This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File:                     fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier:          C1ng6OWhlIjziUhyW6TfiN263av9bKKPm50NsQD5qmM=
Subject key identifier:   45:35:7D:04:26:8F:76:22:8F:6A:8C:57:93:67:F7:DE:21:BD:5B:65
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer:       /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial:       019C1BDE2A2D7F49B07C357FE82ED54458F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number:          0F25
Signing time:             Mon 02 Feb 2026 01:01:10 +0000
Manifest this update:     Mon 02 Feb 2026 01:01:10 +0000
Manifest next update:     Tue 03 Feb 2026 01:01:10 +0000
Files and hashes:         1: Q69BGamqP9_WoNnMCdnt1bm0Zuk.asa (hash: vaww5N01JjWWsrnL1Alu05fhe0e30iMVsw9GtNm8F+s=)
                          2: ecJkAb9L5BLrJG4sRdndteYMNv8.roa (hash: wE2gGvfsffXq2etxDqbfTLucpqrE1NBT6xi3whuXMTQ=)
                          3: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: mPDpr2zSR/5qUc4HnJvoiy6nR6HfU6facOqiZTGnmPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:de:2a:2d:7f:49:b0:7c:35:7f:e8:2e:d5:44:58:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
        Validity
            Not Before: Feb  2 01:01:10 2026 GMT
            Not After : Feb  3 01:01:10 2026 GMT
        Subject: CN=45357d04268f76228f6a8c579367f7de21bd5b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:dc:a3:65:ff:75:f9:08:a9:a3:9a:7b:7e:
                    bf:46:4e:c9:be:99:9d:b6:23:75:7a:5c:d1:c7:ab:
                    ad:5c:4a:67:7d:e2:8f:d9:38:b0:cb:81:c6:33:60:
                    ee:f9:88:6b:42:b7:3e:45:59:fd:fe:d9:b8:b0:76:
                    2a:c2:5d:b0:37:33:b5:7d:65:5a:8e:7e:b9:64:44:
                    30:96:46:57:c0:58:6a:aa:26:2a:62:59:8e:7f:e3:
                    e8:f0:0e:7d:e9:ff:1f:9b:92:74:21:a7:2e:1a:3e:
                    ab:70:02:00:e6:50:73:83:ad:0c:31:aa:c1:44:72:
                    3f:07:c1:70:1c:49:94:fb:fa:99:fc:44:e5:f7:f9:
                    bc:72:68:38:22:49:37:fe:e0:0b:cb:ed:e0:8f:97:
                    68:9f:a6:b7:cd:e4:9d:12:a1:9e:28:c6:9e:f8:90:
                    51:61:ed:fe:08:e7:2b:1c:b7:6e:a3:49:73:f5:a8:
                    6a:cb:b1:ec:e1:6a:2d:96:81:74:3f:c7:e3:dc:36:
                    73:5c:ca:61:2d:7b:e1:81:7f:1a:d8:00:eb:fa:55:
                    06:c8:73:eb:79:e2:09:ac:41:32:66:a4:9c:0c:d3:
                    71:2c:1c:7c:c5:71:09:0e:6c:b1:07:0d:41:d2:85:
                    c6:c4:e3:22:da:bb:09:83:9d:34:3b:bf:bb:28:aa:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:35:7D:04:26:8F:76:22:8F:6A:8C:57:93:67:F7:DE:21:BD:5B:65
            X509v3 Authority Key Identifier:
                keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9a:ac:94:5c:44:2e:0c:0e:8a:3a:08:4f:61:57:5c:31:7f:
         f9:99:11:0f:11:77:22:01:46:90:c3:89:b9:3c:aa:7c:d5:91:
         77:0f:7a:eb:d5:25:7e:f0:06:59:b9:02:bf:c5:d6:e8:fd:0c:
         1b:5a:4c:ec:00:0b:f2:83:e3:46:a1:c4:d6:02:b0:f4:c3:b7:
         41:f5:b6:54:a9:0d:0d:fc:4f:00:2f:f2:79:d0:fc:6f:e0:d5:
         b5:6e:0c:b4:89:c7:54:ff:99:a6:5f:2c:56:81:3e:2d:d1:7f:
         19:fa:63:9a:de:ae:f7:9c:6a:a5:29:1f:db:65:c2:a2:54:6b:
         e7:c8:50:be:6a:36:b8:b3:45:8b:bc:51:89:bb:5c:49:58:56:
         8f:55:f2:6f:22:d1:fd:22:f4:1d:df:50:f6:b3:e4:80:30:9f:
         13:ef:77:0c:3f:cc:c8:d2:ce:1d:ed:a2:30:4e:f9:55:02:a4:
         e9:92:63:14:70:3a:59:67:bf:eb:c6:a0:25:09:2e:11:b1:9d:
         98:b7:95:99:14:f9:64:65:4e:9f:b8:a3:bd:e0:ce:25:24:03:
         32:3c:0a:2d:db:bd:fe:69:c1:ea:11:af:ec:a3:02:87:ec:d1:
         b3:b1:7b:60:96:d9:87:d8:53:48:fe:85:27:1a:a0:a1:79:7d:
         92:a2:55:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:15:07 2026 by rpki-client