This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
File:                     FTtGcCg5p5W6uo2NFezcymN-M2w.mft (raw, json)
Hash identifier:          ji7Rf93ecJCQIYCmPt1T08OOoXkWeOmgH1IQ30DzC8M=
Subject key identifier:   89:7B:11:70:46:C0:CD:1C:A2:40:57:79:E5:61:6E:17:D9:E1:28:8A
Authority key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
Certificate issuer:       /CN=153b46702839a795baba8d8d15ecdcca637e336c
Certificate serial:       019C4323008B2C428D262C620F07D7DCF157
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 16:01:33 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:33 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:33 +0000
Files and hashes:         1: 60Yzg5ovYbhNZtsG87V10o4lft0.roa (hash: pwf3Cr849YIF4wTPFp3jPWoUW71SDRP921dWjmbB0ls=)
                          2: FTtGcCg5p5W6uo2NFezcymN-M2w.crl (hash: zYLQEbX/gSJ4cS/bXyAn4Jb8BGUNlOxPoYKkjoedF/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:23:00:8b:2c:42:8d:26:2c:62:0f:07:d7:dc:f1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153b46702839a795baba8d8d15ecdcca637e336c
        Validity
            Not Before: Feb  9 16:01:33 2026 GMT
            Not After : Feb 10 16:01:33 2026 GMT
        Subject: CN=897b117046c0cd1ca2405779e5616e17d9e1288a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:cc:93:74:b9:c4:a0:76:e4:de:46:bd:12:
                    de:0e:63:6d:3d:61:43:10:aa:43:93:f3:45:e3:03:
                    30:03:d5:fe:62:ae:2b:0c:89:f2:ac:20:68:1c:21:
                    73:ba:a8:b1:e4:69:73:87:17:1c:54:45:2e:2b:ad:
                    97:10:aa:00:43:af:5e:f0:d1:8d:3b:60:98:38:4f:
                    b8:f5:21:5b:81:9b:5e:06:c3:be:bf:1d:81:dc:81:
                    97:c2:17:67:10:48:b7:c9:45:ad:16:46:d0:12:7f:
                    2b:d7:64:02:48:ec:c4:92:4c:f9:9b:e6:db:76:44:
                    75:5d:f2:68:49:18:9f:97:e6:a4:25:64:69:87:1b:
                    85:7d:30:9f:fb:f7:cc:21:78:78:d1:95:9c:9b:d1:
                    68:ae:39:a8:22:47:9c:5d:e7:e5:f4:d5:08:c9:fa:
                    1a:07:22:13:7a:5e:72:75:f3:3c:ca:96:5b:ee:df:
                    95:6d:42:aa:23:77:06:f8:40:49:a5:c3:14:3c:17:
                    63:cb:04:1a:76:b9:8d:9b:a0:e4:54:23:79:42:8c:
                    2e:9d:15:48:93:9e:61:50:e7:77:be:16:ab:9d:d0:
                    eb:12:89:3e:7d:7b:e5:8f:9d:e7:74:01:a6:12:18:
                    73:ab:7a:0b:6f:f3:1b:bd:72:08:43:c3:c5:6d:66:
                    fc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7B:11:70:46:C0:CD:1C:A2:40:57:79:E5:61:6E:17:D9:E1:28:8A
            X509v3 Authority Key Identifier:
                keyid:15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e5:d5:a3:64:2b:3c:75:2b:aa:f8:bb:2b:85:4d:ed:da:dc:
         76:cb:99:27:16:d8:ae:53:24:96:60:0b:80:5e:14:ed:9e:c7:
         8d:10:03:2f:d9:27:0f:c4:aa:01:eb:46:9a:96:2c:34:b4:42:
         cb:37:0c:84:44:3e:b1:1e:f7:6e:e8:8a:14:75:7c:f2:cc:fe:
         34:8f:79:06:f6:ba:8a:19:73:db:a8:ea:b5:d5:9d:35:4b:04:
         1d:b7:88:01:7b:ae:ac:09:12:4d:86:fb:e0:06:b3:25:db:fa:
         88:d6:e7:59:ae:a0:fd:b9:7e:e2:6b:e7:4a:2e:82:c2:13:cd:
         d1:7a:d4:1f:ae:36:3a:dd:23:b2:97:6f:85:08:fc:d3:a2:c0:
         22:df:7d:ed:22:bf:37:b4:ee:67:ce:fc:bc:6e:96:49:02:f3:
         a5:43:3a:19:cf:b6:73:83:32:37:b7:78:c6:a5:9f:ed:95:0c:
         84:ef:e3:34:34:da:7b:61:82:89:bf:d8:ab:d9:9b:cb:80:59:
         39:3d:63:8c:c7:fd:ef:13:53:fc:cd:54:b6:22:91:81:bb:ba:
         f7:29:a7:a1:be:85:d9:04:9e:ba:eb:a4:de:d3:80:6e:d6:11:
         c5:ad:21:aa:a6:fa:22:7f:e0:b2:e1:38:69:c9:ea:95:7d:7b:
         85:1f:41:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIwCLLEKNJixiDwfX3PFXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2I0NjcwMjgzOWE3OTViYWJhOGQ4ZDE1ZWNkY2NhNjM3
ZTMzNmMwHhcNMjYwMjA5MTYwMTMzWhcNMjYwMjEwMTYwMTMzWjAzMTEwLwYDVQQD
Eyg4OTdiMTE3MDQ2YzBjZDFjYTI0MDU3NzllNTYxNmUxN2Q5ZTEyODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5DMk3S5xKB25N5GvRLeDmNtPWFD
EKpDk/NF4wMwA9X+Yq4rDInyrCBoHCFzuqix5GlzhxccVEUuK62XEKoAQ69e8NGN
O2CYOE+49SFbgZteBsO+vx2B3IGXwhdnEEi3yUWtFkbQEn8r12QCSOzEkkz5m+bb
dkR1XfJoSRifl+akJWRphxuFfTCf+/fMIXh40ZWcm9ForjmoIkecXefl9NUIyfoa
ByITel5ydfM8ypZb7t+VbUKqI3cG+EBJpcMUPBdjywQadrmNm6DkVCN5QowunRVI
k55hUOd3vharndDrEok+fXvlj53ndAGmEhhzq3oLb/MbvXIIQ8PFbWb8SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIl7EXBGwM0cokBXeeVhbhfZ4SiKMB8GA1UdIwQY
MBaAFBU7RnAoOaeVurqNjRXs3MpjfjNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlR0R2NDZzVwNVc2dW8yTkZlemN5bU4tTTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNTZkN2YtMWI3OC00NDUzLTgxZTct
YmE1NjM3OGE2NDc2LzEvRlR0R2NDZzVwNVc2dW8yTkZlemN5bU4tTTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNTZkN2YtMWI3OC00NDUzLTgxZTctYmE1NjM3OGE2NDc2
LzEvRlR0R2NDZzVwNVc2dW8yTkZlemN5bU4tTTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOXVo2Qr
PHUrqvi7K4VN7drcdsuZJxbYrlMklmALgF4U7Z7HjRADL9knD8SqAetGmpYsNLRC
yzcMhEQ+sR73buiKFHV88sz+NI95Bva6ihlz26jqtdWdNUsEHbeIAXuurAkSTYb7
4AazJdv6iNbnWa6g/bl+4mvnSi6CwhPN0XrUH642Ot0jspdvhQj806LAIt997SK/
N7TuZ878vG6WSQLzpUM6Gc+2c4MyN7d4xqWf7ZUMhO/jNDTae2GCib/Yq9mby4BZ
OT1jjMf97xNT/M1UtiKRgbu69ymnob6F2QSeuuuk3tOAbtYRxa0hqqb6In/gsuE4
acnqlX17hR9B8A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:48 2026 by rpki-client