This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
File:                     FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json)
Hash identifier:          HIETdDuO87nUveqfDABu0LB/3l0SuDA4HDm0eLaxKxI=
Subject key identifier:   93:D7:06:C4:80:BC:D6:DA:11:5E:9A:87:40:28:8F:B2:8E:2C:82:DE
Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Certificate issuer:       /CN=153d757b77067befd9446694748ad2b04e97b38c
Certificate serial:       019C439006DCCE4DE84F1CA9DE0A75EE5558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 18:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:38 +0000
Files and hashes:         1: 2_PmjSq2ymAnVudAlocm7T1tmn4.roa (hash: QSuT7TExW9U0JzR64tb3XYLCTidPjZYgevzpEmIents=)
                          2: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: aCxLC0Y/TmiJ+r/Af8OLCALOEc0nMgYvXzJVNtBz9ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:06:dc:ce:4d:e8:4f:1c:a9:de:0a:75:ee:55:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c
        Validity
            Not Before: Feb  9 18:00:38 2026 GMT
            Not After : Feb 10 18:00:38 2026 GMT
        Subject: CN=93d706c480bcd6da115e9a8740288fb28e2c82de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:79:2f:75:8c:98:7d:14:2e:c0:85:9e:25:
                    23:10:92:1f:21:7d:85:b5:dd:24:64:c1:79:e7:ef:
                    8b:fc:de:50:85:b4:34:b2:c5:f1:62:3f:21:0f:75:
                    e2:7b:5f:00:b8:22:76:a5:b6:34:b2:16:c3:ee:d5:
                    cc:a2:a5:e5:43:48:1a:f5:36:87:f9:a4:b5:10:d6:
                    9c:cd:2f:84:1f:c8:a7:2d:a8:90:8a:e1:cf:68:71:
                    70:c2:0b:e0:75:04:02:a5:57:90:77:e9:c6:d1:51:
                    5b:90:9f:5e:29:f7:a7:66:23:94:7e:78:b3:68:42:
                    35:35:1f:b7:f4:28:3b:32:9e:49:12:b6:87:b0:a3:
                    47:51:75:8a:7e:b2:c2:51:f7:02:e0:80:1d:1d:df:
                    0a:88:e4:67:88:9f:4f:f1:f5:7d:ae:ae:7f:b2:ff:
                    c6:4a:16:92:18:57:55:01:b1:c9:bb:7e:1d:08:1d:
                    e1:c7:52:23:dc:39:0c:d8:d7:94:22:72:52:f0:91:
                    0d:61:18:07:3e:9e:2b:0d:2c:5e:c7:90:35:77:c8:
                    9b:a5:34:74:ea:2b:ac:7e:e7:5f:04:fe:09:9b:8f:
                    34:1c:03:fb:a5:65:13:c8:a1:84:c0:c6:fc:a5:a0:
                    1f:a0:a3:48:0b:c9:ff:aa:fd:27:df:6b:a7:4e:20:
                    39:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D7:06:C4:80:BC:D6:DA:11:5E:9A:87:40:28:8F:B2:8E:2C:82:DE
            X509v3 Authority Key Identifier:
                keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b4:79:24:2e:33:91:8c:4f:80:8d:df:c6:96:99:7c:66:4f:
         50:a7:bb:a0:5e:dc:92:e7:56:c4:09:a5:bb:41:0d:29:00:23:
         47:e4:d1:8e:63:70:4d:04:4a:8c:0c:91:91:17:b5:83:59:f5:
         2c:bf:cf:3c:cb:3d:a4:f1:0b:bd:dd:45:4a:82:f0:e9:cb:de:
         d6:9f:35:8e:88:70:59:96:84:4c:5f:cd:eb:32:c0:af:74:18:
         f8:ed:9e:9b:98:c0:d9:47:d3:9c:c6:69:b2:c9:90:dc:50:f0:
         e0:eb:90:7e:ac:93:03:1c:b0:0d:47:64:81:e0:d9:3d:79:79:
         1a:70:53:87:5b:50:3e:ed:96:27:7d:7e:e0:21:16:bf:db:7e:
         64:77:73:18:0a:56:df:77:9b:14:ae:07:f2:fc:93:dd:53:d2:
         5d:ec:ff:cc:e3:01:d8:65:36:f0:3c:27:4b:5b:f3:b1:22:7a:
         e6:c1:e3:8d:d3:25:cb:a1:21:75:ad:62:96:28:a0:02:06:a7:
         69:eb:62:31:e0:2c:6d:92:0c:fb:8d:7a:10:b1:b5:7a:56:54:
         bf:64:58:3a:27:fc:9f:d1:33:b9:12:0c:41:26:0c:1f:b8:1b:
         99:77:c4:68:3e:ac:3e:4a:5d:0a:e7:d5:48:b4:45:d8:a6:a8:
         a4:ab:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:53:21 2026 by rpki-client