This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
File:                     _PU0Avp2-gY3bN6mvNOV4YAHnbc.mft (raw, json)
Hash identifier:          5yq++6e3tyoRYauyrrfGQphSh6TbFZcvnn0mEZ3bQd0=
Subject key identifier:   15:1F:8D:F6:E5:C8:6B:8C:54:9F:15:B1:B1:BC:B1:AE:47:3E:F8:46
Authority key identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
Certificate issuer:       /CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Certificate serial:       019C43C694880E465DE92442576316547FAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
Manifest number:          1520
Signing time:             Mon 09 Feb 2026 19:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:13 +0000
Files and hashes:         1: CAzUJBJl_S6fY4g8OpP_PRPQJAc.roa (hash: 6YZqZyeQI2OCFKYEz3xohlsoJMTAW7st+b+x7M/6aO8=)
                          2: _PU0Avp2-gY3bN6mvNOV4YAHnbc.crl (hash: mT3GrXzkfPzeWg0fZCs1vcIpc/dYw5Br1QMWhdEehSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:94:88:0e:46:5d:e9:24:42:57:63:16:54:7f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf53402fa76fa06376cdea6bcd395e180079db7
        Validity
            Not Before: Feb  9 19:00:13 2026 GMT
            Not After : Feb 10 19:00:13 2026 GMT
        Subject: CN=151f8df6e5c86b8c549f15b1b1bcb1ae473ef846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:08:d5:72:7d:38:98:15:54:14:61:01:cd:
                    1e:bb:57:7e:f3:4d:17:74:43:70:b8:1f:53:c9:ad:
                    a0:35:5b:de:0a:43:43:e5:b0:88:5e:2d:ab:1c:1c:
                    97:09:f0:39:22:22:a1:4b:43:e0:82:b7:cc:b2:4c:
                    91:8c:c6:99:20:ec:77:3c:d3:46:54:4c:df:9c:ff:
                    6a:1c:36:6b:b3:1d:05:ae:92:b9:3d:68:9d:e5:0c:
                    b5:08:a9:bf:3d:fc:d7:87:9d:02:14:8b:55:ee:eb:
                    e7:c0:c6:d0:d7:c2:78:e9:9b:f2:6e:ae:fe:68:8e:
                    de:23:82:68:02:37:1a:ff:66:e7:4b:26:1a:ce:19:
                    6c:15:bf:b5:9b:5e:ec:9d:fd:d8:c1:c8:9a:61:73:
                    d3:b8:57:e1:bb:7b:90:84:1a:c7:d6:d5:47:7b:a6:
                    2c:2f:aa:62:18:2e:ca:be:73:10:c4:bd:f9:2f:8d:
                    e2:e6:bc:7b:85:44:3d:12:56:57:d2:82:2a:52:c0:
                    36:43:3c:e1:76:4b:22:84:5b:6b:55:34:ed:77:46:
                    8c:a2:63:b4:35:f3:94:a4:e7:be:59:98:b1:d4:dc:
                    31:a3:0b:0a:73:c9:ed:2e:b0:c4:0c:e8:d2:0d:05:
                    12:90:67:84:03:f6:c6:4a:4d:61:3f:7e:1f:ed:ae:
                    0d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1F:8D:F6:E5:C8:6B:8C:54:9F:15:B1:B1:BC:B1:AE:47:3E:F8:46
            X509v3 Authority Key Identifier:
                keyid:FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2c:fc:6a:d6:df:32:c9:d9:a9:0f:b1:f3:66:eb:e0:c5:02:
         5a:bc:84:93:25:9d:72:3d:46:a2:41:80:63:f4:18:65:8f:56:
         f6:14:3e:f8:2b:db:2d:6d:eb:73:06:53:2b:6a:dd:6f:af:f0:
         00:8c:14:0d:61:9b:1b:30:d5:66:6c:ec:ec:78:ac:50:40:d7:
         c6:6a:83:98:66:f2:89:a0:46:05:bc:9d:87:95:3c:e4:fe:4a:
         bf:ac:57:2a:56:73:d8:ff:88:75:bd:17:2b:72:12:d2:e2:de:
         57:34:bb:b7:ef:4a:2f:81:ab:5d:3d:35:38:eb:9c:95:65:2e:
         75:9b:c1:7d:fc:d0:f1:df:fa:cb:18:1d:18:b9:99:37:09:c5:
         01:ee:19:c3:8b:80:00:65:90:db:e9:34:c9:27:f6:5e:7e:3e:
         95:81:d6:3b:79:28:14:6a:51:a4:6b:6d:fb:80:f6:7d:8f:50:
         4e:80:f8:49:21:c2:8c:35:93:9e:e1:04:1d:d8:41:2d:29:ea:
         ba:82:cb:7f:0e:54:50:7c:79:57:2f:c2:80:47:de:3d:59:39:
         80:10:60:8a:f6:62:3c:b6:23:b2:01:3c:af:25:93:e4:c6:eb:
         7d:9e:f5:70:b5:3f:d0:24:26:25:b1:7e:54:c7:94:f5:14:16:
         9c:9b:a1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:08 2026 by rpki-client