This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
File:                     Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft (raw, json)
Hash identifier:          iFDy5PeF80kJ27p3C5uwnz4cVWfdyqzwNr90RRJ1y8M=
Subject key identifier:   D9:10:31:3C:6B:A4:D5:09:B7:45:57:82:95:0E:39:0E:F3:DD:AE:28
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Certificate issuer:       /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial:       019C3FE9EC95AA360D81A0D0E4A3C6AB9623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
Manifest number:          10DE
Signing time:             Mon 09 Feb 2026 01:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 01:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 01:00:20 +0000
Files and hashes:         1: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl (hash: QAX6UGCojzesm4Cgays5QObThq+ZIQKzJdMGNM0hLTc=)
                          2: ThEbdNyMjZlPcirKDdAqyJZ_IQw.roa (hash: CGthBA4HArt69dssvy/GYBuP0JxNG1Tkx2gronzpD3M=)
                          3: Y8VofECg6XDRc7kBDxvZBE-ydHI.roa (hash: 5sI62v5HRBdxoauH9VhzHWAJkQqiRWMnuYGerEaV4nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 21:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:3f:e9:ec:95:aa:36:0d:81:a0:d0:e4:a3:c6:ab:96:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
        Validity
            Not Before: Feb  9 01:00:20 2026 GMT
            Not After : Feb 10 01:00:20 2026 GMT
        Subject: CN=d910313c6ba4d509b7455782950e390ef3ddae28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:ee:83:c6:d1:73:81:f2:f9:53:38:ea:47:
                    ae:b4:dc:2d:76:44:b8:5d:b0:28:18:de:0d:82:d1:
                    4d:53:69:be:98:aa:d6:e4:68:fc:80:65:c1:84:87:
                    0e:37:3f:76:86:0a:c9:e9:72:33:91:da:99:e0:3b:
                    b2:98:f9:c4:43:8b:5b:ec:c1:c7:de:77:78:92:41:
                    06:5c:70:53:b1:6d:13:7a:a6:a8:f3:20:8e:f9:4b:
                    8c:25:ae:ab:17:17:35:d9:d6:09:f0:ac:9d:b2:dd:
                    1d:de:e5:4c:61:56:b7:79:ad:af:f4:cd:1e:02:72:
                    03:47:e2:9a:4a:5c:6f:95:6c:2d:b9:e8:8c:50:04:
                    bd:b8:14:79:f6:c7:94:20:40:b7:f7:7e:95:86:70:
                    87:8c:11:25:0e:69:86:d9:ff:22:43:24:bc:58:34:
                    c5:74:b9:e5:dc:db:ab:48:fa:2d:59:53:9a:15:d0:
                    78:f2:39:c2:12:88:da:54:e2:e1:59:18:82:47:93:
                    11:d5:19:b2:eb:ae:33:fa:92:0b:9c:2c:53:35:6b:
                    1f:93:a5:ea:61:9c:1e:98:e4:ad:35:ed:2d:67:d7:
                    f2:68:1f:a0:70:df:63:4f:14:0f:81:1f:23:84:d4:
                    6a:db:1e:c8:50:76:89:65:65:c4:a2:26:a9:e2:90:
                    98:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:10:31:3C:6B:A4:D5:09:B7:45:57:82:95:0E:39:0E:F3:DD:AE:28
            X509v3 Authority Key Identifier:
                keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fa:62:49:e6:64:f8:d1:97:b5:03:0e:c3:e9:b9:81:02:a7:
         c7:da:9c:aa:2e:91:8f:30:4d:59:72:6c:44:e7:15:ff:ca:3a:
         06:9d:01:c0:f3:e4:7a:2c:e7:e6:b3:d8:ae:c3:5a:73:28:d1:
         2e:ad:3f:c9:b2:59:4a:a8:8e:8a:24:da:de:97:f7:60:ab:ca:
         22:b5:ae:55:ad:22:73:ba:fb:88:b2:e0:c9:4c:5c:f2:16:37:
         b2:c6:f7:54:79:12:d3:27:9d:38:d1:1e:b3:89:42:b4:e7:16:
         98:df:6b:7c:de:66:10:b0:ca:a4:b2:2b:cf:31:f8:39:31:a5:
         1d:3b:11:ea:32:dc:80:8b:e3:ff:b0:60:48:54:f3:2f:45:f3:
         71:c4:50:44:27:87:4c:43:30:39:39:95:ae:9f:bc:e8:58:0f:
         4a:42:bd:2e:e0:e4:9a:2c:8a:31:ca:ee:c0:53:85:c1:70:9a:
         c6:08:99:88:dd:bc:65:37:89:28:aa:ef:00:97:c2:12:1b:12:
         af:c2:20:eb:fa:65:b6:4b:bf:ee:03:4e:c8:7c:e2:b5:6a:6e:
         d1:e8:14:4a:1f:d1:93:71:97:9e:bb:98:ef:99:bd:04:e8:a8:
         b8:62:fa:2e:9a:62:74:84:23:2c:fc:14:0d:a1:84:ca:90:29:
         ad:99:86:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 04:19:19 2026 by rpki-client