This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
File:                     fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json)
Hash identifier:          dmXPJ9r8U7/Rw4sDtlnHx80cTaopMd1Ik9gNzDPl3JA=
Subject key identifier:   6F:D2:A1:FF:51:2D:7A:C0:E3:9D:DA:39:AC:0A:FE:91:F4:5B:7A:D7
Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
Certificate issuer:       /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Certificate serial:       019C4322259AD25A1B29DF4C5BEB36BD2B32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
Manifest number:          10CC
Signing time:             Mon 09 Feb 2026 16:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:37 +0000
Files and hashes:         1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: M3BPcCMR0I9NzRLwW95Hx4OagxKuPBPXvNTFiIC6V4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:25:9a:d2:5a:1b:29:df:4c:5b:eb:36:bd:2b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
        Validity
            Not Before: Feb  9 16:00:37 2026 GMT
            Not After : Feb 10 16:00:37 2026 GMT
        Subject: CN=6fd2a1ff512d7ac0e39dda39ac0afe91f45b7ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5e:0b:79:1e:6b:e6:1c:50:e9:8d:f9:4c:8e:
                    41:78:56:21:c7:26:7d:b5:80:a3:25:d6:73:72:bf:
                    2e:b6:b6:0a:d1:df:b5:27:6f:e3:bd:25:0e:95:8a:
                    cd:6c:dc:14:6a:9e:e2:2a:b5:0e:57:09:70:41:a7:
                    24:31:63:e1:24:14:54:5d:3e:66:f6:d8:9c:f2:8f:
                    34:35:84:cf:ba:70:af:aa:a2:f0:4b:c5:77:66:0d:
                    5d:48:cb:8d:6b:a2:0c:14:8a:65:a5:f3:68:57:02:
                    4b:aa:b6:5b:c8:5d:17:2a:ef:d8:3b:0b:b4:77:a7:
                    b4:ec:10:80:92:81:1a:ac:ba:86:dc:13:8f:af:0d:
                    ff:d0:f8:81:42:51:d8:35:bc:55:aa:b3:db:f2:5b:
                    ea:c3:d3:a5:4c:98:df:52:ad:b3:84:16:d8:8a:b8:
                    2a:6f:cf:38:b0:9c:cc:f0:42:6f:86:6b:da:d4:f4:
                    57:c5:23:e2:cf:74:c3:04:4d:08:0e:29:ec:10:f0:
                    be:32:bf:92:83:6f:2e:85:1e:63:25:f7:15:a4:6c:
                    94:1a:c0:16:99:6b:59:16:74:22:73:4b:de:4b:6f:
                    4f:f7:36:55:cf:0d:75:ce:db:79:ff:3b:d9:97:28:
                    28:d7:6d:e7:3f:de:d1:4e:12:62:43:69:b5:3a:b6:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D2:A1:FF:51:2D:7A:C0:E3:9D:DA:39:AC:0A:FE:91:F4:5B:7A:D7
            X509v3 Authority Key Identifier:
                keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:83:9e:6f:15:c8:33:45:39:50:c2:42:a1:27:e7:bf:af:39:
         bb:2d:35:1b:7b:e4:2b:43:5c:d4:87:fe:95:72:da:4c:24:f9:
         ae:db:5c:47:d1:1f:54:5f:92:37:ad:9f:e7:13:f9:4e:e7:47:
         c8:9c:0f:10:b7:8e:90:5e:d2:92:fc:ae:4a:64:ac:c7:e4:44:
         c6:74:18:7e:54:54:1f:d8:de:72:e2:9d:e6:e9:a3:2a:fb:e2:
         8d:1a:54:2d:4c:bd:75:ec:c6:cd:42:c1:d9:74:50:c5:d9:73:
         d1:dc:d7:0e:ca:bc:97:16:95:f9:e5:6e:a3:1c:24:51:61:26:
         ee:69:8b:8b:e2:7d:56:82:bb:f1:0e:81:9a:18:52:2a:88:bd:
         10:d5:7d:4c:b4:8c:ca:dc:b3:90:c3:6d:6a:fe:e3:3a:09:66:
         36:08:63:06:66:ec:c9:c3:d8:67:7b:44:18:cd:3c:b0:58:f7:
         d9:5b:3e:57:53:1d:2d:b6:13:38:2f:ac:a1:b6:d4:08:4f:76:
         f2:89:01:db:0c:1f:bb:fd:3a:5a:72:5e:f9:91:e3:9a:22:68:
         21:c6:02:a0:26:a8:92:0e:b5:79:fb:81:2c:21:20:53:0b:aa:
         f6:a3:39:3c:85:13:fa:f4:f2:fb:a0:93:d2:5a:b1:cf:5e:a9:
         27:ca:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:10 2026 by rpki-client