This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
File:                     F2wVCakW_qd6H9QIipnQ5iLWTD8.mft (raw, json)
Hash identifier:          2oua6ky6xR9BNXMN1cw3PLue2khatdc3mVJurjVkHDY=
Subject key identifier:   9C:2B:A7:14:17:B5:92:1F:22:43:14:FB:BC:B9:AB:A5:A6:8E:02:BF
Authority key identifier: 17:6C:15:09:A9:16:FE:A7:7A:1F:D4:08:8A:99:D0:E6:22:D6:4C:3F
Certificate issuer:       /CN=176c1509a916fea77a1fd4088a99d0e622d64c3f
Certificate serial:       019C427D1B925DCC704ADBEB2FE322AE0386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
Manifest number:          0228
Signing time:             Mon 09 Feb 2026 13:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:21 +0000
Files and hashes:         1: F2wVCakW_qd6H9QIipnQ5iLWTD8.crl (hash: m0Hk91cZEU2YiZHr8zlmY6QpJd3USk/qybxRvT4yR5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:1b:92:5d:cc:70:4a:db:eb:2f:e3:22:ae:03:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176c1509a916fea77a1fd4088a99d0e622d64c3f
        Validity
            Not Before: Feb  9 13:00:21 2026 GMT
            Not After : Feb 10 13:00:21 2026 GMT
        Subject: CN=9c2ba71417b5921f224314fbbcb9aba5a68e02bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:6b:88:b0:86:43:52:f9:eb:fd:c3:09:61:
                    fe:e2:cf:3d:6f:87:a8:65:0b:90:6b:9b:3b:48:78:
                    31:1e:6c:9a:89:c3:36:5f:ee:8f:e6:bb:9f:8a:5a:
                    18:b9:94:f3:ef:88:8a:30:e2:a9:b9:90:bb:b6:fc:
                    9e:55:e3:06:fc:35:89:28:72:d2:27:32:ac:3a:fc:
                    7e:ba:4c:a2:5c:19:8e:ed:ff:96:35:17:fc:50:2b:
                    d3:c1:29:12:e9:2d:25:01:2d:b1:65:9f:ea:9a:b8:
                    21:df:0b:20:3a:2b:20:0d:84:b6:a0:9a:7c:6f:7e:
                    cc:f8:c7:7a:e0:eb:9b:ee:bc:59:7a:70:b9:87:b2:
                    59:17:6e:fb:dd:cd:7a:39:fc:65:4b:ac:93:f5:ab:
                    59:2f:bf:1c:b6:2a:b4:3a:f1:50:03:87:36:24:6f:
                    ce:1d:a6:da:1e:2f:6f:dd:6b:7e:ef:b1:58:92:0a:
                    19:85:7f:d6:34:32:48:55:1b:42:ff:92:9a:ad:1b:
                    45:5b:7b:e0:09:51:cd:40:47:27:6e:e2:60:a3:1c:
                    03:6e:40:b7:ff:0a:4d:11:ea:0a:5f:e7:25:ed:bf:
                    b1:4f:41:9d:f0:64:d5:d0:ac:43:3b:88:b0:d6:e3:
                    12:60:0d:97:63:cf:a5:5e:86:28:a8:91:05:fc:29:
                    b3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2B:A7:14:17:B5:92:1F:22:43:14:FB:BC:B9:AB:A5:A6:8E:02:BF
            X509v3 Authority Key Identifier:
                keyid:17:6C:15:09:A9:16:FE:A7:7A:1F:D4:08:8A:99:D0:E6:22:D6:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:cc:00:5f:18:4e:f9:f3:72:5e:14:a1:ed:a3:94:b2:4d:f7:
         54:3f:8d:01:b2:cf:08:54:4a:cb:48:68:1d:88:12:1d:66:db:
         a6:0e:a5:f7:57:e3:aa:42:66:cd:6b:b7:cd:b2:7f:b9:0c:d1:
         0f:20:80:fb:ae:c6:1d:1b:40:08:ca:d5:ab:ed:74:73:e0:63:
         f2:2b:df:e4:04:32:14:96:00:dc:7d:7d:05:d5:a2:74:2c:f7:
         12:f2:bb:88:eb:3f:f8:c2:7c:b3:c2:e8:7d:9b:5c:5b:34:8e:
         5b:d6:6a:14:4d:18:4f:c3:41:23:df:ff:0e:19:bd:2b:f4:ae:
         22:bc:7d:be:0a:b1:1f:ad:63:9e:59:93:38:94:00:67:7c:5b:
         d6:41:d3:f4:20:63:a1:9f:10:83:28:6d:38:d5:82:96:5f:b2:
         06:14:42:88:a3:a3:de:86:8e:2d:53:d8:67:28:6f:c6:2f:0a:
         4d:5e:e7:ef:7e:ff:ed:ca:a1:12:80:b1:ff:87:18:a3:2d:0b:
         d4:8b:bc:86:f6:83:23:97:54:41:ee:ca:f5:14:bd:34:61:3a:
         e2:47:88:8b:a1:f7:20:c5:cf:30:27:b9:03:a7:39:c3:ac:8d:
         7a:32:8c:4b:7b:80:61:45:35:8a:c0:4f:fc:d9:89:17:9a:5b:
         32:d6:31:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:33 2026 by rpki-client