This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
File:                     FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft (raw, json)
Hash identifier:          tDQC9LF1onaY6E0V6ttkvIKVB4LLB30FPi3aT5CWJdQ=
Subject key identifier:   C8:C1:4D:A5:E8:07:91:27:E5:E7:40:39:D4:A5:66:2A:F6:97:84:72
Authority key identifier: 15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
Certificate issuer:       /CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Certificate serial:       019C4390A24AB2A6E9915FBED2EAFC802C12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 18:01:17 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:17 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:17 +0000
Files and hashes:         1: FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl (hash: ZvdAb34/IvIDZe+Wa6Dng6NA1wVhyaDWvVSTH098VnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:a2:4a:b2:a6:e9:91:5f:be:d2:ea:fc:80:2c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
        Validity
            Not Before: Feb  9 18:01:17 2026 GMT
            Not After : Feb 10 18:01:17 2026 GMT
        Subject: CN=c8c14da5e8079127e5e74039d4a5662af6978472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fa:e3:99:fc:51:51:68:6a:54:e3:5e:b5:a8:
                    f5:38:65:68:09:6e:d6:23:ce:35:84:a7:cb:92:93:
                    88:cb:c8:7e:0c:15:78:5c:2e:5b:d4:9a:97:a2:c2:
                    e5:12:70:7b:9b:56:44:8c:38:e5:8c:d5:07:89:94:
                    1e:6c:39:4a:fa:90:2d:9f:a6:af:bb:28:89:94:26:
                    55:6b:d9:8d:61:99:aa:36:fd:19:cd:a9:5f:84:00:
                    26:25:b9:dd:79:70:95:76:a1:b0:9d:28:4f:f9:a9:
                    92:ac:d9:25:0a:2b:b6:30:aa:8b:d2:06:4b:3c:0b:
                    71:13:03:db:e2:a2:52:09:24:67:60:50:d0:29:3e:
                    1b:31:f3:a3:e0:d4:07:84:0c:75:26:75:66:9e:a6:
                    43:e5:0b:e6:b0:5d:dd:e0:49:ac:8e:ec:d4:04:6f:
                    bc:0a:8f:8d:d2:14:c7:39:45:03:5f:c0:71:fb:f4:
                    61:20:b9:16:dc:64:d3:32:71:85:56:1f:c3:69:57:
                    58:ca:07:f3:8c:d6:88:fb:c1:53:5b:02:19:f3:28:
                    49:11:0f:7a:df:45:c4:98:34:e2:a9:39:7b:ac:ec:
                    65:41:d0:5a:c6:ab:e1:d1:97:74:4e:73:71:31:f3:
                    6b:ab:c8:e5:4b:21:2b:f0:c6:46:5c:fa:ec:35:b6:
                    16:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C1:4D:A5:E8:07:91:27:E5:E7:40:39:D4:A5:66:2A:F6:97:84:72
            X509v3 Authority Key Identifier:
                keyid:15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:03:af:07:0e:e9:a6:15:a8:dc:4c:e5:c2:20:9a:33:a6:b5:
         d2:a2:80:9b:43:26:ab:46:80:ef:6d:f0:72:04:09:c7:e3:7a:
         7e:3a:d8:66:92:a0:34:31:aa:c0:f8:82:26:b6:58:c1:45:e6:
         d4:81:7a:e0:fb:94:cd:e3:5a:26:29:30:af:5c:9c:ff:53:e7:
         60:62:9f:f9:41:20:c3:87:bc:20:62:e1:22:fb:52:fc:0f:6c:
         49:e6:4e:e6:99:04:16:74:8e:9e:a1:ea:70:a8:c7:45:ce:27:
         42:67:53:e9:4f:cc:4e:70:3f:58:04:91:78:f6:47:a6:e7:3a:
         97:5f:a8:ae:97:2f:db:17:c7:84:08:74:39:0a:1b:72:0c:88:
         01:c2:e1:09:f5:ea:7f:bb:d4:b8:94:db:22:cf:71:1b:0c:d2:
         47:e9:0d:ce:59:30:d3:2b:7b:21:de:cd:47:f0:4a:31:85:78:
         11:18:b1:55:1c:b5:a8:38:d3:82:8b:7d:e6:02:00:8b:99:a9:
         44:6f:61:f4:c8:52:cd:30:80:db:8c:cc:e1:b2:aa:fd:b2:4b:
         8e:61:f7:77:56:81:63:0a:fc:dc:0d:a2:55:68:b9:80:ac:14:
         ed:94:b2:8d:bc:e0:8e:77:89:1d:99:88:3d:82:a3:5b:20:3f:
         3f:d3:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:06 2026 by rpki-client