This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft
File:                     fzdyg9fCNak9x70rgxeydI8oX_c.mft (raw, json)
Hash identifier:          uF6yrZTtAS/pDhkVmVteclRUB58mNMGb8cNzNF8a3R0=
Subject key identifier:   00:75:E6:6B:9D:CF:A7:BE:26:23:3D:9B:67:01:02:43:05:8B:67:18
Authority key identifier: 7F:37:72:83:D7:C2:35:A9:3D:C7:BD:2B:83:17:B2:74:8F:28:5F:F7
Certificate issuer:       /CN=7f377283d7c235a93dc7bd2b8317b2748f285ff7
Certificate serial:       019C43596D7E4197315D0630B9A196410E40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fzdyg9fCNak9x70rgxeydI8oX_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft
Manifest number:          0101
Signing time:             Mon 09 Feb 2026 17:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 17:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 17:01:00 +0000
Files and hashes:         1: fzdyg9fCNak9x70rgxeydI8oX_c.crl (hash: tE0wsfA2DlVisTjGlSn/Fx88NYw2w8c+ivAutLOga8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fzdyg9fCNak9x70rgxeydI8oX_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:6d:7e:41:97:31:5d:06:30:b9:a1:96:41:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f377283d7c235a93dc7bd2b8317b2748f285ff7
        Validity
            Not Before: Feb  9 17:01:00 2026 GMT
            Not After : Feb 10 17:01:00 2026 GMT
        Subject: CN=0075e66b9dcfa7be26233d9b67010243058b6718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:8c:14:d6:41:2c:c6:d3:91:ab:6c:1b:10:
                    d5:ca:6f:e6:27:81:9c:37:61:34:e2:25:18:58:59:
                    b6:30:34:a4:b3:1b:b1:cc:a1:bc:40:b0:a8:b8:5a:
                    e9:07:93:b3:82:e3:90:65:eb:f9:dc:a4:18:b3:78:
                    18:b3:66:41:72:23:7f:a6:4c:85:ca:e5:b0:30:ab:
                    0e:62:40:e0:0f:54:9d:fd:5f:a3:09:1b:0f:77:8e:
                    bb:9d:8e:43:cb:ed:92:0d:89:a3:8a:c8:1d:1a:62:
                    b9:7a:d6:50:97:86:2f:8a:4d:82:84:b6:9e:42:de:
                    df:08:88:1a:ef:6b:2d:47:3b:2e:c6:ad:0e:c3:fd:
                    54:e4:74:bd:55:76:61:a4:9d:d7:42:02:59:e3:5c:
                    11:8d:bd:56:b3:eb:42:ac:89:74:86:2d:ca:82:bb:
                    8d:44:bc:dc:8f:1d:91:31:c1:92:b4:1c:61:a6:5b:
                    30:28:83:41:f6:50:b5:be:ba:1b:51:6e:4d:e6:58:
                    6f:3d:86:e5:3f:6d:ea:52:98:50:07:51:27:aa:e1:
                    60:74:f9:35:52:cf:99:8f:3a:20:e8:f6:76:8c:24:
                    45:4c:39:5c:e9:1e:3c:8b:8b:2c:2f:00:df:4c:97:
                    05:64:3c:69:a1:92:fb:f4:e7:aa:c5:44:0d:d1:59:
                    4f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:75:E6:6B:9D:CF:A7:BE:26:23:3D:9B:67:01:02:43:05:8B:67:18
            X509v3 Authority Key Identifier:
                keyid:7F:37:72:83:D7:C2:35:A9:3D:C7:BD:2B:83:17:B2:74:8F:28:5F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzdyg9fCNak9x70rgxeydI8oX_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d2:b3:41:70:64:a6:89:2e:66:1b:18:e0:91:a4:a4:b7:3f:
         35:39:cb:c7:40:65:79:9e:d1:fd:d3:08:d9:c7:90:cc:50:14:
         c4:cd:a5:a3:b6:6a:2f:b5:c6:cb:d5:61:9e:d1:d9:c2:36:05:
         34:e7:ef:b6:41:c9:c0:19:08:1b:30:24:ac:65:f4:f3:b8:8d:
         54:73:e9:92:c4:82:87:88:ef:6d:f5:dd:ad:64:46:d3:10:20:
         35:08:bb:55:c9:51:ec:08:b2:0b:58:ca:0e:84:f9:26:24:58:
         12:72:f2:63:d7:be:c6:f3:d8:bf:b2:44:8d:56:52:6d:bf:1c:
         99:d2:af:0a:5a:d5:25:05:7a:22:67:83:8d:fb:b4:cc:9a:38:
         ee:85:21:f9:ea:36:53:ce:f2:1c:48:16:c7:0f:bf:81:94:2a:
         1d:be:1a:52:80:21:71:70:19:84:64:ab:ba:67:0d:0d:75:7b:
         d5:01:37:d5:5f:72:18:e4:1f:7a:16:7b:61:fc:f1:6a:4e:c2:
         c8:f5:6d:30:d1:e4:f7:3b:24:d9:45:6a:2e:0b:33:43:91:ad:
         9a:c7:de:70:e7:c3:23:be:63:89:ac:9a:f4:b4:79:eb:5d:cf:
         e3:e4:50:62:47:71:f6:8c:eb:ea:2e:90:93:bb:d0:aa:6f:22:
         2d:15:64:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:17 2026 by rpki-client