This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
File:                     fKWYMippkFpcbgKVoMoftVZmwUs.mft (raw, json)
Hash identifier:          yHr5ajytV9LqlWaTMHmMtVXYdXlvBDuv5rmdkSRQEIw=
Subject key identifier:   9C:7E:AF:8A:2C:C3:1A:0A:BC:4B:A9:9C:CD:43:FC:1D:D4:89:E6:4D
Authority key identifier: 7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
Certificate issuer:       /CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Certificate serial:       019C43FE031D4A73D3254B380059C2349580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
Manifest number:          07B6
Signing time:             Mon 09 Feb 2026 20:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:46 +0000
Files and hashes:         1: Xip4xkGmyDCpD1V1TAhyG7oBSoo.roa (hash: JS7Y9TGnxDiomHGfAPVHy5QyfD9ZOLvpsEHgj2zFlNg=)
                          2: fKWYMippkFpcbgKVoMoftVZmwUs.crl (hash: DO19j3apB+1jqIacTgjGnHumtpq597TX5Xd73JEtxro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:03:1d:4a:73:d3:25:4b:38:00:59:c2:34:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
        Validity
            Not Before: Feb  9 20:00:46 2026 GMT
            Not After : Feb 10 20:00:46 2026 GMT
        Subject: CN=9c7eaf8a2cc31a0abc4ba99ccd43fc1dd489e64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:4b:a6:68:e3:3f:34:26:8c:09:db:b3:d9:
                    b9:16:3d:c1:9d:ed:6c:4a:a6:9d:0b:7c:1c:6d:89:
                    39:ca:22:8b:aa:f6:ce:16:20:b2:47:e6:96:fb:e5:
                    f6:c0:f4:3c:16:84:dd:54:e2:a6:8a:35:ee:11:10:
                    f3:1e:4e:6c:32:62:7f:7e:42:74:19:fd:ce:70:df:
                    90:11:29:62:96:0d:27:58:96:ae:52:c4:56:5e:a3:
                    89:3f:85:22:7d:21:7e:48:56:c7:cc:ba:3a:91:fc:
                    ed:43:47:11:50:2f:2c:71:ae:9e:2a:75:21:2c:51:
                    59:ef:82:eb:ac:83:a0:6f:14:3d:eb:e3:cc:50:3d:
                    fd:75:95:30:bf:88:dd:f3:b3:6b:75:0e:d9:97:14:
                    68:6a:26:db:9d:9f:0c:82:16:30:01:74:d7:fa:f5:
                    30:72:88:ec:4e:76:19:0e:d2:5b:0b:a3:12:fe:0d:
                    8a:05:e5:30:d5:a1:f0:98:2b:62:3c:b1:74:7b:9b:
                    91:c1:56:ff:40:d5:2d:83:75:f5:74:1f:e6:6e:63:
                    47:15:ec:fb:ab:44:c5:b6:2b:22:bd:46:ad:83:0c:
                    0a:7a:41:c7:aa:df:c7:8e:58:aa:98:a5:57:32:35:
                    71:50:93:af:ae:28:0a:6b:8d:ff:c2:ca:16:11:09:
                    75:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7E:AF:8A:2C:C3:1A:0A:BC:4B:A9:9C:CD:43:FC:1D:D4:89:E6:4D
            X509v3 Authority Key Identifier:
                keyid:7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2c:c4:75:e5:93:a4:4f:de:0e:b6:b2:84:98:9d:87:7a:e5:
         6b:cb:b0:a7:99:70:32:85:ea:4e:5b:cf:f9:85:47:dd:ca:6e:
         d9:c7:42:c8:9e:a4:0c:25:11:06:6d:66:ce:25:66:66:da:1a:
         1b:6f:75:2e:aa:8b:d2:ef:91:ca:9e:8c:48:db:51:ee:ae:89:
         ed:76:36:73:43:94:47:d2:e7:0e:44:dd:25:52:7e:96:7f:3d:
         c9:c1:2d:99:28:76:d5:8e:b8:a6:a8:67:82:a4:62:df:72:ba:
         fd:10:24:14:90:d3:71:cf:48:46:72:e0:e6:09:6f:aa:dd:01:
         b4:fd:3d:f6:23:97:cd:79:8f:b0:73:aa:e7:ec:5c:4c:a1:39:
         aa:9d:6f:8d:b2:e1:07:7d:ac:e3:97:b1:17:60:66:35:6c:7a:
         50:06:9e:1c:ff:88:e6:ab:8f:e4:a5:6f:3e:43:d7:2b:56:ef:
         71:68:e8:5f:60:a4:ab:37:71:0e:29:69:9a:91:b3:28:bf:e1:
         4a:d7:e8:ca:c8:6a:d8:b1:d5:12:4e:a5:98:2e:fa:9b:2d:0a:
         98:79:6d:f0:0e:4f:d1:19:1c:d9:4d:ab:5f:93:94:ba:cb:96:
         d8:0a:1e:fe:15:97:97:be:a6:df:e9:f3:2d:7f:55:e6:00:ce:
         21:2b:3b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:51 2026 by rpki-client