This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
File:                     Fo8OK6LQk0M6S2EpVye5m7FF93s.mft (raw, json)
Hash identifier:          EYWi2h6Tb86dzTatfBIMjDpgEE6xaFD3D6vfStzVJ3c=
Subject key identifier:   A6:CC:72:51:87:74:02:BB:58:51:FB:DB:8B:99:1A:43:8F:D8:21:A3
Authority key identifier: 16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
Certificate issuer:       /CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Certificate serial:       019C43C6D94D62F9CA43F5EED31906F8F298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
Manifest number:          0791
Signing time:             Mon 09 Feb 2026 19:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:31 +0000
Files and hashes:         1: C9A49XShrpT2L1lbu5v6tyyqxGE.roa (hash: Z6iZSfPjsI83CHUl8Gu4u2Ux8v9NUtJP/iskQ5nB/10=)
                          2: Fo8OK6LQk0M6S2EpVye5m7FF93s.crl (hash: FvM6IIPa4ej8tDCQpvkIQL/czI2lYBKqRECun1FJEHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:d9:4d:62:f9:ca:43:f5:ee:d3:19:06:f8:f2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168f0e2ba2d093433a4b61295727b99bb145f77b
        Validity
            Not Before: Feb  9 19:00:31 2026 GMT
            Not After : Feb 10 19:00:31 2026 GMT
        Subject: CN=a6cc7251877402bb5851fbdb8b991a438fd821a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:6c:90:a1:2d:c6:03:b3:bf:3a:c3:b1:37:
                    94:4f:b5:4d:86:af:93:13:f7:23:a4:23:0b:c6:57:
                    52:74:9f:5e:a3:07:a1:4e:87:34:0f:1f:77:74:2e:
                    00:c6:6f:15:52:d2:5f:d6:7a:bb:5d:10:e0:72:81:
                    55:4f:e8:c3:ce:a5:59:d8:d8:1f:82:7b:4c:d3:e6:
                    a2:58:56:7b:b5:16:49:e9:56:a0:3b:a7:6d:57:ed:
                    4a:21:a0:05:e9:f8:20:c2:3d:5f:9d:d0:8f:07:fc:
                    cc:37:7c:64:9c:88:71:a3:29:d7:da:9e:4e:a0:67:
                    4a:e2:28:3d:09:f4:10:49:cd:6e:af:6c:40:84:04:
                    0a:13:f4:e9:79:98:8f:8a:c9:ee:f6:9a:2b:a1:ad:
                    d5:84:dd:5a:2d:f7:b0:36:8b:05:a1:79:25:9c:61:
                    cb:a6:b7:70:b0:cc:e1:ad:4f:b3:8f:46:39:d9:c1:
                    f2:b4:ee:78:0f:e2:34:11:27:5e:ba:ce:a5:e5:17:
                    3a:1a:4b:6c:1e:33:4e:8b:c6:1b:fe:7b:a7:48:df:
                    5d:2b:6c:ee:dd:ca:af:35:3f:38:ac:51:3b:fa:55:
                    af:75:d9:80:39:f8:ee:ed:84:5d:fd:08:27:af:2e:
                    98:a2:b7:20:e9:c0:71:aa:32:96:4b:5c:cb:5c:42:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CC:72:51:87:74:02:BB:58:51:FB:DB:8B:99:1A:43:8F:D8:21:A3
            X509v3 Authority Key Identifier:
                keyid:16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:84:ba:d5:1c:e5:ee:20:d5:27:4c:c1:4d:ca:cb:b5:d7:fb:
         f9:a3:0c:1b:59:9c:34:b6:0f:c9:be:06:48:1b:36:9b:68:9f:
         fa:1f:78:5b:07:c6:03:60:30:b8:51:72:78:10:da:9c:6a:41:
         9a:31:91:52:9c:cb:be:42:6a:d2:26:95:94:22:c2:16:b4:de:
         0a:77:be:44:37:0a:1c:42:a8:ff:fe:29:4d:41:5b:75:b8:84:
         f9:9d:b2:72:83:b8:b7:55:c6:99:49:84:37:85:79:b1:ac:d0:
         cc:20:52:57:a6:d5:6f:e0:04:34:98:29:d8:ae:86:51:65:13:
         96:20:09:04:3e:c6:1d:20:01:c9:c2:ba:36:79:18:46:a4:eb:
         b1:a4:0d:e5:59:42:bd:2a:89:07:8a:51:cd:b9:0e:5d:e8:89:
         1e:a7:58:05:67:f9:38:c3:ba:ce:de:29:49:a0:a4:16:16:99:
         61:16:4d:ae:fa:57:0b:63:f1:85:d9:68:90:3c:61:b2:34:a9:
         c6:d3:73:f7:bc:02:45:04:7c:a7:bd:84:bf:69:d5:97:14:f4:
         8a:0e:cf:9b:cc:73:1e:6d:6f:f5:33:72:d6:2f:f0:d2:5f:cd:
         84:cb:10:50:2c:9e:dc:57:0a:85:1d:72:16:bd:35:12:5b:59:
         6a:00:72:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:59 2026 by rpki-client