This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
File:                     1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft (raw, json)
Hash identifier:          KvdVGWRZ1LszA1o+PYDTM2Zs9s31tR5ETRJFArnzJ5U=
Subject key identifier:   34:DD:25:95:F9:11:5A:7B:51:92:A4:EE:A6:53:A9:B1:05:95:14:8C
Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF
Certificate issuer:       /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
Certificate serial:       019C416A618522A74152B478F6EFB619BF95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
Manifest number:          0FAF
Signing time:             Mon 09 Feb 2026 08:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:16 +0000
Files and hashes:         1: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl (hash: 4mCbliS32gPmhSoQnA7Qs6GuMsvtnb9QoyXs42FoekI=)
                          2: CqbH3RIH6k3OGToDcKs74wUqaFs.roa (hash: 4evCpjOyfa/KENR+HMxzfPquOr1nNuAfj2oYSaueXwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:61:85:22:a7:41:52:b4:78:f6:ef:b6:19:bf:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
        Validity
            Not Before: Feb  9 08:00:16 2026 GMT
            Not After : Feb 10 08:00:16 2026 GMT
        Subject: CN=34dd2595f9115a7b5192a4eea653a9b10595148c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:a5:a7:0a:7b:99:f0:45:92:90:6f:87:67:
                    86:2d:01:2a:5a:55:e8:18:a7:1a:d4:60:e7:57:46:
                    80:6b:00:82:53:ff:70:af:1f:07:b7:21:88:51:42:
                    79:8e:4e:3d:16:72:8b:bd:d4:6d:f6:1a:d5:1c:a0:
                    e4:f1:c8:50:a4:aa:79:2e:33:1b:a4:f9:68:93:14:
                    b9:a9:09:0c:75:ed:d6:c5:e4:12:4c:3e:79:49:14:
                    d6:13:f6:b5:f0:00:2e:65:bd:d4:2e:01:8a:60:1e:
                    d3:f9:7d:6d:c4:ed:80:f7:00:99:a5:cf:4a:ab:5c:
                    60:9c:15:25:66:ac:e8:37:1e:4e:a8:57:cf:84:84:
                    5a:d4:9a:1a:7e:8d:31:ec:c5:6e:92:f3:6d:06:57:
                    59:4d:2d:26:77:2a:08:bb:48:1c:7b:1a:a6:bf:b2:
                    49:33:bd:09:ae:68:5e:81:e5:c7:3d:f6:3f:a2:f2:
                    d7:69:fa:68:2c:0f:1c:b2:cf:38:d9:00:e5:5d:ac:
                    a3:66:98:40:38:fc:29:e2:f7:a2:b9:ec:ec:e0:41:
                    a7:da:c7:8a:57:92:c2:1a:cd:5e:75:8c:f8:2f:9d:
                    e7:e7:b9:55:b8:6a:0d:7b:78:66:06:c1:2b:27:81:
                    c7:76:d9:d7:d5:91:d3:a8:50:56:55:00:7e:cc:b7:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DD:25:95:F9:11:5A:7B:51:92:A4:EE:A6:53:A9:B1:05:95:14:8C
            X509v3 Authority Key Identifier:
                keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:9d:3c:38:06:16:26:a2:53:a5:d0:1e:f5:68:eb:ee:32:2c:
         83:4f:c1:9b:8d:0b:a4:4d:ee:36:ab:ab:5e:fe:33:19:c6:37:
         17:c4:e5:59:f8:8b:ff:31:5b:e9:f2:83:6e:aa:38:09:db:90:
         b3:35:29:be:57:c4:cc:af:25:ed:9f:34:e7:b1:6e:37:a1:21:
         39:1d:7e:f7:88:69:80:06:b9:44:fe:62:4c:d8:92:6d:1b:4e:
         d2:ea:ab:d6:2a:2d:2c:cb:5e:84:17:5d:6d:98:39:58:31:78:
         56:01:61:f5:40:c1:8c:96:8f:08:0c:9c:0c:ed:54:50:52:dd:
         24:41:f7:a3:62:bc:0f:e2:01:f1:39:87:48:15:7d:62:05:8d:
         e2:ca:6d:71:7e:08:5f:47:23:84:62:1b:99:f5:b5:0f:a2:80:
         3f:55:60:53:af:7c:7c:ea:74:2d:a8:a1:2b:d1:a1:48:34:1a:
         2b:8a:37:9d:88:82:45:3d:fa:f5:0e:a1:fd:e8:70:b6:ec:ad:
         71:c4:3c:60:b4:48:9f:c3:43:83:d4:82:e4:ef:b7:85:83:d3:
         cd:4a:25:49:18:0f:ae:61:ae:2e:9f:43:e8:5a:cf:c1:bb:6d:
         96:02:e2:54:db:7b:26:71:1c:f4:a7:fd:b6:78:cc:a5:c0:d2:
         ee:bb:8a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:19 2026 by rpki-client