This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
File:                     fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json)
Hash identifier:          tpygF2iGvZttLxh977pDGIW8H/+GoA1UIVg1BWdu+dU=
Subject key identifier:   48:76:3C:34:5E:3E:74:CC:3C:45:87:F0:23:D8:36:53:42:DE:3D:10
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Certificate issuer:       /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial:       019C43595E4AE5557692845989C187FF8FFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
Manifest number:          17B1
Signing time:             Mon 09 Feb 2026 17:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:56 +0000
Files and hashes:         1: 0iH43Q4bdkgLbnsEHNM0XIwWQ5s.roa (hash: bxo9OIZoi8IN/fQL03vCLDxAyd4172KoQ8X8ciK25Oc=)
                          2: 1-GwXcfVzYR8Z7ckHLVToL1Uaqps.roa (hash: d7SmTyDFUP/oRw3phzJwlnO6V1d5N7DrOlrvStN61JU=)
                          3: 5IBvYreu6crx1ZEw8lgWXelcFW4.roa (hash: QsG1NiQkvSH7jCRwmv7r4phufcd3rAtf4NV7t9+hYtM=)
                          4: 6ItGULV6j8ktSiDJcisut4L2uv8.roa (hash: AVoyJJSbMIzWkWm7Zhb8Q8AM52J+C55gsBmt2DwDqHk=)
                          5: 7VcC4DMXIHbrZKPirD4v2PDxiTo.roa (hash: 1QvS1I6O1u7fOlkBKmW3HFU8tJj8BM1PL1GfKM5aNaI=)
                          6: 8GnAqPanEF-aLifFEt28x_W5bDA.roa (hash: MVg0h+oZbG/5iMupvC5wE+JQeAtDrUL1XBd2HQzTeWA=)
                          7: 8azUINAdDrKjSOMgy-JPOT73XRM.roa (hash: ujWoSRBeAyaw5GwOHCWfKYVzWmHFO3uF5hNtrQu6Teg=)
                          8: 9C4zylgT_v6zvEFrHmvSaBqh2J0.roa (hash: wYzWFJkfh8DVoM0PQNgjA9QYBugmyzSdp/+Mt6aeNyY=)
                          9: ICrizZHzQ_4dOTzG5RjrMi2g3qE.roa (hash: 383sYSfBGHsf/cXc3Wodn3yKNQGJap1/pbI6fLtIstw=)
                          10: MDe6C8qEncFJW9Z_5GGUf8-NnXw.roa (hash: rK/554OfUglfPeqEoYZ9XaLl/qaRXFUHRWwU799kKDU=)
                          11: UgUlbA4Ymig1Dt7HwmQu6F99hKM.roa (hash: f9lP8pXxVTYPvjjr2VNmvzkO+lSuR++Kin/e+V01V5k=)
                          12: Uqw9Dlmoq1jySYJ2AjzEpmjf6Dw.roa (hash: Yj3I6/Qycmom0mdi7MnamZ5gOAsgybPCnXXKUt6eniM=)
                          13: WZU6FHFcHOx5fALoZimlHMooRJs.roa (hash: WpBGTEqhwHqD6YFmMFq/AcUePkWzvyP/nRmAiQbyO2E=)
                          14: dtGYKYc-L-yIv33hN65J3E-xajc.roa (hash: HGuRzP1yH6WASdpAyJlfci6458TQEkYZy6WuynkrmB8=)
                          15: e8VFBmIKoirMo9GQsY0TjoYVOaQ.roa (hash: GwJtd77us9EwOJjzXsDviq2QYdc35X858cXyCikITTk=)
                          16: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: a3isX8cyhx5sU9TWRdPUDKL3X03so+EAvwRfkSKBY0o=)
                          17: j8jqNDQZMqmi7QKl4s3v-vmRycc.roa (hash: EOZ1DSZzBL0cAYGwCaI3yGpoFvzn4nYkcA9KkiSGjio=)
                          18: nckzlZzEmCkRBssdIu4EBS5Mv74.roa (hash: eV7W/koRLQxtO7S8b9s+wve0BYE3rm3ca63LW1DOzxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:5e:4a:e5:55:76:92:84:59:89:c1:87:ff:8f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
        Validity
            Not Before: Feb  9 17:00:56 2026 GMT
            Not After : Feb 10 17:00:56 2026 GMT
        Subject: CN=48763c345e3e74cc3c4587f023d8365342de3d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:58:f0:de:8d:d2:2e:c7:ff:85:73:fe:6b:
                    4a:22:bb:ea:53:77:37:24:8f:1f:a6:a0:2a:f2:dd:
                    ca:66:6b:b4:2d:21:3b:72:97:70:83:c5:8f:19:09:
                    55:86:c6:09:3a:c0:16:d7:ff:b0:45:9a:e1:66:44:
                    ec:a6:24:d5:00:3a:63:ad:86:56:ce:ce:5b:8d:e6:
                    5d:66:85:ea:d8:5a:53:6a:1b:df:1e:1f:0f:04:ea:
                    3a:95:c6:9e:fb:76:71:e7:c4:91:cf:2f:e6:ce:17:
                    79:90:50:2f:c8:3b:50:b2:4f:bc:a5:43:0b:bb:8f:
                    80:d1:71:92:0b:5a:8f:82:a9:23:df:cd:69:4a:c4:
                    3c:4d:a3:eb:a4:08:4c:56:9d:7d:da:28:e9:f5:18:
                    ef:eb:f0:79:12:5b:96:c7:e7:fe:c9:92:f0:2b:89:
                    9d:a6:e8:3d:5a:8e:85:d3:0d:54:4c:e3:dc:8c:55:
                    1c:13:d6:ab:65:87:63:da:ae:dd:57:13:dc:56:8d:
                    0c:dc:78:0f:65:1d:31:07:7e:cd:db:e4:0a:30:14:
                    c7:51:f1:60:f1:2b:a7:81:8e:37:f3:f8:28:a3:83:
                    52:06:87:57:33:38:b8:17:1e:05:6d:a2:b9:59:78:
                    69:97:b1:d0:e5:45:ce:74:c2:27:29:6a:e4:fd:c5:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:76:3C:34:5E:3E:74:CC:3C:45:87:F0:23:D8:36:53:42:DE:3D:10
            X509v3 Authority Key Identifier:
                keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:cd:f7:cf:17:6a:4b:a1:4f:b9:15:ad:c7:a5:8a:76:f5:c2:
         55:2a:87:c1:61:b1:19:84:3c:32:d2:86:e8:00:9b:4b:56:36:
         7a:99:9b:d5:6f:92:b0:42:58:e0:2e:6b:ee:14:b7:87:a3:7f:
         9c:8e:25:7a:31:49:48:4e:f5:0d:9e:7b:b9:03:1b:fd:b2:6c:
         7a:5f:4b:72:2e:27:f0:a1:89:97:64:fd:db:28:a6:c1:c3:4a:
         3f:41:22:31:4f:86:74:d2:17:02:a0:9e:85:5e:82:19:1d:93:
         a9:c5:a8:d0:65:d3:8b:0d:99:5b:f2:f5:94:2a:3e:4f:2f:fb:
         14:6c:80:90:7b:f7:e1:67:18:8c:e6:0e:c6:41:c2:ac:75:0e:
         b2:b9:3b:9b:fd:f5:ee:e6:7a:aa:6d:0e:3f:e2:47:75:15:70:
         a2:51:ab:c6:76:bf:db:bf:df:6d:5d:83:21:44:d5:bd:0a:bc:
         57:87:09:73:60:20:10:b5:b5:80:1e:fa:d3:eb:b7:53:82:9c:
         9c:c5:23:33:db:95:bc:77:c6:f4:d2:20:e8:0a:8b:93:20:d7:
         4f:ce:92:fb:d5:7e:eb:54:10:6c:b1:4a:4f:43:9f:d0:fb:8a:
         92:b6:0f:b3:45:e4:08:c2:c4:11:95:4b:23:9c:20:30:d1:17:
         46:ff:41:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:31:42 2026 by rpki-client