This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File:                     FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier:          bbxvdbJPsxseZaemdO5awICQwz1zNBqIlca4etZKbaQ=
Subject key identifier:   E2:BA:79:F4:F4:E9:F9:CA:F4:6D:F4:74:02:A2:27:15:9E:70:B9:8D
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer:       /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial:       019C44A2A0B4B5CBCACD575C6729D458FBB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number:          1186
Signing time:             Mon 09 Feb 2026 23:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:34 +0000
Files and hashes:         1: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: 20F1grc49yy0xatqP8AQqUhUqyqA5v7Ld0ZCO59Lh44=)
                          2: ZYVhpFZbN06CUe59j1pMT24apfY.roa (hash: 9KVaBH7C5jrjUC4AJ6bt9vp9SMTJAC7tn9CsEVo1BYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:a0:b4:b5:cb:ca:cd:57:5c:67:29:d4:58:fb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
        Validity
            Not Before: Feb  9 23:00:34 2026 GMT
            Not After : Feb 10 23:00:34 2026 GMT
        Subject: CN=e2ba79f4f4e9f9caf46df47402a227159e70b98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:05:f4:29:e3:92:51:c7:58:07:cf:d6:89:
                    20:5c:40:93:98:6a:ff:95:9e:94:d6:06:7e:7f:cb:
                    58:cb:8a:77:5f:23:fd:45:6c:be:9b:34:34:84:61:
                    bf:9f:7e:91:2f:4e:3c:d6:aa:fe:6c:fc:d9:f9:0e:
                    83:ba:a9:5c:0f:4e:4b:b7:e0:f7:7e:7d:3d:dc:cd:
                    a7:c8:6a:74:5f:a9:f9:76:bb:4f:85:a9:e8:85:0b:
                    09:42:81:b0:8b:53:93:11:a3:1e:12:d0:4e:78:85:
                    cf:13:bc:7d:54:67:93:58:e8:cf:6e:3f:6d:51:89:
                    1a:40:7f:77:34:97:27:74:36:57:1d:cf:c7:a4:02:
                    de:d3:c2:cb:31:4f:ee:c9:b3:06:53:69:88:7f:37:
                    64:20:97:bd:6b:41:38:39:d5:cb:4b:50:bc:82:c5:
                    99:5b:ed:0c:05:b6:05:10:a6:70:f8:c9:f3:06:52:
                    da:52:1d:f6:14:41:89:3f:f5:98:3d:33:bc:2c:a7:
                    35:bf:97:ee:d4:c2:f7:5e:90:e1:ab:7a:94:f8:06:
                    32:d0:13:89:c5:3b:00:31:a4:ba:f7:70:7b:2e:86:
                    e7:d1:cb:5a:34:e0:b1:9e:19:9f:65:1b:62:32:95:
                    33:4e:80:ba:c6:2c:22:5b:cb:e5:d3:4f:ee:96:f6:
                    1c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BA:79:F4:F4:E9:F9:CA:F4:6D:F4:74:02:A2:27:15:9E:70:B9:8D
            X509v3 Authority Key Identifier:
                keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:20:aa:8b:9c:34:91:01:00:de:d3:17:33:2c:e8:5a:cf:0e:
         5d:33:33:c2:30:5c:bd:e0:2a:f7:8a:2c:12:4a:b7:bd:b6:43:
         ec:b6:cf:68:2e:07:05:c7:c3:1d:03:e7:9d:90:6e:af:77:db:
         42:f8:b3:70:9b:c7:60:75:c7:cb:6f:96:b9:a0:9f:de:38:4f:
         9c:2e:5a:5a:b9:15:20:22:12:06:2e:bc:5f:c7:50:6c:9e:e0:
         8b:6e:5e:ea:53:d4:83:6c:b1:17:08:af:ed:cf:c5:da:6c:b4:
         a4:af:cb:00:c5:3c:18:67:04:35:53:9a:aa:e4:4d:03:c2:e0:
         35:73:4d:f2:26:70:9c:d6:d0:36:77:1e:97:32:92:b2:09:d7:
         b7:c6:46:1e:03:7a:33:a4:d3:26:c7:79:6d:4e:f5:7c:2b:01:
         49:16:0c:6d:a3:d8:7f:f1:ad:10:2a:c3:5e:8f:87:b8:60:0b:
         e0:c9:15:a6:3a:7a:9d:ab:45:29:bc:d4:43:5e:75:e9:9c:cf:
         19:22:19:05:24:e7:44:1b:56:5a:1d:9e:7f:e8:63:3c:1e:b8:
         fe:dd:fc:f8:3c:b3:93:27:4a:97:7f:7e:8e:23:de:8e:48:1e:
         2b:a6:e1:e4:2f:d4:e0:c0:98:eb:9f:b6:ee:db:3b:cf:21:14:
         e8:6b:e5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:50 2026 by rpki-client