This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File:                     FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier:          eddhUJ37YPow1Mp5gldQXW+TkP2vm7KUjX0M+ccOPYQ=
Subject key identifier:   DA:22:3B:C2:B5:11:63:67:A8:73:27:70:0C:D6:04:E1:8C:42:A2:2F
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer:       /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial:       019C420F47AAAE4D31907E7AE4FD11CB9FF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 11:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:23 +0000
Files and hashes:         1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: 8e1PAGGpx7UqAXWFPaKR0yp3pJ1ml0kjadgYB4mcMts=)
                          2: lJvVKRd6xYXkH3w4sqIr9ELeD6o.roa (hash: misofyoI9rt+yQi6weZU/F8kwAPhAeP1MXdYFSxncAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:47:aa:ae:4d:31:90:7e:7a:e4:fd:11:cb:9f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
        Validity
            Not Before: Feb  9 11:00:23 2026 GMT
            Not After : Feb 10 11:00:23 2026 GMT
        Subject: CN=da223bc2b5116367a87327700cd604e18c42a22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c8:19:b9:70:fc:5c:dd:a1:fd:a8:09:c1:4e:
                    70:77:8c:4f:39:ac:60:a3:52:97:30:ac:71:37:1d:
                    fb:d0:a2:62:4e:9f:76:1c:91:17:77:44:28:4b:45:
                    65:d8:8d:35:53:e1:6b:54:a7:25:06:9d:25:32:d5:
                    11:69:08:f9:b3:75:b9:cb:81:fa:b2:d0:b9:ab:09:
                    ab:61:6b:76:fc:6e:1e:c2:de:f1:7e:dd:5f:95:a1:
                    6f:70:1b:58:b2:81:a6:92:6d:f6:eb:25:76:71:88:
                    34:5b:86:4a:7b:98:07:bf:e6:e1:fa:a3:52:b6:f9:
                    c2:02:9b:42:ab:84:a8:1d:9f:cf:86:4b:05:bc:d7:
                    eb:57:e3:c7:4f:57:5f:f2:d8:ab:3c:d6:e4:ed:80:
                    e0:88:49:91:9b:90:4d:e5:0e:99:45:c2:13:46:19:
                    04:42:74:61:b0:ff:e7:12:2a:b2:03:b3:c5:cd:5d:
                    0e:a7:65:c4:42:32:4a:4a:36:bf:ff:ca:d6:8e:a3:
                    20:72:ad:15:1d:71:73:4f:07:0f:65:01:71:1c:6f:
                    3c:85:57:63:ae:3d:46:98:ec:e6:35:44:82:3a:bc:
                    2a:ac:77:c0:a8:4f:6f:4e:12:14:01:7b:89:cd:50:
                    41:be:57:23:2f:82:73:50:ca:6f:96:87:0a:3e:c9:
                    50:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:22:3B:C2:B5:11:63:67:A8:73:27:70:0C:D6:04:E1:8C:42:A2:2F
            X509v3 Authority Key Identifier:
                keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3e:59:11:27:a5:6a:0a:97:8e:97:25:ba:33:6b:56:43:d5:
         61:2b:36:67:3a:6b:a7:6b:76:33:0e:fc:54:24:6e:a2:7a:6d:
         b9:3c:7c:d8:55:cd:f9:fa:33:cf:6a:4c:de:5f:7e:96:dc:ab:
         04:cf:11:09:89:47:32:5c:43:64:37:60:48:cb:be:eb:1a:51:
         c3:c4:b7:31:da:64:99:b4:88:c1:ab:df:cc:e5:aa:79:0d:ab:
         3d:43:1e:25:46:c0:21:9d:5e:93:f0:21:5a:5c:3f:64:8c:da:
         37:ca:dc:ae:e5:b5:a3:0d:96:d4:bb:a1:53:7b:e7:5b:ee:fc:
         c5:fe:eb:d4:fb:4b:cb:66:71:06:92:11:97:75:ac:f8:c7:6a:
         1d:a0:83:db:78:0c:08:a1:85:ce:af:a3:c4:09:1d:c8:ff:c2:
         fa:82:26:50:25:b2:23:08:f1:ac:a9:58:09:ca:16:ab:b5:41:
         c2:52:cd:8c:68:cb:02:bc:2e:96:b5:8c:85:1d:cb:30:cc:31:
         fa:53:6f:36:e3:7e:0e:c0:0c:ac:da:93:85:7d:ba:47:42:e6:
         7f:c3:1b:a1:7c:fe:3a:8e:83:51:9c:67:86:cd:aa:39:1f:2c:
         de:ed:48:15:ae:93:43:0c:09:3d:ff:16:11:63:bb:d7:1c:2c:
         97:19:59:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD0eqrk0xkH565P0Ry5/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MmZlZGIwMjVhNmNiZDI0ODY4NDE5YTBjYjU2MjlkNDg2
MzU5MTcwHhcNMjYwMjA5MTEwMDIzWhcNMjYwMjEwMTEwMDIzWjAzMTEwLwYDVQQD
EyhkYTIyM2JjMmI1MTE2MzY3YTg3MzI3NzAwY2Q2MDRlMThjNDJhMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMgZuXD8XN2h/agJwU5wd4xPOaxg
o1KXMKxxNx370KJiTp92HJEXd0QoS0Vl2I01U+FrVKclBp0lMtURaQj5s3W5y4H6
stC5qwmrYWt2/G4ewt7xft1flaFvcBtYsoGmkm326yV2cYg0W4ZKe5gHv+bh+qNS
tvnCAptCq4SoHZ/PhksFvNfrV+PHT1df8tirPNbk7YDgiEmRm5BN5Q6ZRcITRhkE
QnRhsP/nEiqyA7PFzV0Op2XEQjJKSja//8rWjqMgcq0VHXFzTwcPZQFxHG88hVdj
rj1GmOzmNUSCOrwqrHfAqE9vThIUAXuJzVBBvlcjL4JzUMpvlocKPslQJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoiO8K1EWNnqHMncAzWBOGMQqIvMB8GA1UdIwQY
MBaAFBUv7bAlpsvSSGhBmgy1Yp1IY1kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hNTliNmQtMDIzOS00MjExLTliYmIt
MWEyMTIxOWU5MTAwLzEvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hNTliNmQtMDIzOS00MjExLTliYmItMWEyMTIxOWU5MTAw
LzEvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABD5ZESel
agqXjpclujNrVkPVYSs2Zzprp2t2Mw78VCRuonptuTx82FXN+fozz2pM3l9+ltyr
BM8RCYlHMlxDZDdgSMu+6xpRw8S3MdpkmbSIwavfzOWqeQ2rPUMeJUbAIZ1ek/Ah
Wlw/ZIzaN8rcruW1ow2W1LuhU3vnW+78xf7r1PtLy2ZxBpIRl3Ws+MdqHaCD23gM
CKGFzq+jxAkdyP/C+oImUCWyIwjxrKlYCcoWq7VBwlLNjGjLArwulrWMhR3LMMwx
+lNvNuN+DsAMrNqThX26R0Lmf8MboXz+Oo6DUZxnhs2qOR8s3u1IFa6TQwwJPf8W
EWO71xwslxlZWg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:28 2026 by rpki-client