This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
File:                     fuKac7j6u65GDnkk_nZoR13LmmM.mft (raw, json)
Hash identifier:          SHO6R7Z2U1yWkn98/MTWJkkIG17ovRWcKquUJpkuLo8=
Subject key identifier:   7D:1C:47:A1:FF:0B:25:2E:DC:25:28:EE:76:13:D4:6E:E1:C8:A6:3A
Authority key identifier: 7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63
Certificate issuer:       /CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63
Certificate serial:       019C413470D879FA2A92B4DADF286F181134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
Manifest number:          0789
Signing time:             Mon 09 Feb 2026 07:01:21 +0000
Manifest this update:     Mon 09 Feb 2026 07:01:21 +0000
Manifest next update:     Tue 10 Feb 2026 07:01:21 +0000
Files and hashes:         1: fuKac7j6u65GDnkk_nZoR13LmmM.crl (hash: 3L2A2wcda8N5x/YHmqXq/dIKi3x6WyPQ4l+eBpWakT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:70:d8:79:fa:2a:92:b4:da:df:28:6f:18:11:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63
        Validity
            Not Before: Feb  9 07:01:21 2026 GMT
            Not After : Feb 10 07:01:21 2026 GMT
        Subject: CN=7d1c47a1ff0b252edc2528ee7613d46ee1c8a63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:d7:c4:b2:b4:72:34:55:bd:b3:50:8b:9b:
                    cd:ff:70:27:ed:ab:79:26:db:07:55:fd:cc:c5:03:
                    b9:c4:76:a2:ad:f3:63:03:22:ae:c8:3a:e6:fd:ce:
                    32:a9:87:f7:e0:58:81:ee:21:49:97:ca:1a:8b:bd:
                    24:e9:d5:d4:49:36:2a:03:46:9c:44:61:73:0a:7b:
                    bb:51:d9:6b:ad:84:ac:fc:1b:e8:12:58:da:24:b9:
                    71:90:f1:c1:74:ce:40:66:e6:c5:be:75:a8:2a:98:
                    5f:27:eb:27:30:e2:a7:45:37:a1:8b:f5:57:21:e4:
                    23:7f:53:49:28:33:14:8a:4a:f2:79:47:eb:e2:30:
                    3b:4c:d9:35:f9:0c:6a:48:b0:13:29:10:2c:98:75:
                    88:3c:92:02:ca:46:d0:2a:01:82:f9:c9:30:67:ca:
                    57:a1:ff:fc:1e:9a:c5:ba:1a:f5:5e:f5:f7:2b:be:
                    da:b5:30:eb:e2:0b:0a:73:c8:a6:32:43:85:8a:c5:
                    10:18:7f:5f:ac:47:90:44:5a:62:b8:ae:1c:0c:14:
                    b7:f3:a8:b2:54:4d:76:ff:89:6f:de:28:df:a6:72:
                    6e:8b:77:a2:83:6e:a4:21:dc:ef:ac:8f:8b:c5:24:
                    78:5b:e0:92:74:95:eb:a7:b6:37:5f:81:35:1a:94:
                    8b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1C:47:A1:FF:0B:25:2E:DC:25:28:EE:76:13:D4:6E:E1:C8:A6:3A
            X509v3 Authority Key Identifier:
                keyid:7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ed:19:b6:a5:1a:00:8c:e5:f3:2a:a9:dd:38:59:d6:19:ae:
         49:55:63:0f:0a:25:66:16:51:20:bf:eb:71:c3:9b:6c:d3:32:
         ff:a7:72:39:bc:5f:9a:bd:b1:74:b5:5b:dc:81:d5:9a:77:f2:
         7d:2f:00:c4:0f:cc:f6:6e:e3:2c:b2:04:ff:aa:02:2d:d1:22:
         7e:1f:db:38:7a:91:bc:bc:3c:ac:03:22:0f:18:a4:3f:3b:0e:
         84:b7:e4:53:30:f9:51:9f:da:cd:6c:80:8d:de:a5:b6:f5:95:
         8b:31:a5:2d:ba:a7:da:5a:27:02:58:c4:08:ca:04:44:26:6f:
         bf:da:6f:74:bb:b2:eb:04:8d:02:b8:8b:b9:37:6b:63:a7:c1:
         75:f3:7f:e1:64:9b:cc:66:25:2e:2f:c0:89:0b:0c:bf:cd:ac:
         7b:90:ee:ab:ba:2e:a3:9f:1e:93:ca:64:52:b7:12:3a:fe:54:
         f8:d9:88:e3:5a:55:89:b3:53:75:ac:bc:e2:08:4a:fb:8b:87:
         19:1d:78:c4:5d:ee:98:94:88:24:75:30:59:1f:42:e5:61:5f:
         06:17:30:07:67:14:d6:a4:3a:46:30:c3:31:fe:d8:c2:9c:c0:
         5e:97:93:1e:a3:8c:c8:a8:4b:23:e4:04:14:35:f2:05:cb:d4:
         f5:a0:f3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:18 2026 by rpki-client