This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
File:                     fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft (raw, json)
Hash identifier:          cIUNR1XZpvlfRZscCjRefSw1ys9BMA82OVWVxKzkut4=
Subject key identifier:   D0:CF:75:D7:23:E2:56:E6:31:FC:22:23:03:37:CF:3E:55:21:5F:0E
Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
Certificate issuer:       /CN=7e9360205b48af4954566314230e6b1296d9aec4
Certificate serial:       019C42EB75A1B3DF3C6F140785858E568643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
Manifest number:          06CF
Signing time:             Mon 09 Feb 2026 15:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:53 +0000
Files and hashes:         1: 96LYOeOZrfhBfF0aYpvHmgR3_EI.roa (hash: cZrj9IEY9V0hY5ejfic9+qWXj8uAu/BE+c5uGfFzBJY=)
                          2: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl (hash: enB7k6hui5Hpa4jqB0riLLiAbQIFCq9yFF1tLagP4LM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:75:a1:b3:df:3c:6f:14:07:85:85:8e:56:86:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4
        Validity
            Not Before: Feb  9 15:00:53 2026 GMT
            Not After : Feb 10 15:00:53 2026 GMT
        Subject: CN=d0cf75d723e256e631fc22230337cf3e55215f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d6:b3:df:dd:8c:c9:58:19:c5:ed:4c:7c:f0:
                    be:36:8e:c9:fc:94:69:14:16:bf:0b:6d:72:81:04:
                    06:ac:f3:75:c9:6f:3d:13:91:ba:2a:0a:03:d8:42:
                    d0:2b:4a:31:82:ec:fc:b1:d4:26:c1:45:b4:3c:87:
                    e7:67:32:a4:b9:cf:46:1c:60:f3:12:b7:18:50:8d:
                    39:db:89:89:0e:ce:8a:41:39:c8:97:12:e4:4f:d8:
                    22:0d:bc:30:72:d5:fa:db:d4:ae:16:94:53:b8:b3:
                    f7:81:3c:d6:02:a4:f1:bb:19:a5:ae:41:39:c2:3e:
                    f5:a4:30:33:23:6a:40:85:91:43:10:9b:95:07:ca:
                    6c:95:73:0e:34:04:8c:72:67:92:f4:75:f9:f1:a2:
                    aa:34:0f:fc:65:06:f8:91:2d:80:c7:4d:c8:32:46:
                    c7:5c:09:5e:b0:c3:fa:85:39:69:eb:a7:d6:d8:b8:
                    f6:ad:f7:1f:c6:00:7e:6c:fd:28:66:e5:03:a9:ff:
                    db:4f:11:cb:03:7e:25:b9:93:fa:94:49:ff:73:99:
                    92:a8:9f:11:a4:d3:fe:c5:8c:b0:75:d6:eb:1f:92:
                    dd:93:78:85:21:3a:b1:5f:f3:0f:5a:56:89:03:0d:
                    5f:2b:a5:aa:dd:e7:33:94:1b:f2:88:62:cd:ce:f1:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CF:75:D7:23:E2:56:E6:31:FC:22:23:03:37:CF:3E:55:21:5F:0E
            X509v3 Authority Key Identifier:
                keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d6:0c:d8:59:c5:21:f5:e9:d2:87:d2:b5:da:3a:e1:34:72:
         35:13:d8:0c:31:36:d6:eb:fc:d3:3e:b9:c4:52:a8:67:4b:eb:
         f3:58:51:5d:fe:80:1c:b9:b2:66:97:e1:38:80:da:90:e9:12:
         74:6c:2c:c6:92:85:df:db:3d:02:ba:e0:ff:c0:06:d3:3b:87:
         fa:96:c2:bc:ea:95:eb:ba:5c:32:17:ee:cc:8a:49:0a:76:da:
         8e:e4:61:81:98:e7:c7:eb:89:33:8a:46:78:84:9a:d1:e0:6e:
         da:70:81:05:d0:91:f9:b5:b0:70:ba:d2:65:63:0b:0a:51:06:
         66:17:0a:83:9e:51:4b:eb:8f:c6:07:03:bd:df:dd:f6:d8:52:
         02:49:2e:9f:3e:ab:6e:50:c4:4f:6b:14:68:72:60:f3:1f:40:
         59:c3:f9:da:32:b7:77:e9:be:4f:88:0d:d1:b8:8d:9e:37:ab:
         3d:e0:56:2f:7c:0e:fd:dd:34:ee:84:96:c0:c7:bd:a9:1b:3a:
         74:78:0d:d7:3c:c5:75:0f:c2:64:a8:46:89:1e:6a:7c:d7:de:
         2e:07:ca:3a:84:82:f5:b8:a5:79:7e:76:54:50:c6:fd:03:53:
         07:c9:32:16:10:1a:64:81:57:3d:97:e4:6d:33:cc:40:32:bf:
         8e:2e:4e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:18:11 2026 by rpki-client