This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
File:                     FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json)
Hash identifier:          lsc8dx7f0lW0ruVvpXzvWporb8ISTVbO+Ji+aWcg2Og=
Subject key identifier:   2B:78:4A:7A:75:00:0F:8F:BB:95:41:A9:73:2B:54:E2:75:BE:28:DB
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Certificate issuer:       /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial:       019C42464CB2EE3123E6C2A32961A6372E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 12:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:29 +0000
Files and hashes:         1: 04V3xL-wvyvCRWgSYkpGUkjiE8s.roa (hash: FQS7L+Hj2zSXnBRorh0m7ldyBShNLVTNeylqQBQZHwo=)
                          2: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: LkI1ulueC5TT/kjP653ERdJjWWQJGO+qByGZ8GFe0+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:4c:b2:ee:31:23:e6:c2:a3:29:61:a6:37:2e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
        Validity
            Not Before: Feb  9 12:00:29 2026 GMT
            Not After : Feb 10 12:00:29 2026 GMT
        Subject: CN=2b784a7a75000f8fbb9541a9732b54e275be28db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:d5:55:21:fc:ba:d0:4a:9b:31:0f:12:4f:
                    20:80:f2:fa:c4:29:58:77:6b:99:d6:20:71:ff:96:
                    37:3d:84:40:36:a4:d9:bd:88:6f:c5:96:12:3d:ba:
                    36:de:22:b9:44:66:71:0b:56:80:f7:1f:f4:5d:5e:
                    c5:bd:0d:b1:57:68:06:84:d7:0f:20:f4:55:01:bb:
                    e5:c0:1d:ff:28:29:4f:73:8a:f1:b8:0b:24:00:3b:
                    da:83:98:5a:72:2e:41:09:f4:9a:cf:60:63:12:d5:
                    1e:b6:ea:21:cf:c7:44:85:77:71:27:aa:e4:30:4a:
                    98:73:75:e6:6c:bf:97:1b:1c:c5:a7:9f:9e:97:9c:
                    a7:70:09:77:b5:a4:0d:30:da:28:52:fa:79:65:1c:
                    b2:a0:e7:4c:23:77:77:23:12:b1:3f:93:e2:98:0e:
                    79:17:6b:48:37:ed:6f:af:03:d3:c9:31:bc:73:9a:
                    ec:a9:e0:38:83:a6:3f:69:d1:1f:e7:71:d2:17:d6:
                    34:67:db:34:b6:09:1f:26:e1:e7:66:37:27:c6:cb:
                    59:1d:9e:c6:22:02:c1:9f:cb:15:55:72:97:01:0f:
                    e4:43:9c:eb:ee:58:48:e9:31:7e:66:49:1c:c1:ca:
                    8f:f8:67:72:fa:26:ef:da:65:0f:7c:c3:35:7a:3b:
                    20:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:78:4A:7A:75:00:0F:8F:BB:95:41:A9:73:2B:54:E2:75:BE:28:DB
            X509v3 Authority Key Identifier:
                keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:81:ad:e4:b8:cb:31:f3:5d:ee:cf:e2:6e:87:bd:08:4f:75:
         c9:9d:6d:3b:33:6f:48:55:9e:0a:5b:92:c7:1d:0c:ab:9a:e8:
         cb:2d:6e:29:3c:8c:0f:7f:44:c2:1d:66:d6:ac:f4:0e:c2:0e:
         e0:61:81:cc:7d:ce:13:a9:a0:29:38:d9:75:5b:3a:15:23:f3:
         ef:c4:46:7e:04:51:78:30:05:bc:97:89:dd:5f:1f:b8:e7:a8:
         e4:3d:1a:a1:b3:ab:8f:2f:6a:50:62:6c:74:26:99:6a:05:33:
         45:87:01:7f:47:cc:52:9e:86:f5:b6:6d:b3:08:8b:57:68:ff:
         c1:33:03:b5:6c:1f:e0:dd:4d:59:6c:2b:60:8a:41:db:d0:e0:
         a0:ff:39:9b:f1:93:78:e6:a9:6c:86:16:f7:32:a3:1b:33:40:
         e1:3d:44:fe:f0:06:37:4f:2d:01:dd:39:4c:bd:fd:50:57:27:
         69:e9:fa:b9:3c:31:6b:5a:c9:5c:e2:d1:2d:5e:a9:c7:34:f8:
         97:41:f4:a3:c9:4a:b0:71:09:67:82:d0:9f:44:88:89:86:96:
         ca:e1:02:92:5b:a5:c1:4c:e3:29:cf:29:7f:2e:56:90:f3:77:
         9f:b1:83:ad:3c:a0:33:36:bf:f9:1a:0d:06:73:95:c8:fe:18:
         3e:db:f4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:10 2026 by rpki-client