This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File:                     fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier:          QcKFjTeSUlF3f5ZgJAUF6NlOAPZrEVcM0ZWv4/eGH24=
Subject key identifier:   17:82:24:C6:FB:78:5A:0B:03:B3:2E:9B:E6:71:05:22:7F:88:9C:D0
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer:       /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial:       019C427D9917736916C32B63D53D3F5FA8C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number:          0529
Signing time:             Mon 09 Feb 2026 13:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:53 +0000
Files and hashes:         1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: T1rRZNUHGEmCRIV0QcePr2JUl0hpz2+uRZdXH+uVIRI=)
                          2: v5j62T31CGbyesihQ2ZxZfpouT0.roa (hash: /9+S8FBh2KrNLclqntL3l149SX/pG8FSBZ5MZAy4TsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:99:17:73:69:16:c3:2b:63:d5:3d:3f:5f:a8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
        Validity
            Not Before: Feb  9 13:00:53 2026 GMT
            Not After : Feb 10 13:00:53 2026 GMT
        Subject: CN=178224c6fb785a0b03b32e9be67105227f889cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:80:e3:ae:00:90:ac:46:ae:82:12:bd:b5:
                    1a:78:9c:16:c6:c2:94:0e:3f:84:e0:45:f6:36:ec:
                    8d:c8:db:cc:95:51:4f:3a:53:33:e5:9b:d6:df:0b:
                    e9:2b:45:71:85:cd:33:5b:dc:3c:2f:28:38:30:ed:
                    84:dd:3c:ff:eb:51:83:5e:bf:13:0e:a3:54:0f:27:
                    f9:e4:60:a0:76:e9:fa:a8:8d:5b:23:1d:82:61:e7:
                    eb:61:46:1a:d0:09:17:d1:30:65:06:d8:3a:9f:c0:
                    f2:c1:0a:c6:a1:db:90:99:f4:34:bb:84:73:58:b1:
                    09:c4:8b:cd:41:14:c6:98:3a:19:f4:47:bc:26:56:
                    e5:d2:ec:21:e3:c0:cd:9f:c8:89:7a:82:fd:93:96:
                    51:b0:7b:20:25:96:af:1d:93:0a:c2:97:9a:33:88:
                    0a:7a:67:db:c0:84:a5:c1:fe:56:3e:cc:38:d4:6e:
                    7d:c3:db:41:0a:11:f3:ec:84:1d:22:1f:09:e1:11:
                    af:7a:a4:d1:b5:06:27:86:90:1a:e1:e6:60:cb:7c:
                    e7:0b:4b:b9:e0:30:21:f0:47:5b:8b:07:ce:37:f0:
                    77:69:b0:c9:e7:a0:6c:27:bc:c5:96:0c:ff:5b:ab:
                    7a:9c:8e:7e:d7:d8:b8:f5:9f:33:2e:b6:72:4f:7b:
                    6d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:82:24:C6:FB:78:5A:0B:03:B3:2E:9B:E6:71:05:22:7F:88:9C:D0
            X509v3 Authority Key Identifier:
                keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:dc:fe:0e:3c:e6:2a:4a:b6:68:43:e0:b5:f0:5e:aa:cd:59:
         67:ec:6f:8c:b5:f9:e5:55:2c:04:77:b3:36:47:7c:0d:28:81:
         58:30:52:5e:76:ec:35:d4:01:98:52:b3:4a:50:66:99:e1:d7:
         4d:80:c3:57:6c:74:9f:0d:e4:64:85:4f:2f:e5:24:2b:bf:1c:
         cd:a9:90:5d:06:4f:73:86:5b:4a:d4:d7:42:8c:dd:41:80:da:
         1c:e7:2a:e3:22:16:10:cc:31:38:7d:d9:94:e5:d3:b9:60:df:
         52:e3:56:3f:f1:e6:12:d2:ca:1d:58:c8:e6:3d:0f:6d:ca:68:
         27:0f:54:f8:c1:1b:32:de:13:9e:5f:f5:48:9c:ec:53:25:7b:
         2a:43:8d:0d:e8:9f:07:34:18:73:b8:1b:3b:d0:0e:94:8b:ec:
         1f:8e:42:72:86:35:1b:4f:bd:4a:07:c4:4a:d1:c6:e5:be:b9:
         36:cc:ce:40:42:ea:8f:67:fa:c9:d1:4f:81:63:9f:94:84:4a:
         34:f0:6c:a2:e4:52:28:f8:4d:b9:e7:9c:6f:67:a9:2b:61:19:
         fd:76:99:1c:2c:c7:5a:cc:a0:13:89:93:d5:e3:5f:92:f8:92:
         92:55:cb:02:40:82:c4:8c:d5:79:f2:95:4d:aa:07:6d:ff:34:
         40:b6:1f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:35 2026 by rpki-client