This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
File:                     FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft (raw, json)
Hash identifier:          ysrEfEZ9fSNpQ6PGFsU5piQqzZvTOwFdkXriRSTxiTM=
Subject key identifier:   15:9A:5D:6D:34:A4:2A:BE:5D:25:37:74:1E:12:B8:C2:E2:2A:8A:BB
Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
Certificate issuer:       /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Certificate serial:       019C4246A2D9B60DEA7C4882CD07764527D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
Manifest number:          05BC
Signing time:             Mon 09 Feb 2026 12:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:51 +0000
Files and hashes:         1: 5KwTCXGaEmxfineap3j8xC_SkiM.roa (hash: iGdOA9kuMVNiObXLidash5z/PzOjRgRSWtuN684ej3Q=)
                          2: FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl (hash: QkJT6OMnZi5KT+l3Vae+fFYDPGWV4EtR5GT+dbPce80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:a2:d9:b6:0d:ea:7c:48:82:cd:07:76:45:27:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
        Validity
            Not Before: Feb  9 12:00:51 2026 GMT
            Not After : Feb 10 12:00:51 2026 GMT
        Subject: CN=159a5d6d34a42abe5d2537741e12b8c2e22a8abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:fc:61:10:71:9c:90:ed:da:4a:4e:46:46:
                    fe:6a:98:b1:92:c4:7e:a5:ad:ed:78:67:fb:22:ec:
                    16:57:42:1f:5a:c4:56:c4:75:4f:9a:ad:5e:48:f4:
                    d9:bb:ec:8a:c8:7f:c1:13:74:8f:3b:bb:b7:fd:cb:
                    55:35:bb:18:cc:ec:9d:84:3c:60:77:ad:31:71:c9:
                    fc:34:eb:9c:cf:15:17:78:2a:1c:ff:de:8a:c6:4b:
                    30:49:a3:dc:12:9a:dc:f6:d4:db:40:1f:24:76:89:
                    39:b2:10:e8:64:f8:ef:b9:e2:44:23:7e:37:f6:55:
                    e9:e4:a9:68:9b:c0:e5:26:29:0c:21:0a:2c:94:f9:
                    ac:3a:d4:b8:a9:d9:a0:df:20:5d:f0:df:97:47:2e:
                    71:7c:fe:de:56:41:ff:5d:4a:a7:30:a9:ca:a3:31:
                    11:77:f4:a0:f9:4d:45:1f:75:12:c2:e8:f9:dc:ca:
                    09:d7:85:26:41:8f:eb:8e:8c:45:a1:69:a0:52:f6:
                    26:54:3f:a3:74:47:1f:a8:e4:17:72:f8:72:4b:bc:
                    b1:e8:7e:f5:81:d9:c0:2e:7b:ab:e2:75:0e:68:ec:
                    59:81:7a:cf:d8:3b:92:aa:6e:c7:e5:7f:bb:36:eb:
                    f3:28:e3:eb:2b:35:64:1c:89:1c:0e:b1:31:7a:76:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9A:5D:6D:34:A4:2A:BE:5D:25:37:74:1E:12:B8:C2:E2:2A:8A:BB
            X509v3 Authority Key Identifier:
                keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c6:69:39:1c:89:13:9b:c9:fc:98:12:fb:61:30:b6:ba:f8:
         24:3a:b3:66:89:cc:df:4f:49:5f:25:cb:01:73:1c:2f:91:83:
         c3:5e:ea:46:6d:e1:9a:b2:5b:d5:2b:d9:17:72:8d:83:df:6a:
         e8:d9:fd:27:8e:ea:90:40:d4:76:29:0d:86:ee:ce:55:f8:bb:
         e2:b6:a1:50:e0:3d:8f:14:61:79:67:a5:0b:63:87:6e:13:0d:
         f8:a0:30:a4:18:57:a0:09:6c:d8:65:4e:c9:a2:4f:f1:22:2a:
         56:a5:1a:41:f2:0b:ff:4c:dd:a7:9c:22:55:67:46:e0:24:d3:
         9b:47:79:0c:56:b0:b6:8e:8f:bb:72:73:b7:db:d0:ee:a6:15:
         27:b2:39:89:d5:ac:76:aa:8d:5d:ae:37:c9:e8:80:b6:b5:7f:
         f4:b3:3e:cc:e0:f0:cd:24:83:4a:14:c8:97:03:0c:29:9c:83:
         c6:c3:fa:3a:f0:9d:67:78:a9:19:07:7c:e6:bf:36:42:5a:44:
         14:68:42:05:46:2b:e6:56:6c:ac:e4:fc:cd:69:2e:70:b8:1c:
         8a:22:a1:3e:bd:5f:41:6a:e9:2c:47:65:68:7f:7f:35:47:c8:
         54:79:4e:96:14:ac:90:cd:9f:c0:b9:5b:1f:81:3a:72:bc:7f:
         f2:92:c4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:00 2026 by rpki-client