This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
File:                     Fzn5ZM1In80lALN2gdWEedVTyKs.mft (raw, json)
Hash identifier:          P++jDrI5CyTcfDdzwXs2QT5d4vvJGy5jK41cgm4vToU=
Subject key identifier:   91:0E:38:37:6B:57:B2:9D:05:61:F3:50:97:1A:18:67:3F:59:E0:A8
Authority key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
Certificate issuer:       /CN=1739f964cd489fcd2500b37681d58479d553c8ab
Certificate serial:       019C427E0F567996A31BEB9ABF48F5ECA00A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
Manifest number:          12AE
Signing time:             Mon 09 Feb 2026 13:01:23 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:23 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:23 +0000
Files and hashes:         1: Fzn5ZM1In80lALN2gdWEedVTyKs.crl (hash: QI8UE5VVCrcHfune2xEBlp7oWZwuy5R9drQHgE9s3hU=)
                          2: gYLvy5DjMihQxbK3CpNYolCJCbs.roa (hash: nk0QPIHhBJ+tkBFjYJBMoGr2Na3j2yW9OuuUU/oPTZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:0f:56:79:96:a3:1b:eb:9a:bf:48:f5:ec:a0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1739f964cd489fcd2500b37681d58479d553c8ab
        Validity
            Not Before: Feb  9 13:01:23 2026 GMT
            Not After : Feb 10 13:01:23 2026 GMT
        Subject: CN=910e38376b57b29d0561f350971a18673f59e0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ae:3e:75:2d:6d:07:3c:d6:a4:c4:f3:12:54:
                    85:3e:c7:e0:2a:c8:41:85:54:6d:f2:df:0a:35:ee:
                    82:6f:50:24:85:ca:01:ae:25:fe:9f:78:15:a3:b3:
                    58:c7:e5:72:4f:9c:3b:ff:66:17:b6:da:34:15:b9:
                    31:b0:7a:41:12:68:be:68:24:85:5a:e6:65:fd:32:
                    cb:3b:75:c6:18:09:b4:23:82:f5:f7:35:e4:71:91:
                    fc:14:0c:01:e7:64:76:a5:8a:b2:1f:35:a8:df:a6:
                    14:60:03:81:6d:14:f6:80:72:83:d7:06:3a:9e:47:
                    8a:dc:a0:e9:f0:4c:6a:e2:ac:56:08:e7:ce:8f:d7:
                    fb:f7:dd:94:0b:c4:69:c7:92:d9:85:46:2c:f8:40:
                    28:e1:7e:45:c0:86:6a:3b:d1:22:7e:e6:22:60:27:
                    35:84:18:e7:e5:19:9c:0e:7d:57:47:5f:1e:dc:d2:
                    bf:ce:64:a8:6c:a5:00:5c:8b:88:7b:1c:a4:bf:c2:
                    39:e1:ee:e2:d5:70:3b:a3:d3:a6:41:86:e5:71:78:
                    78:d9:a2:3c:e6:08:cc:01:54:d4:89:02:ca:7e:6d:
                    3a:70:77:a9:cb:e5:0e:e2:60:c9:ff:ef:77:26:28:
                    ef:e6:42:bd:1f:18:16:fd:6b:5f:17:b5:27:0e:ae:
                    22:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0E:38:37:6B:57:B2:9D:05:61:F3:50:97:1A:18:67:3F:59:E0:A8
            X509v3 Authority Key Identifier:
                keyid:17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0d:f5:ab:ee:87:3c:9e:44:1d:08:5d:c7:fb:7a:1f:b4:f9:
         ae:d6:cf:9a:fb:59:ce:fb:53:9c:5a:76:0c:5f:be:09:a0:38:
         0e:56:19:c5:8f:d7:78:18:4d:1e:ad:f3:45:14:ad:e6:f9:b4:
         d9:64:cb:81:b4:c1:c7:4b:20:fc:8f:b2:05:de:d4:5f:96:45:
         f1:bf:dd:56:5f:37:89:7c:8f:52:74:b1:4f:59:be:5a:c1:ba:
         c5:5f:8a:f9:ad:fc:e3:83:2b:36:11:6b:0c:93:e3:a4:38:a9:
         cb:5d:51:b3:77:3c:4d:35:5e:68:99:d3:b7:79:c5:c9:53:39:
         d7:ab:21:d8:18:b5:5f:0e:3a:bc:c9:a9:0d:ff:8b:d6:01:cf:
         e2:ba:ff:fc:3d:22:21:49:c5:e9:40:44:1e:82:a3:81:a7:c4:
         1f:06:fc:7d:f3:01:12:57:b2:d9:80:a4:16:11:2c:01:fc:5d:
         4d:83:36:c4:d4:37:d8:c2:2e:80:6f:62:ed:e4:f9:5d:b5:f7:
         4f:58:65:01:f6:ed:b8:ed:d9:59:ef:df:a6:46:ea:fe:ed:06:
         04:0e:31:b8:5b:59:51:86:de:85:f8:9e:0c:7e:60:21:32:0a:
         fe:1b:cf:ce:0c:44:9b:2c:75:08:7e:eb:51:d0:64:36:4f:40:
         d9:7c:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:45 2026 by rpki-client