This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File:                     fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier:          e2fRzeMiFp1OeAkpGMzAdOs5YRK/JJwAwSdOepPLPy0=
Subject key identifier:   FF:5C:8F:8E:A4:F5:DF:A3:43:7B:B8:DA:69:46:B3:63:30:1F:76:60
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer:       /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial:       019C42EB4E20A487056BF447D4B036DA00EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 15:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:43 +0000
Files and hashes:         1: F9K0hFQXxtbhSJLkCfsnizzHs0s.roa (hash: KFw62b/4AeJuATgKU0557hosLMq4NoClO0EkpuHlym8=)
                          2: H4bKxOh-hy6T67ooqNK2-ku15B8.roa (hash: 3bzS3/bPOoZXps3p17llktHkmheeXpLyUJCVejVIYgE=)
                          3: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: T3iNBDWggjOr63+FXU6BVpoV3soOB6/e/GRRvEp73mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:4e:20:a4:87:05:6b:f4:47:d4:b0:36:da:00:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
        Validity
            Not Before: Feb  9 15:00:43 2026 GMT
            Not After : Feb 10 15:00:43 2026 GMT
        Subject: CN=ff5c8f8ea4f5dfa3437bb8da6946b363301f7660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9c:ab:ad:9e:bd:94:98:01:87:dd:83:a0:76:
                    45:8a:bc:66:54:85:5c:f3:d4:91:79:db:16:c3:05:
                    a3:2b:de:af:7c:c3:f2:f3:49:f3:04:43:77:b5:9c:
                    3f:ee:a3:09:3b:67:91:bf:12:92:dc:be:b6:8f:29:
                    49:f0:d3:60:80:73:5f:64:4d:02:04:61:a2:e4:8a:
                    44:4d:34:de:21:00:2d:2b:13:32:4b:01:00:9d:91:
                    24:67:fe:b4:6c:6c:09:b1:4e:99:1e:08:b1:3e:3d:
                    bb:cc:61:d6:ba:de:e1:d8:3d:7c:af:a4:4d:86:9a:
                    dd:75:72:1b:5e:e0:7f:34:62:c5:6d:11:76:9e:99:
                    fd:21:b1:4c:00:c8:45:e5:b4:7e:4b:c8:73:e3:0d:
                    20:0d:b0:8a:1c:f2:95:d0:8c:21:2c:12:77:17:e3:
                    c1:fa:15:71:37:79:2b:ae:62:f0:91:b8:00:30:d2:
                    13:35:2d:60:4f:b4:e1:df:6f:bf:26:05:0b:af:72:
                    3f:50:8c:85:76:2c:6e:ac:87:bc:2f:8f:1e:ec:d0:
                    d5:08:bb:d8:94:04:f1:3e:d1:93:d8:f5:74:1f:43:
                    40:dd:a9:0e:91:8c:b1:2c:3a:1d:63:df:4f:33:1b:
                    fb:ae:2a:f1:08:a2:18:1b:e5:69:57:ca:50:82:23:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5C:8F:8E:A4:F5:DF:A3:43:7B:B8:DA:69:46:B3:63:30:1F:76:60
            X509v3 Authority Key Identifier:
                keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b2:d3:7a:7a:77:83:be:ab:b5:5e:0f:52:ef:11:d4:4f:6e:
         2a:ed:93:42:10:42:b5:50:cb:8f:81:75:7c:b4:96:51:41:d3:
         96:8b:8e:4c:68:d0:21:29:8c:f4:80:b1:ca:92:72:94:f3:25:
         a3:5a:ec:7d:6b:c3:ae:cd:9e:7e:36:8b:42:b7:dc:b2:6f:c9:
         c0:c4:6a:f6:05:8f:69:19:52:4e:56:7e:7b:79:66:d7:71:46:
         69:92:ab:b5:fa:5f:9e:dc:a9:c0:08:db:68:12:ae:73:1e:69:
         88:dc:cf:3f:35:8d:2f:6d:44:93:bb:7c:65:7c:66:4f:72:5c:
         ff:56:38:23:d3:eb:aa:fa:b4:f3:c3:67:1d:00:59:0b:fb:0c:
         79:72:28:82:8c:6c:3d:37:58:02:03:65:cb:95:fe:d4:cf:67:
         02:de:b2:fa:a5:ef:d8:64:d2:a5:ef:49:8d:bf:54:4b:58:4c:
         bd:e4:3e:0b:93:3f:f7:3a:f0:59:eb:7f:01:16:5e:db:13:9d:
         51:1f:63:0e:97:d0:08:4a:98:a5:11:19:f3:1d:60:3e:08:34:
         c2:4d:53:c5:a4:34:4e:20:e2:27:28:49:02:a8:b3:35:17:0f:
         63:0f:f0:37:a0:c8:49:1f:0b:ec:40:ff:c5:73:1a:3c:42:94:
         60:91:da:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:34 2026 by rpki-client