This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File:                     FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier:          24YSqqpXLwnRIn/Idef28PuToj5E8ymgOCJvmPEG7d0=
Subject key identifier:   E5:A0:35:45:52:B0:0E:BE:08:D3:C8:05:D9:AA:35:B6:2A:63:7D:D0
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer:       /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial:       019C435937A400047980C54DDB26FEB56DA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number:          0C22
Signing time:             Mon 09 Feb 2026 17:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:46 +0000
Files and hashes:         1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: BdDZWwUf91UvqQOkT9+/fypcvohfpI/q8WKaEPZnlyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:37:a4:00:04:79:80:c5:4d:db:26:fe:b5:6d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
        Validity
            Not Before: Feb  9 17:00:46 2026 GMT
            Not After : Feb 10 17:00:46 2026 GMT
        Subject: CN=e5a0354552b00ebe08d3c805d9aa35b62a637dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:81:ce:6d:33:37:06:16:f5:af:0f:cc:08:
                    56:fc:36:92:70:02:e1:c6:5a:90:29:6f:ab:78:68:
                    98:32:0f:03:7d:c2:58:22:bb:99:f5:2a:ba:41:7d:
                    e0:fe:94:25:fb:6c:30:b9:f7:40:db:ee:8d:be:25:
                    ca:54:f0:f8:6c:77:3a:e0:1a:82:9d:d6:86:21:92:
                    e1:ec:5e:c6:32:0a:dc:08:2d:ae:43:7a:e6:d5:ad:
                    6b:51:40:97:30:16:4f:d2:08:75:45:7c:47:25:36:
                    6c:bb:1b:45:e0:7e:7d:5c:cc:b2:0a:bf:a2:82:f7:
                    bf:16:70:dc:18:e9:e9:d7:48:9f:fd:d4:fd:ad:16:
                    f1:7d:49:52:08:63:54:eb:f5:fb:06:8a:7d:f3:68:
                    2b:47:0d:05:82:bc:98:87:87:fb:19:fe:d2:f8:29:
                    a5:2c:09:7d:6a:13:e6:b1:68:61:ba:d5:43:0d:29:
                    7f:bc:fc:14:22:9a:c6:42:70:27:c3:7b:55:d5:42:
                    4e:b1:47:af:ff:f7:3c:e1:99:3e:dd:98:2f:b4:db:
                    ef:5d:c4:d6:67:4b:d2:8a:3e:fb:78:35:bf:27:2c:
                    26:04:58:66:1d:5b:c7:67:e7:d4:a4:52:13:7a:0e:
                    9e:12:e1:87:c3:ae:b4:c1:31:7f:ca:69:5e:50:cb:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A0:35:45:52:B0:0E:BE:08:D3:C8:05:D9:AA:35:B6:2A:63:7D:D0
            X509v3 Authority Key Identifier:
                keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:7f:9e:dd:8f:bb:b1:7d:2c:76:4c:d0:d9:d0:b7:3f:db:07:
         51:1a:f2:db:dc:23:23:5b:dd:21:f7:bf:26:a8:24:aa:0d:1f:
         e4:91:50:73:51:77:3d:44:53:21:74:3d:75:31:c8:2a:c0:9a:
         87:7b:a4:d4:a2:4f:86:c3:e4:71:69:41:86:d0:36:c7:0d:4d:
         01:fb:d6:7f:60:ee:b1:bf:67:ef:00:de:2a:66:30:81:7c:96:
         a8:d9:ce:8a:d1:12:7a:d6:ac:70:46:83:79:a9:3e:87:79:b9:
         ab:c2:f4:77:73:9c:53:f8:a7:58:bc:ff:d8:1e:95:f7:ff:1f:
         97:36:39:e1:d2:61:6f:9d:02:a4:86:47:df:64:7d:a3:0e:01:
         b3:da:d5:8d:9e:e2:57:e8:c1:43:3f:ee:a7:cc:42:22:0d:f1:
         17:83:68:32:b6:9b:5c:7e:fc:4e:07:51:ff:db:0c:9a:36:c8:
         b3:8b:a7:2f:0c:5c:3f:fa:af:b2:52:b3:54:67:d8:08:eb:a2:
         7d:5f:0d:db:a5:0f:f5:1c:14:31:06:f4:e0:5c:bb:d3:67:92:
         64:bc:99:f7:ed:5d:c1:16:cb:3e:1e:63:c9:5d:a1:10:76:ee:
         46:0f:cb:af:16:31:18:97:30:2d:37:e4:be:2e:b1:c3:1f:1a:
         16:c2:ce:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:14 2026 by rpki-client