This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
File:                     fmT8p3Ppn2rcgao85cY2I-4rHdc.mft (raw, json)
Hash identifier:          xg98RkT0eNVt5HWdACEdNzTzM0tLjvZnKGoLejDjlJI=
Subject key identifier:   24:E5:03:6F:C3:25:EB:23:1E:13:32:AD:A5:AA:BA:48:C2:5E:BA:47
Authority key identifier: 7E:64:FC:A7:73:E9:9F:6A:DC:81:AA:3C:E5:C6:36:23:EE:2B:1D:D7
Certificate issuer:       /CN=7e64fca773e99f6adc81aa3ce5c63623ee2b1dd7
Certificate serial:       019C42B42B42478041CDDBB008919A051F0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
Manifest number:          0119
Signing time:             Mon 09 Feb 2026 14:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:29 +0000
Files and hashes:         1: fmT8p3Ppn2rcgao85cY2I-4rHdc.crl (hash: RWJKJUgdzJBmt6tyZroHrhvrtYUH7Pq+tlVy04IEpog=)
                          2: y_GQcAQDbkFTHL71hHYsT9LG7hc.roa (hash: 2J6Fy5jG8JnfTzvk3RxBPKppQZeZ6SvRqxBPKKzZurU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:2b:42:47:80:41:cd:db:b0:08:91:9a:05:1f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e64fca773e99f6adc81aa3ce5c63623ee2b1dd7
        Validity
            Not Before: Feb  9 14:00:29 2026 GMT
            Not After : Feb 10 14:00:29 2026 GMT
        Subject: CN=24e5036fc325eb231e1332ada5aaba48c25eba47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3e:d2:c6:dd:36:1a:61:fd:af:08:cc:7d:08:
                    d6:76:42:df:70:21:fe:51:3b:14:ae:54:d5:9c:ed:
                    be:f4:3a:34:be:b6:db:ef:77:83:2f:51:72:5f:38:
                    24:d4:28:4a:74:6b:c8:15:e0:95:41:bb:17:37:f6:
                    af:b4:1b:51:0c:f5:fe:8f:58:9f:5b:95:df:16:43:
                    4e:d5:42:3b:08:46:c4:ff:57:95:19:ca:c6:10:ba:
                    fc:8d:14:b4:bf:67:41:1a:4d:8a:b0:b1:9a:99:13:
                    b8:ac:5e:e8:89:03:50:59:3e:a4:0b:35:41:c2:e0:
                    2c:c5:ed:7b:a4:bd:31:68:b9:c9:98:cf:ff:2d:3d:
                    2a:ed:9a:c8:a3:85:e4:c5:8c:33:4f:b3:c6:90:3a:
                    e5:de:20:a6:57:74:65:9a:10:f5:8e:ce:ec:ee:0e:
                    e6:c2:76:fd:5b:67:22:36:9b:85:bf:75:15:55:53:
                    15:ec:c2:41:43:ef:b9:cd:f1:18:0f:4e:04:7f:1a:
                    e6:6a:aa:d1:70:b6:59:66:9a:20:f4:68:31:8d:12:
                    0d:e9:f0:b8:d8:d3:4f:fc:c9:85:b7:c0:3b:48:f3:
                    ab:a8:49:98:3e:99:fb:84:cb:97:f0:a0:6a:7e:2f:
                    ec:8e:88:d7:df:63:94:99:bc:dc:7a:97:7e:b7:fb:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E5:03:6F:C3:25:EB:23:1E:13:32:AD:A5:AA:BA:48:C2:5E:BA:47
            X509v3 Authority Key Identifier:
                keyid:7E:64:FC:A7:73:E9:9F:6A:DC:81:AA:3C:E5:C6:36:23:EE:2B:1D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5f:53:78:b4:a5:c1:28:bf:03:8d:12:57:24:1f:ae:ca:ab:
         5c:70:c1:a2:e0:e6:20:d1:63:38:4e:d3:ff:0b:da:ee:98:b2:
         fe:e4:df:40:3e:50:19:33:14:a0:85:2d:82:f8:b9:ef:64:eb:
         d8:07:c8:5a:be:c9:38:b8:80:a1:35:3a:b2:3f:37:48:25:1f:
         30:af:3a:dc:b7:e7:9b:38:e8:76:0b:05:10:d6:68:6a:6f:52:
         95:43:a3:31:64:1b:30:cb:c6:f4:7e:0c:24:f5:e6:5b:ee:45:
         e6:4c:65:51:ff:fa:80:e8:5d:a9:29:fd:d3:c0:d4:0e:1a:06:
         65:b9:f1:c4:ec:84:b0:26:82:c5:26:d9:10:52:e8:20:63:7f:
         f1:59:7b:82:66:29:4d:a1:69:ab:2b:21:d6:8b:89:a4:bb:aa:
         0d:11:4c:06:a3:4f:ca:ea:e2:3c:91:df:cd:7c:81:66:04:a0:
         c5:58:e2:17:4f:bd:e3:9f:e3:a4:8a:fd:40:7f:c6:b4:21:5e:
         6d:68:49:42:3a:fd:38:fa:24:d9:13:90:4d:61:8b:15:10:a4:
         af:7e:45:bd:f7:ba:52:4c:9b:50:3e:5c:34:45:1f:5f:d2:9b:
         9f:6a:28:1a:30:12:d4:c7:4d:1c:a2:32:59:87:6b:bf:9e:53:
         09:a0:73:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:54 2026 by rpki-client