This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
File:                     FAThjoYWcF7A8pDlfKgpqC9flsI.mft (raw, json)
Hash identifier:          5cZjUjvVG65qRXjS0UuhdO+cM76zZBW7G8H6JpYz0Q8=
Subject key identifier:   25:6B:9F:6F:5F:16:1B:03:E6:68:C5:63:E1:95:A5:52:25:D2:72:73
Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
Certificate issuer:       /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Certificate serial:       019C43FE1E35EAAE429497491FC11953C308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 20:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:53 +0000
Files and hashes:         1: FAThjoYWcF7A8pDlfKgpqC9flsI.crl (hash: xTPiKhpe2uqCcGkrFVGjABVCgdO/tjXR78s8+2nqo/I=)
                          2: ZbxImoNqXRLDNvdnH4iMDANgidI.roa (hash: w0C4brd6pZ8lauWP2MWtB50PXapccIM+KpGIY1kaKnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:1e:35:ea:ae:42:94:97:49:1f:c1:19:53:c3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
        Validity
            Not Before: Feb  9 20:00:53 2026 GMT
            Not After : Feb 10 20:00:53 2026 GMT
        Subject: CN=256b9f6f5f161b03e668c563e195a55225d27273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:4a:ff:7a:a0:61:12:77:cf:24:48:11:e9:
                    a3:44:3f:5c:35:45:fb:72:e7:c7:92:16:46:2c:b3:
                    54:f1:77:28:17:a9:df:07:27:6d:11:72:89:d7:e8:
                    d6:d2:7c:44:a8:b4:81:33:6b:62:fc:02:12:a8:4b:
                    95:03:e0:23:e1:72:e8:db:25:fc:ac:14:77:67:90:
                    73:05:10:9a:c7:3d:69:30:ef:17:ea:1d:6d:7f:7a:
                    8a:e9:6f:6a:e4:ce:8e:17:33:7f:de:ea:66:c9:60:
                    3c:91:93:f0:90:f8:5e:07:5f:df:fd:3d:cc:5b:c3:
                    6c:43:56:5c:97:b1:59:60:ab:85:ec:c2:3b:68:fe:
                    dd:60:e2:0b:d2:07:84:1a:10:28:61:8c:56:92:43:
                    3d:06:c7:27:5b:65:47:86:f8:12:c3:5d:77:9c:96:
                    a0:51:fb:f4:2a:ce:f7:42:14:69:9f:28:0a:71:61:
                    45:36:0e:d4:52:e8:34:f7:bc:57:f0:a0:ef:e6:9b:
                    08:6a:22:f7:02:6c:02:e9:f9:48:2d:ff:b5:ae:b5:
                    14:b1:96:13:3b:0a:e5:c9:00:f4:1e:d8:4c:aa:c4:
                    89:3d:61:c0:7c:9a:7f:80:36:c8:ce:02:4c:8a:8e:
                    99:00:9b:58:20:ee:27:e3:3a:48:5c:89:83:1b:7b:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6B:9F:6F:5F:16:1B:03:E6:68:C5:63:E1:95:A5:52:25:D2:72:73
            X509v3 Authority Key Identifier:
                keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:88:83:5e:95:9b:f6:05:bc:2f:5c:1e:2a:55:16:31:75:02:
         90:01:0d:f7:a9:08:d9:7b:77:70:a6:6f:a8:c8:18:9e:56:ee:
         c4:d5:5b:57:cd:f4:c1:75:06:5d:d7:3b:5d:c0:68:16:1b:40:
         c8:1b:18:46:8a:e5:ae:08:db:ed:c2:3a:3f:9e:6b:93:80:c4:
         cd:67:03:dd:23:b9:a1:f8:18:8c:50:20:57:a9:66:c5:72:e3:
         f2:9b:af:18:7d:65:ec:8e:40:3e:97:b2:90:b8:46:cc:4a:1f:
         e0:1e:26:e4:e5:08:75:40:3f:b7:b4:cf:9e:35:60:a5:35:32:
         cb:e6:3e:ff:4e:76:3e:14:b7:95:2c:e5:20:85:91:2d:67:94:
         d0:cf:c4:01:07:dc:c1:74:2d:0a:4f:3f:99:36:92:de:4b:be:
         ef:be:0f:72:54:4e:5f:1e:c4:c8:7d:cf:0d:51:0b:84:1c:8c:
         c4:c2:ec:91:04:f3:20:c2:0a:22:7a:7d:5b:d4:65:84:b3:7c:
         c6:1a:dd:c7:c8:65:0a:96:c8:27:20:14:55:de:56:0e:dd:e4:
         f0:e1:73:37:e5:4b:b4:7b:5d:d3:d9:ae:d3:60:ee:25:af:bb:
         45:d8:85:cb:f6:a5:da:78:1f:1c:af:79:16:6c:00:55:43:8d:
         13:b8:d9:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/h416q5ClJdJH8EZU8MIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MDRlMThlODYxNjcwNWVjMGYyOTBlNTdjYTgyOWE4MmY1
Zjk2YzIwHhcNMjYwMjA5MjAwMDUzWhcNMjYwMjEwMjAwMDUzWjAzMTEwLwYDVQQD
EygyNTZiOWY2ZjVmMTYxYjAzZTY2OGM1NjNlMTk1YTU1MjI1ZDI3MjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw1K/3qgYRJ3zyRIEemjRD9cNUX7
cufHkhZGLLNU8XcoF6nfBydtEXKJ1+jW0nxEqLSBM2ti/AISqEuVA+Aj4XLo2yX8
rBR3Z5BzBRCaxz1pMO8X6h1tf3qK6W9q5M6OFzN/3upmyWA8kZPwkPheB1/f/T3M
W8NsQ1Zcl7FZYKuF7MI7aP7dYOIL0geEGhAoYYxWkkM9BscnW2VHhvgSw113nJag
Ufv0Ks73QhRpnygKcWFFNg7UUug097xX8KDv5psIaiL3AmwC6flILf+1rrUUsZYT
OwrlyQD0HthMqsSJPWHAfJp/gDbIzgJMio6ZAJtYIO4n4zpIXImDG3trjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVrn29fFhsD5mjFY+GVpVIl0nJzMB8GA1UdIwQY
MBaAFBQE4Y6GFnBewPKQ5XyoKagvX5bCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jYmJlZGMtYjdiYy00MjU1LWJjNDEt
ZTM2ZThkMjkzYWUwLzEvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jYmJlZGMtYjdiYy00MjU1LWJjNDEtZTM2ZThkMjkzYWUw
LzEvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoiDXpWb
9gW8L1weKlUWMXUCkAEN96kI2Xt3cKZvqMgYnlbuxNVbV830wXUGXdc7XcBoFhtA
yBsYRorlrgjb7cI6P55rk4DEzWcD3SO5ofgYjFAgV6lmxXLj8puvGH1l7I5APpey
kLhGzEof4B4m5OUIdUA/t7TPnjVgpTUyy+Y+/052PhS3lSzlIIWRLWeU0M/EAQfc
wXQtCk8/mTaS3ku+774PclROXx7EyH3PDVELhByMxMLskQTzIMIKInp9W9RlhLN8
xhrdx8hlCpbIJyAUVd5WDt3k8OFzN+VLtHtd09mu02DuJa+7RdiFy/al2ngfHK95
FmwAVUONE7jZFw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:51 2026 by rpki-client