d1:87:b1:59:b0:07:40:bf:
                    1f:b5:70:b8:ff:fa:ee:27:b3:33:e8:c9:c3:93:05:
                    5e:37:42:a0:5b:78:cc:33:5a:96:c1:11:42:ea:d8:
                    e3:c5:cd:8b:60:6c:70:86:53:0b:ef:c5:eb:ff:74:
                    c9:a8:75:c4:28:4f:41:7b:39:41:80:32:27:f0:2c:
                    dc:27:cd:27:4e:75:0d:52:63:a3:a4:29:70:e4:5e:
                    7b:0f:23:f2:93:45:d5:4c:44:e8:1a:7a:b6:fb:c2:
                    54:06:9d:65:13:bc:c7:92:ac:70:21:51:55:0d:6c:
                    1f:52:4b:60:93:6f:13:8c:d6:33:d1:10:8c:d6:2e:
                    5a:a0:c7:62:18:ba:0d:2a:95:e6:c6:13:a7:97:06:
                    8a:dd:9f:4a:0d:2d:78:48:84:bb:ea:48:3b:40:7d:
                    6f:9a:9f:70:56:f4:c8:d1:67:d0:5f:e7:c3:19:ef:
                    ea:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B8:45:2A:F5:4F:2D:4B:70:65:5E:F0:C7:DA:37:56:D1:84:39:3E
            X509v3 Authority Key Identifier:
                keyid:FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:49:82:36:8c:b5:c5:28:f6:cb:f6:cf:e1:70:0f:a6:00:f6:
         bf:29:fb:37:61:bf:e5:63:c5:2f:93:7f:7b:e2:eb:a3:30:a3:
         f3:29:b4:28:a8:1a:94:36:d9:22:a6:0e:a4:c8:e9:c3:23:2f:
         2e:d0:11:c5:89:f0:c0:25:1f:ad:8c:a0:ca:6d:c5:c6:37:e3:
         d3:8f:f0:77:fa:a5:f5:8e:b6:f9:11:f1:48:ca:ac:44:6e:3c:
         2c:81:56:e3:7d:03:8d:0c:74:25:d7:8f:3c:99:06:d7:b6:99:
         c4:cb:76:f9:9a:9e:03:28:1d:b3:e3:3c:0d:ed:47:bb:77:ae:
         00:5a:b2:9b:4f:d4:04:73:a2:43:83:69:58:5f:1e:58:6a:35:
         0d:eb:04:7d:22:83:b4:74:69:1e:db:42:f4:74:be:f6:66:f4:
         2d:7f:df:6b:10:9f:ec:c7:66:2c:72:a5:fe:9b:45:90:c0:68:
         ec:83:cf:56:87:e5:cd:74:85:92:08:12:56:5d:20:53:08:6b:
         40:fe:1d:52:56:72:46:9c:b5:38:ea:4c:6e:e7:7d:5c:2d:94:
         d8:b6:70:d0:45:64:5c:ee:5e:49:5c:a3:0c:65:5f:a3:22:5c:
         14:61:09:65:33:c0:83:aa:c2:b1:05:6b:9c:71:50:b5:9a:46:
         15:58:e5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:30 2026 by rpki-client