This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File:                     FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier:          jPr1QbL16ZzzLXSwpa65Q2b/kDgEFA7aMYlxGxti4OQ=
Subject key identifier:   BA:80:79:35:4B:55:1C:5D:52:38:C4:ED:DF:98:AD:65:73:6E:76:1D
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer:       /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial:       019C443498F17B57F7CF5248A97B534C8B6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number:          1356
Signing time:             Mon 09 Feb 2026 21:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:23 +0000
Files and hashes:         1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: f4vpFdSj3U/rOxWzEuMIy0gPZlPyw5pEujAQmhLOi+g=)
                          2: HW9BEyLLal7OfEp_A46sqT8pKZI.roa (hash: 6gY+Oh6ZWBmv2AAZJTbOLnfk6tGnOt3EIE4RNOngnwE=)
                          3: xHXYIM9aAisCY-mM5efUJdAUuEs.roa (hash: u+GmdL8eno8aJmCmvMCfKfQZ1GhLAd0ROGdlLYM/mfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:98:f1:7b:57:f7:cf:52:48:a9:7b:53:4c:8b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
        Validity
            Not Before: Feb  9 21:00:23 2026 GMT
            Not After : Feb 10 21:00:23 2026 GMT
        Subject: CN=ba8079354b551c5d5238c4eddf98ad65736e761d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:a0:b7:2e:ca:75:c3:cc:0f:17:55:23:3b:
                    7e:b5:00:e2:47:03:0b:89:6b:9c:81:d0:32:f6:e9:
                    4a:52:e5:1d:12:64:69:33:d2:6c:b6:c3:ec:ba:89:
                    f5:e8:6a:87:8d:99:13:ff:3d:32:7f:48:13:fe:43:
                    08:64:85:c6:32:9e:15:e5:e6:35:c3:1f:dc:2a:e2:
                    fb:dc:e2:f9:50:51:11:46:ab:a8:a8:90:9c:59:75:
                    96:60:11:30:07:aa:60:13:75:b4:fa:21:ff:61:dd:
                    35:18:0c:26:61:69:1e:26:72:10:01:3d:b4:fc:0e:
                    3a:f0:63:b0:b5:ed:cf:f4:ab:76:89:40:f1:2d:df:
                    53:3d:f6:79:a3:b3:25:b9:a8:10:dc:e9:c6:04:b0:
                    21:6a:a3:1e:9a:e9:9a:a2:ab:28:f5:32:8b:1f:8f:
                    ed:02:36:98:cf:48:87:9c:2c:be:1f:75:86:d7:5b:
                    a5:98:79:11:62:d7:8f:0e:67:f7:cf:5a:32:8b:1b:
                    8e:4a:b8:e4:5e:12:1f:3f:a5:47:9b:13:4a:b4:3f:
                    77:49:2e:d1:e8:a0:d9:a0:ca:cf:75:c4:2f:f4:fe:
                    30:bf:d0:46:25:8e:8c:30:c3:79:6a:7d:db:33:7e:
                    1a:f7:b5:a3:c2:d1:de:38:e3:20:63:d0:a6:17:e9:
                    84:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:80:79:35:4B:55:1C:5D:52:38:C4:ED:DF:98:AD:65:73:6E:76:1D
            X509v3 Authority Key Identifier:
                keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:b3:c7:ce:69:ba:f8:d2:a7:8c:14:4d:36:89:4d:53:76:
         32:96:21:10:bc:88:70:a8:23:09:0b:4d:d7:8b:13:0f:42:0b:
         1d:36:db:76:e8:24:5f:cf:12:c7:9d:f5:1b:6b:50:8d:89:f7:
         49:16:63:d4:4d:92:29:59:31:91:e2:53:7b:a2:af:40:ab:66:
         82:ba:a7:00:cb:66:50:d1:74:d2:21:a7:39:89:c9:c9:e9:de:
         60:80:7b:4e:ba:6b:e2:9e:0a:4a:ff:10:3a:a9:14:1b:2e:6f:
         44:a4:33:6b:8f:96:2a:d1:d1:e5:31:4e:8f:43:11:15:ec:ff:
         67:af:f3:66:f4:0e:d7:ef:61:32:5a:3e:d2:03:3b:22:00:60:
         e7:65:7b:61:20:12:5d:99:56:00:b8:63:16:c0:29:e7:f2:c0:
         43:5f:7c:f5:9d:25:7c:41:09:ec:6f:8e:ea:6b:48:8e:de:c1:
         b1:44:67:2e:ad:12:45:cf:af:4a:1f:a9:28:47:c3:52:80:c2:
         06:c7:88:3e:58:31:94:61:75:a3:a7:1b:30:67:71:47:89:51:
         a9:40:a2:3c:11:bd:0a:98:55:4f:9b:de:16:53:7b:44:4a:f1:
         e5:fe:c1:d2:03:eb:ce:8c:0a:4b:54:99:65:05:f9:59:f0:4e:
         3d:0c:82:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:36:23 2026 by rpki-client