This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
File:                     F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json)
Hash identifier:          e3rj5fR3yyQmqfEke0wD+Jgq0TXHxvma3T21eUe4VOI=
Subject key identifier:   32:61:12:7F:C8:2B:53:BE:60:C2:11:C1:FC:A1:6C:BD:34:09:DB:81
Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
Certificate issuer:       /CN=17e568417f59a21129fb2487f5e57bc171631f7b
Certificate serial:       019C432256281A56FFFAC557CA223AF4D5B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 16:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:49 +0000
Files and hashes:         1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: 6obYElaKlKEOoB8OF/V3r8O3//Meu3hAy0+/3YIgDpk=)
                          2: HUhbdTnE7t8fJLoxOZjIs_jPf-I.roa (hash: 0OTZgUH+NcfxFrfPCUIKiHj+PPgGKtMorANusm4HHuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:56:28:1a:56:ff:fa:c5:57:ca:22:3a:f4:d5:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b
        Validity
            Not Before: Feb  9 16:00:49 2026 GMT
            Not After : Feb 10 16:00:49 2026 GMT
        Subject: CN=3261127fc82b53be60c211c1fca16cbd3409db81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c4:16:22:4a:80:98:cd:84:49:1b:45:a1:6c:
                    01:20:68:bf:65:0b:59:7c:d8:21:71:a8:9a:4c:e8:
                    2c:3c:c8:48:64:91:78:14:91:99:16:10:bb:2a:e6:
                    dd:ea:a7:14:f7:10:5b:a2:df:8f:68:b2:35:00:05:
                    bc:e5:52:42:cb:4b:48:a6:b1:3a:38:e9:f1:22:3a:
                    b7:f5:15:8f:1e:0a:d6:77:00:fc:03:2c:38:f8:1d:
                    17:b9:14:fe:12:af:eb:de:ea:39:29:80:bd:42:1b:
                    fc:8d:eb:e2:40:62:9f:b9:db:eb:64:dd:fe:fe:48:
                    6c:04:0a:5f:0c:4e:2a:d8:85:2f:07:3d:d2:20:40:
                    af:b8:a0:61:b6:a8:d7:0c:ca:74:40:ba:c2:89:9b:
                    24:57:5b:1a:14:f4:fe:65:ce:d6:51:50:ca:e1:12:
                    61:2c:16:c8:bf:19:25:1b:48:e7:21:11:86:7f:e4:
                    4a:b7:4a:09:43:4d:c1:aa:17:29:cd:ff:78:ad:3d:
                    0c:5b:c4:4a:4d:84:8d:86:1f:7a:61:80:62:6f:b0:
                    82:c1:5f:de:b2:78:a6:31:73:2d:47:87:e0:ee:40:
                    a3:d8:22:36:24:2b:3f:fe:b6:f6:ea:a4:fe:2f:7a:
                    25:da:99:45:8e:64:60:f8:7a:de:4d:0d:2d:f6:5a:
                    56:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:61:12:7F:C8:2B:53:BE:60:C2:11:C1:FC:A1:6C:BD:34:09:DB:81
            X509v3 Authority Key Identifier:
                keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a1:9e:5c:59:b8:84:e5:f7:fa:1b:32:ed:5a:16:9c:60:3b:
         79:d2:dc:19:64:b0:fe:d0:83:74:46:06:0f:03:66:66:5e:ec:
         c4:f9:c2:ae:26:0a:02:ca:cc:b2:97:fe:90:7b:19:a0:f8:b2:
         70:26:02:18:87:59:2e:cd:f1:61:6b:45:50:6a:44:ee:d5:22:
         6f:78:82:95:4c:03:b3:f8:cb:12:d6:01:26:23:21:ba:f9:c7:
         4f:fa:8c:71:c7:96:07:92:04:b1:03:8d:3d:e2:bf:40:f5:a0:
         3f:ea:10:9d:7d:4e:f1:32:2b:34:91:38:1d:c1:b7:0d:3b:b5:
         89:91:29:df:3e:b7:cc:e8:9a:62:b2:10:3d:fc:7c:0a:eb:c0:
         0d:37:d8:55:82:f9:68:c4:84:53:c0:2d:2c:ec:2a:ec:1d:c3:
         09:9f:2b:ff:a7:73:c6:83:14:05:f8:53:0b:17:bc:83:ab:01:
         0d:14:39:52:5c:f5:6b:60:46:ef:ed:44:a4:08:b0:f8:48:58:
         55:44:37:c0:8b:1e:4a:12:37:18:a9:d4:59:09:b4:8e:47:4a:
         2f:21:dd:2c:3b:5e:26:49:c7:b4:e5:d5:f0:71:ca:7d:68:5d:
         b2:3e:f7:ef:4b:27:6d:bc:cd:83:69:4d:e1:9e:47:df:e3:7c:
         52:95:bf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:41 2026 by rpki-client