This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File:                     FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier:          zjF9DPpQ0YqPHP0+63vHUucqZJn/4BPROSkDTby6MGo=
Subject key identifier:   9F:F1:CA:A9:5C:24:35:3A:E6:96:2A:44:5D:3F:7D:2C:D4:80:E7:F3
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer:       /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial:       019C424675BFE6225B32A479D83955BC042E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number:          090A
Signing time:             Mon 09 Feb 2026 12:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:39 +0000
Files and hashes:         1: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: wizbSkTGZ+IEMbNFKFAo8WQFECKEHdlD4GaTxXiz+pI=)
                          2: aUSEjOq7T5GdB1gJh0wm73gZGVE.roa (hash: I/x2EyeVTVrdNEFq9RRb2OJVpKKmppQFIjO/Hlu4b9k=)
                          3: sCREUy5oJ9tpm5q7Gzs288OxCwI.roa (hash: YBVHBMqxomYQcf4nO/wlXwSvZkGQdWRYPk635BeFEJM=)
                          4: z1g6IVNfelVtJ3ruc6v117EmMOM.roa (hash: Nm253NpZatd7RqxMvrinv6oQUpdzhUYrPUnsdn7rdFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:75:bf:e6:22:5b:32:a4:79:d8:39:55:bc:04:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153f24183d6c95185919349e6e92533736437b94
        Validity
            Not Before: Feb  9 12:00:39 2026 GMT
            Not After : Feb 10 12:00:39 2026 GMT
        Subject: CN=9ff1caa95c24353ae6962a445d3f7d2cd480e7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0d:56:ed:98:37:a6:c3:9c:0a:fb:f0:a3:59:
                    47:74:7f:5f:36:10:97:41:ae:50:bd:33:eb:5c:a1:
                    d8:39:cd:62:44:a0:9a:a7:eb:9b:d4:12:aa:b7:0b:
                    59:8e:01:05:60:94:37:f7:57:0b:c0:81:1a:e9:bc:
                    f7:60:54:16:0e:dc:80:c1:9d:1a:db:84:af:0b:88:
                    4e:87:2c:09:5d:5e:58:8a:8a:3c:9a:1f:71:45:6f:
                    e0:a0:8f:da:8a:7b:f8:3d:ff:cc:e4:26:10:a0:6a:
                    2f:eb:a9:62:4d:52:34:09:a9:ee:e6:2a:d6:2f:95:
                    13:3c:5c:2c:b5:c0:90:b5:73:00:d9:f1:00:d5:ad:
                    ec:b6:d4:57:f4:06:a3:24:db:12:b6:09:e9:eb:c2:
                    eb:3c:0d:02:f9:6a:14:8e:a0:8b:30:7a:fd:17:65:
                    69:83:36:4a:b5:69:13:f8:25:c7:7e:fe:36:38:9a:
                    45:1e:a7:52:27:4a:06:30:8b:69:ef:75:a2:48:54:
                    a0:a5:5e:19:f1:fc:f8:e0:5f:60:5f:79:b0:34:40:
                    cc:eb:7f:7d:ee:47:0b:8d:1b:aa:9c:ad:01:17:d9:
                    b2:7e:72:ea:eb:d0:3d:63:c0:cf:7f:f9:09:53:53:
                    59:2f:1f:11:1d:ed:c0:f0:c0:94:e2:c0:6b:c2:9a:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F1:CA:A9:5C:24:35:3A:E6:96:2A:44:5D:3F:7D:2C:D4:80:E7:F3
            X509v3 Authority Key Identifier:
                keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:98:0d:5f:9f:6b:d7:36:ed:11:7a:3d:de:07:db:57:da:87:
         3c:38:a8:c9:10:98:5d:52:5c:4f:3c:5b:5a:63:a2:13:29:2e:
         5f:a7:cd:0a:ce:bd:e7:3d:e5:1b:08:72:f7:ea:94:f3:fd:32:
         8b:6a:63:2a:23:a7:f5:41:5b:2a:d2:df:75:0f:96:cd:43:7b:
         33:8e:65:cd:e4:cc:ee:09:93:a3:f6:59:6d:05:54:85:09:c9:
         90:a6:aa:1b:86:fd:6f:fd:8a:20:d9:19:41:90:df:02:0f:03:
         f3:4c:07:62:f8:a6:87:07:bb:3c:be:0e:25:45:4b:d7:b8:57:
         15:e2:3a:15:8c:67:5b:f2:fd:08:61:38:31:b8:39:b8:9b:11:
         09:9d:24:7f:9a:02:c3:e2:22:95:3c:30:de:3f:5b:11:f7:10:
         b2:96:e5:35:c3:70:0e:d7:11:47:9a:90:72:18:9b:89:df:43:
         bc:4c:71:83:ee:b1:45:71:7f:c3:72:f4:72:ff:e0:87:c2:9a:
         44:39:78:c1:41:9a:26:b0:58:d7:3c:51:c5:a1:9b:d5:d5:60:
         47:d1:ed:50:c4:66:79:4e:ec:24:fb:6b:fc:88:60:52:cd:32:
         68:5d:01:98:b5:d5:63:ef:b1:7c:9e:e8:cc:b0:c2:c7:5e:ad:
         2b:76:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:30 2026 by rpki-client