This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
File:                     FWKPn9qri4VJS8M4gJGhIrC7pcg.mft (raw, json)
Hash identifier:          FR8egTyZbx4zBZJxeF+6g+OUsSoZVuGvOEI20+HBYtQ=
Subject key identifier:   7E:75:BC:76:88:56:9F:29:3B:99:75:C2:2F:23:C9:0B:0F:30:98:9C
Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
Certificate issuer:       /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Certificate serial:       019C43C750837802D8209B34E10701A094A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 19:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 19:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 19:01:01 +0000
Files and hashes:         1: FWKPn9qri4VJS8M4gJGhIrC7pcg.crl (hash: 5b/F2AWj0DUebgmCrTkUndDn9aEUxAYN7VVU9Z5/d4w=)
                          2: jduoIfuNX3eaUl5mu4CdCj0unUU.roa (hash: N1HIki9uzOLOpvfkwPn2Cb9BQ/V7gPNrS+CdWusx3Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:50:83:78:02:d8:20:9b:34:e1:07:01:a0:94:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
        Validity
            Not Before: Feb  9 19:01:01 2026 GMT
            Not After : Feb 10 19:01:01 2026 GMT
        Subject: CN=7e75bc7688569f293b9975c22f23c90b0f30989c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:43:68:30:57:c9:6c:bd:91:98:4a:3b:cd:0b:
                    d6:96:0d:cd:f1:26:95:48:df:5c:8e:10:49:94:fe:
                    8b:5f:5b:87:7b:f4:0d:b5:03:16:f0:b4:0d:73:1d:
                    4c:77:7b:25:d7:5c:57:42:5e:cf:8b:e8:54:68:b4:
                    64:99:56:b5:a2:f2:10:63:ad:4e:d4:2d:6d:f4:af:
                    c9:17:d3:d2:d0:c1:be:e1:ae:02:c7:de:92:d4:40:
                    29:24:39:26:31:71:35:aa:f2:4f:ae:24:09:87:f3:
                    87:cc:6a:09:d0:23:fa:7c:94:47:33:36:d7:c2:0c:
                    8d:0f:2d:ae:b5:87:19:ca:c8:82:ba:56:ad:6c:53:
                    a5:54:19:48:a1:0d:60:d4:af:56:32:2f:c9:0d:47:
                    27:35:87:45:0f:00:97:31:a2:6f:0b:4c:5a:ac:b2:
                    24:e7:36:9d:68:82:8b:c1:d1:27:ad:df:32:d5:a0:
                    ec:4c:aa:06:fd:6e:65:1a:ec:c4:2b:15:8f:f3:1a:
                    f9:75:a1:68:0a:f0:94:dd:6d:d7:81:c8:d2:bd:81:
                    2e:6b:91:81:6f:59:8a:e2:e8:7b:53:7b:59:77:38:
                    24:c7:e6:2b:a8:46:21:87:5e:ac:86:09:e4:60:82:
                    6e:b6:0a:ce:5e:d0:eb:da:ac:31:ca:0f:ef:5b:97:
                    06:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:75:BC:76:88:56:9F:29:3B:99:75:C2:2F:23:C9:0B:0F:30:98:9C
            X509v3 Authority Key Identifier:
                keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:e0:88:77:3d:36:e5:a2:66:21:13:9b:56:82:ad:ef:ca:
         d5:ba:b8:70:76:e2:93:ba:70:39:b2:a0:a6:5c:ec:27:59:ec:
         aa:25:6e:b6:a8:62:23:f6:88:9d:29:d4:cb:f3:fc:44:fd:b1:
         29:3d:79:d0:b5:a2:55:68:f0:3a:9b:93:88:b1:3c:fd:18:58:
         ee:f1:98:2b:c1:41:df:53:d7:25:5f:44:a4:33:ed:f1:cf:48:
         89:8e:30:6a:3a:c1:b0:1e:03:bb:c1:3e:10:49:86:ff:97:71:
         01:8f:fa:4c:67:75:c0:3f:fb:47:41:36:05:73:2f:04:d2:c5:
         19:ce:6b:ad:a5:55:2e:10:f5:a9:b8:bc:97:8e:a1:32:9b:52:
         3f:f1:40:13:46:e6:cb:b8:ec:5c:59:ac:5b:66:3a:23:aa:31:
         ea:2b:05:18:50:dc:0c:42:8f:08:bc:99:8c:4b:8d:92:21:3c:
         72:d6:58:ff:03:8d:57:b1:1f:f4:0c:17:46:ce:ab:3d:91:37:
         59:03:12:e2:9b:d7:a6:80:de:b3:b4:6f:45:c6:48:b7:aa:0f:
         a5:df:a4:ec:ea:74:8b:5c:ce:06:37:cc:df:6f:56:7e:e6:44:
         5c:f4:34:03:34:e3:28:b5:eb:d4:e3:36:97:62:29:01:4c:ac:
         2f:0b:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:42 2026 by rpki-client