This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File:                     FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier:          g6vOXEKlwaRf5d5g2Ra5FvpZTaipGiHpOTSWSG3zx1Y=
Subject key identifier:   67:6B:44:A5:E3:D1:06:EB:8D:2A:37:7F:EE:0D:EF:36:7C:AD:2E:74
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer:       /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial:       019C2585A28D3C521E6E0D3074440F0DD999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number:          0DF8
Signing time:             Tue 03 Feb 2026 22:00:40 +0000
Manifest this update:     Tue 03 Feb 2026 22:00:40 +0000
Manifest next update:     Wed 04 Feb 2026 22:00:40 +0000
Files and hashes:         1: FDjfPJ1b2un54RcsxFzXrmIh9vw.roa (hash: Ccv8c7H4XZKfbC/jZrSX0si2V/3E8zoZJ2jD84UglfQ=)
                          2: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: r6rMYmfDLe4C4RIJ+5H3uTLLrjeQosnNa4ee6x5lczs=)
                          3: KDLd_3rPD976SC3XcGSVNGzbbrw.roa (hash: 9uOq1GB8z5yH6EUyG7/81m/WIFx1QPWTnjtsr+U7cVg=)
                          4: RnUS1igSJL82HjX33CCsU61QZck.roa (hash: Ca4C5GBPcPOUxC7vkHsVjTSt9X2mkmWbGHVff1pumQA=)
                          5: nenXOTdR_MN811e1s9Lg1rInHxY.roa (hash: hyWjywUgqQpYVmd438IBWEVlqHt+CxuJlbA1x1JMEic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:25:85:a2:8d:3c:52:1e:6e:0d:30:74:44:0f:0d:d9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
        Validity
            Not Before: Feb  3 22:00:40 2026 GMT
            Not After : Feb  4 22:00:40 2026 GMT
        Subject: CN=676b44a5e3d106eb8d2a377fee0def367cad2e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f5:e2:6b:3e:5e:de:7d:59:b2:b7:2b:e2:33:
                    38:c7:5c:d8:92:b2:18:68:e3:1d:11:a8:21:49:46:
                    0b:0b:ba:94:ab:f7:cf:9f:14:a9:88:cd:d8:35:50:
                    96:7b:a6:86:6b:f2:19:34:a7:a4:5a:b5:ad:20:54:
                    09:0a:d5:0f:3e:ac:6f:15:88:24:93:e4:be:4d:90:
                    0e:85:21:6d:6a:56:94:d2:ca:ca:2d:c2:67:a6:8a:
                    14:ef:14:7a:b2:f5:00:40:63:16:14:89:3d:77:ce:
                    ec:99:a2:53:37:6f:55:b6:0c:c5:e5:4e:ed:3c:ab:
                    b0:14:16:9e:8e:a7:5f:86:18:d7:72:d3:11:fa:0d:
                    42:f5:06:45:d2:78:c3:61:1a:17:4b:e7:0d:00:6f:
                    88:24:4d:22:e9:b6:c9:f3:69:d7:ed:c6:0b:35:7d:
                    15:35:64:78:56:aa:58:46:24:d7:d1:49:f2:ca:69:
                    67:8b:85:30:67:9b:c1:a7:ca:17:5a:d3:35:06:0a:
                    fc:d7:34:c5:bf:41:8d:5b:57:c3:6a:72:b2:a8:af:
                    0b:4b:92:97:07:08:b2:61:48:c7:1b:ac:3f:09:0f:
                    f6:0f:b4:75:0f:83:3e:e3:9d:46:c9:82:fb:83:a4:
                    14:24:9a:29:21:7b:fb:c0:e4:62:50:48:e3:33:cb:
                    60:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6B:44:A5:E3:D1:06:EB:8D:2A:37:7F:EE:0D:EF:36:7C:AD:2E:74
            X509v3 Authority Key Identifier:
                keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8b:18:da:cf:cb:bb:e9:1f:32:49:0e:84:3c:44:78:5f:18:
         8a:77:40:85:82:50:7f:f3:e0:33:a1:c3:cb:8a:d6:1e:45:86:
         93:28:f2:2e:9d:59:bf:ba:bf:c4:94:b3:f6:d7:2e:27:49:df:
         8d:4e:1f:bd:e4:33:67:bf:a0:08:35:da:be:5b:76:1b:c9:db:
         4c:d6:3e:ed:9c:f4:eb:6a:b8:75:4a:23:72:fb:57:c1:65:67:
         34:e6:76:4a:bd:c9:9c:2d:49:dc:50:f0:92:b1:e3:01:3a:0e:
         29:13:3d:d0:f1:5e:5e:97:17:10:5f:f3:74:7b:a1:5c:44:c4:
         10:61:07:74:73:30:91:fb:8d:ca:7f:70:fc:02:ca:11:65:e2:
         34:74:26:0e:86:61:10:4b:4a:72:07:29:00:a0:52:82:39:ef:
         d6:65:77:3a:8e:ef:d9:43:63:aa:6b:74:47:af:33:d0:7f:a9:
         dd:0d:98:04:0c:c8:eb:ab:c1:6f:bb:a5:df:b5:8b:c2:63:3b:
         3e:34:db:2e:1b:5a:0e:ee:ee:da:47:7b:ce:52:15:f6:9a:d4:
         01:68:00:b4:39:75:c5:1e:0a:fd:07:db:57:c9:ae:4b:97:65:
         5d:55:5c:8e:27:ce:8d:3c:d1:81:df:a2:e6:6b:20:78:11:4e:
         2b:c5:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 04:29:36 2026 by rpki-client