This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File:                     fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier:          oezg3IkGcljtO8vleIaGYc5kuF21ImtbrtOjpS6H3Pw=
Subject key identifier:   47:75:C1:89:E3:E8:85:3F:23:2D:78:66:D8:A7:14:E7:5B:7D:12:5D
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer:       /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial:       019C439045C12A9A259A83222F54FB921A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number:          0C9B
Signing time:             Mon 09 Feb 2026 18:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:54 +0000
Files and hashes:         1: Yc6S2U-P88_n_iZTloXSN0V0Eao.roa (hash: AY1UxXU5qK5SakiZ4km0VoIyNHZTCKedI3Fo2P7nvNY=)
                          2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: snzj5+YlEfZtv7tkk7tFTSVxw7E5gnnRp8F85Byc2kE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:45:c1:2a:9a:25:9a:83:22:2f:54:fb:92:1a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
        Validity
            Not Before: Feb  9 18:00:54 2026 GMT
            Not After : Feb 10 18:00:54 2026 GMT
        Subject: CN=4775c189e3e8853f232d7866d8a714e75b7d125d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:a4:8c:ff:8f:fd:b6:f4:a0:1d:77:a5:45:
                    42:6a:e6:6a:dd:00:77:f4:76:99:32:97:54:04:ba:
                    6e:79:f4:22:d8:fd:cd:02:34:c9:50:45:64:36:0a:
                    0d:46:c5:61:04:32:3f:7a:90:ee:5f:64:f2:c4:95:
                    0d:4b:3a:35:e2:e2:6a:26:89:9a:02:de:c6:94:cf:
                    47:9a:ed:cd:6c:4d:29:80:8c:98:3b:ec:d5:ee:dc:
                    9b:8f:16:90:8b:e2:63:b0:c5:7a:21:4e:3d:2d:b4:
                    7f:5b:0f:7b:ad:20:aa:38:6a:25:a6:89:09:7d:11:
                    f8:c4:63:14:eb:4d:70:b4:e5:77:0d:0d:c2:ec:35:
                    da:a5:77:13:b8:af:ee:15:3b:9e:9e:d9:cf:59:dd:
                    33:a7:89:c1:f8:a3:4e:9a:69:c3:a0:3d:93:a2:32:
                    db:da:52:92:57:2f:6a:45:0c:92:65:58:83:cd:c4:
                    a0:2c:38:ba:e8:e5:a5:d4:fd:81:76:b6:ea:80:18:
                    43:57:87:9f:3f:a4:b2:70:fe:3f:96:17:84:3f:ad:
                    7f:c8:dc:0b:d4:e4:da:de:a0:0d:8e:15:d2:f1:71:
                    08:9c:b6:b0:e1:89:7c:2d:9c:d6:40:41:e3:c1:84:
                    2f:29:86:9a:6d:00:ef:82:b2:8d:93:3c:9c:39:4e:
                    14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:75:C1:89:E3:E8:85:3F:23:2D:78:66:D8:A7:14:E7:5B:7D:12:5D
            X509v3 Authority Key Identifier:
                keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:44:e0:7c:a4:07:f1:cf:96:b5:69:76:06:94:ac:1e:0a:eb:
         42:cf:8e:1d:7b:62:be:8a:c8:cb:03:75:d2:71:ed:f8:52:77:
         00:3a:5d:aa:2f:33:c8:1b:22:70:04:09:ac:22:bc:a8:bd:b7:
         4b:91:0b:2b:18:12:6d:35:bf:42:ce:28:57:b1:f3:01:be:57:
         fa:e8:19:77:94:ea:22:e4:6d:cf:a0:e3:83:01:af:e3:5b:e0:
         7a:d4:d0:2a:95:38:31:18:69:15:a2:fb:6a:75:ed:37:2e:d4:
         10:da:43:9b:10:e5:3f:a7:cb:e3:7d:20:af:34:52:3a:ac:a0:
         19:db:f0:fe:cc:de:98:1a:66:e7:1d:6b:4b:32:d7:73:45:94:
         c7:68:c8:a9:49:21:a5:b2:a2:b4:b2:45:fd:05:4d:a4:17:30:
         28:82:46:5d:de:cf:fd:c3:33:ab:75:ab:5f:62:87:19:7d:ae:
         c7:0e:7c:31:5d:d0:ba:00:a5:9a:36:22:d0:3e:14:fd:48:e5:
         c6:c9:db:b8:f7:af:0e:d7:5f:07:8a:cf:75:90:6f:4d:6d:3d:
         a0:79:f8:ae:9f:73:0c:c7:80:9a:0c:12:e1:60:e5:01:53:a5:
         40:87:2d:6c:92:be:77:a2:70:fd:36:ae:8d:9b:e9:c8:f9:40:
         ed:f2:30:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:36 2026 by rpki-client