This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File:                     fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier:          BxjI2annvDEB7ZB/sHeQ49TmsB5V/8GG+GlKezEJ/No=
Subject key identifier:   7D:31:5C:3C:18:46:77:80:A1:82:17:37:CA:D1:BB:91:D4:C3:02:7A
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer:       /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial:       019C43223E2D56E8CDAA63FDF4FFDBA7EE89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number:          1058
Signing time:             Mon 09 Feb 2026 16:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:43 +0000
Files and hashes:         1: _chBVEiIFGC5r20fIYTsPORg6rk.roa (hash: x/qbcI8zbCXOFAC/IalZJH/FotXUoS1HPt4P46/aRNU=)
                          2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: f2tp6ZweodJHHNMrFiUGUJWDQ81gVfn92CCeU6LL8bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:3e:2d:56:e8:cd:aa:63:fd:f4:ff:db:a7:ee:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
        Validity
            Not Before: Feb  9 16:00:43 2026 GMT
            Not After : Feb 10 16:00:43 2026 GMT
        Subject: CN=7d315c3c18467780a1821737cad1bb91d4c3027a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e0:7b:c8:61:aa:e4:ba:50:e1:09:c9:d8:ee:
                    59:89:75:82:bf:3b:14:a1:d8:eb:9b:03:d9:68:b7:
                    f9:9d:42:6b:d1:7d:da:0e:de:5b:14:1c:22:e2:bf:
                    c2:ac:6a:0a:f6:67:c5:6f:32:43:dd:08:82:09:8e:
                    14:f4:40:46:3b:c5:90:fa:6d:2b:64:15:f5:e9:8d:
                    14:4a:6d:5d:90:62:81:39:5c:3a:e9:c9:b9:d0:95:
                    cc:c4:22:85:79:0f:22:29:cb:51:49:4c:58:dd:d8:
                    d1:f2:75:8e:8d:4f:ad:47:a4:ef:89:75:a3:7f:6e:
                    d5:38:f9:3d:ed:85:3a:00:00:1f:21:57:44:61:47:
                    fc:d3:d4:9f:fb:60:39:c5:fe:24:7b:ba:fd:05:17:
                    ce:05:76:a6:de:bb:86:ee:5a:52:86:60:e5:40:b7:
                    ac:9c:62:cc:b2:87:d3:5a:a7:66:51:72:23:55:59:
                    7f:01:8d:18:ce:b4:42:d2:39:69:36:94:32:13:77:
                    24:4b:e6:5f:e3:61:78:2b:51:23:42:2a:29:cf:fa:
                    38:2e:c9:13:db:86:bb:5b:06:50:21:71:39:75:28:
                    1a:d1:d9:a4:8c:0d:d8:ff:bb:b1:7c:3e:5c:6a:9c:
                    3c:45:90:9c:38:95:81:f1:3b:ed:bb:1e:d8:28:e0:
                    d4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:31:5C:3C:18:46:77:80:A1:82:17:37:CA:D1:BB:91:D4:C3:02:7A
            X509v3 Authority Key Identifier:
                keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ab:d1:59:f1:3c:c6:f8:f6:e2:ea:84:38:61:1d:2c:64:bf:
         35:cb:c3:19:93:de:96:0b:1c:c2:87:9b:3a:5c:49:05:e3:16:
         9d:a0:4c:7a:29:2d:95:8e:24:a0:4b:8c:97:28:8f:4b:9b:55:
         b9:8d:f9:8d:ee:32:86:28:cb:e8:ee:7f:a5:59:fd:ff:5d:65:
         75:ce:5f:d3:4c:e7:6e:0a:b6:a3:3c:69:ff:f8:6d:5e:14:0e:
         21:aa:ca:96:be:96:51:ba:8e:76:8f:ef:31:4b:6a:1b:12:cc:
         61:9e:56:5d:73:63:a6:25:50:38:c9:02:18:1e:7d:4a:c3:c5:
         b5:12:b0:4c:18:56:05:09:15:dd:a0:70:b9:8b:bd:8a:8f:bc:
         8a:88:c1:25:13:d1:80:3f:b1:68:9b:2b:ba:ed:35:f4:68:80:
         de:dc:f0:af:d0:65:f8:3d:e7:25:d4:5c:a9:56:69:db:37:35:
         90:7b:96:bc:30:43:18:8a:b5:79:04:27:18:b5:70:2c:28:f7:
         65:24:32:c3:ac:c4:eb:28:cf:cf:db:a2:21:69:c8:54:a7:c0:
         67:b8:91:38:65:c5:be:6a:66:1a:60:5d:31:0a:67:a3:87:e5:
         e1:aa:e1:3f:fe:90:e0:8e:62:2b:83:46:3c:f6:74:3c:ed:72:
         07:5c:12:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:55 2026 by rpki-client