This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
File:                     Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft (raw, json)
Hash identifier:          FrrorewCi9Hg2wqsWhMT5/LdYn8LHp56tI7Ctw7AVFc=
Subject key identifier:   45:47:CC:06:41:B1:02:45:65:A0:82:56:A7:B1:10:68:9A:56:7E:A8
Authority key identifier: 16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
Certificate issuer:       /CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Certificate serial:       019C41D88EE0B4DCAB045D67D673257146E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
Manifest number:          179D
Signing time:             Mon 09 Feb 2026 10:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:37 +0000
Files and hashes:         1: Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl (hash: mdwhlwKc0GB7FNBtJkMHEE7hpDclauSJbpXK2nDOcD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:8e:e0:b4:dc:ab:04:5d:67:d6:73:25:71:46:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
        Validity
            Not Before: Feb  9 10:00:37 2026 GMT
            Not After : Feb 10 10:00:37 2026 GMT
        Subject: CN=4547cc0641b1024565a08256a7b110689a567ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:79:a2:11:1d:c1:fa:f3:f9:03:cd:ce:40:
                    73:c9:c7:51:78:35:89:d5:d5:d9:50:ed:15:d0:a4:
                    83:22:8c:b3:12:f6:5b:57:2c:34:4e:9c:91:27:2e:
                    8a:d0:84:b9:c3:7d:8d:c6:f6:72:ed:e2:a9:75:63:
                    da:4a:dc:0a:0d:5e:5d:ba:b4:0c:64:7b:a3:d6:33:
                    91:50:b0:19:8a:66:6b:a0:7a:f4:ad:91:de:b2:07:
                    3b:12:7f:36:22:bd:89:31:2d:63:96:c5:09:94:cd:
                    d9:21:e9:2c:f4:6e:50:ad:51:85:d6:35:0f:81:1e:
                    b1:e9:83:af:ff:17:ea:ed:b7:2e:5e:0b:ff:3b:65:
                    8b:81:08:a0:de:89:98:c2:9e:20:38:5f:2e:70:04:
                    87:48:02:78:4d:d6:9a:a1:54:0e:cc:ce:4e:5a:79:
                    7d:c5:3d:69:ad:a1:4a:d9:3f:73:2c:b4:4b:2a:f0:
                    a6:f7:ec:77:85:80:67:9a:09:01:76:19:64:80:27:
                    a0:57:e2:69:09:a1:f0:f6:61:9f:d9:69:16:c5:b3:
                    ab:6d:8a:fc:f2:ce:19:bd:3b:a3:d8:91:39:4b:9f:
                    f1:6b:2f:c1:78:d9:3c:dd:ce:3e:c0:48:d8:52:a9:
                    c2:10:58:37:67:4c:cb:1e:dc:80:78:bd:d9:fb:85:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:47:CC:06:41:B1:02:45:65:A0:82:56:A7:B1:10:68:9A:56:7E:A8
            X509v3 Authority Key Identifier:
                keyid:16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fa:74:b2:b8:10:ac:fe:3c:ed:93:34:05:27:90:90:da:4e:
         0c:55:64:e8:d5:9b:ec:db:91:5b:af:6d:58:81:f6:f1:78:13:
         f4:76:f7:f6:9f:c5:f2:53:0b:15:c6:a0:49:aa:a1:b6:db:71:
         a9:5b:40:eb:00:87:6e:30:80:c3:10:6a:03:72:c4:50:89:a7:
         fb:bd:74:fb:d1:11:0e:5e:4d:69:5a:3a:7b:9c:d5:ca:1c:9c:
         ce:5e:aa:01:ac:bc:ab:64:e7:db:ea:8a:9d:cf:62:79:00:94:
         a9:a1:eb:6b:23:48:cb:55:02:bf:57:16:75:97:2a:0e:70:77:
         d5:ad:bb:c8:e5:68:55:c5:92:b9:86:47:52:eb:7f:23:6a:71:
         49:55:dc:2d:c6:58:f3:8a:d1:a7:61:58:b5:2b:0e:ac:fc:4e:
         2d:be:c6:7c:05:11:05:25:e8:d4:92:60:f9:ba:49:f5:00:69:
         80:bd:91:16:8e:b1:53:92:08:86:4e:53:a1:a3:4b:08:de:6b:
         b6:71:cc:98:78:6f:17:e1:27:4f:0d:15:4c:4e:41:80:1c:a2:
         39:22:74:a0:4a:22:80:68:3e:4b:d1:0a:b9:b1:ca:73:09:24:
         6c:c1:4c:2d:7a:a6:37:28:cd:23:dc:31:2c:78:98:42:de:38:
         0c:78:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:56 2026 by rpki-client