This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
File:                     fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json)
Hash identifier:          k14zA/w2uNhDYDFKfWqKL0zN7zogjlJBH3J4e9sQyBc=
Subject key identifier:   B9:17:3E:1D:F9:6F:E2:1D:D7:4E:B3:56:40:E3:F0:37:80:D5:2E:2C
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Certificate issuer:       /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial:       019C43590D582C4B4C54B3CA7B78234CEE2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
Manifest number:          1713
Signing time:             Mon 09 Feb 2026 17:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:35 +0000
Files and hashes:         1: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: npIObLU3yvyI9zFnYtIStdD/rFYy1kmpl5VVKUngiJU=)
                          2: mmW_PspRyWWJ-0koYlr6B2-6cDU.roa (hash: +DO/fJxCRM9CFhtpysXEvyA/4qA5BtqezUG8hfqugKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:0d:58:2c:4b:4c:54:b3:ca:7b:78:23:4c:ee:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
        Validity
            Not Before: Feb  9 17:00:35 2026 GMT
            Not After : Feb 10 17:00:35 2026 GMT
        Subject: CN=b9173e1df96fe21dd74eb35640e3f03780d52e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:22:fe:b5:1b:12:ff:34:ff:31:cf:63:6d:
                    dd:50:0e:10:1c:28:af:e2:0f:57:35:23:c6:6f:be:
                    a8:0c:4a:6f:db:05:b4:82:81:4e:fd:2c:d9:30:33:
                    08:f1:12:3b:5d:3c:01:66:51:c5:2b:88:9f:5a:7b:
                    3c:65:d3:e1:3b:be:57:e4:a5:fd:6e:85:a1:e1:de:
                    91:93:8f:53:07:2f:e2:ad:3a:20:90:7a:06:de:e5:
                    b0:58:42:f0:6a:9c:5a:ce:30:5e:9e:de:db:18:49:
                    a3:62:1a:de:14:b2:6d:c8:09:b9:b6:74:21:8c:f0:
                    0b:87:68:9e:db:b9:eb:a8:2b:f2:fb:de:70:c9:b0:
                    12:2c:f4:e0:39:19:c6:57:de:72:e1:95:70:45:46:
                    a5:20:4c:cc:96:7a:9f:5f:e1:45:e4:1c:e6:13:e3:
                    57:6f:e6:20:e1:aa:63:6b:58:70:17:ed:99:c2:64:
                    a8:69:ae:f5:cc:10:da:7a:40:f6:4c:43:f7:8a:e8:
                    57:2c:3c:2a:34:e9:41:1d:94:46:89:82:3c:58:04:
                    88:f7:6d:54:52:7f:ce:d4:59:64:78:41:a5:1e:00:
                    6b:84:6b:51:05:a8:8b:1c:3b:59:c0:74:26:04:8d:
                    98:01:9c:c2:8c:ea:de:ad:e3:33:43:fa:61:06:52:
                    47:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:17:3E:1D:F9:6F:E2:1D:D7:4E:B3:56:40:E3:F0:37:80:D5:2E:2C
            X509v3 Authority Key Identifier:
                keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:3b:55:61:fe:f6:ae:63:a5:aa:0a:51:6c:e2:8b:71:a1:34:
         67:59:b7:7b:23:c0:f8:8d:0b:15:7a:20:46:44:94:77:75:a8:
         e4:cb:84:9d:50:dd:f0:4d:25:97:c0:36:ff:48:bc:dd:0e:91:
         1e:6d:e5:b8:96:b3:7b:64:56:8d:70:68:96:54:c2:40:97:d1:
         0a:9e:4b:1e:5f:4a:30:55:08:17:4d:14:e3:c4:3b:ec:c3:57:
         d8:7a:bd:d7:97:9b:45:01:f4:79:b1:79:b4:77:80:bb:48:35:
         b8:9a:ab:b1:fb:86:6c:15:36:3d:8f:2e:91:b6:b2:5d:8f:78:
         83:b6:85:57:58:9c:7c:68:40:28:e7:20:d9:5b:a3:87:47:e1:
         08:61:0c:d8:51:61:46:85:67:fe:ed:3d:3b:c9:c7:3f:fa:7e:
         87:17:f5:67:9a:82:cd:85:36:cd:a1:19:cd:9e:3b:2e:7b:a7:
         3a:1c:93:54:ba:94:08:2d:80:3a:04:03:cc:6b:3f:82:6d:1c:
         65:f2:0d:19:61:e7:cf:d3:0f:e0:2e:5c:98:08:6d:55:b6:95:
         75:e3:7a:56:14:04:3e:3e:dd:e7:0d:f1:75:df:a4:29:83:6a:
         c0:dd:89:04:ea:73:5d:ed:d8:aa:09:ba:17:85:88:fa:bc:80:
         bc:87:97:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:44 2026 by rpki-client