This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File:                     FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier:          XUAQZOIya071CKMFSiPZYJRaKRwwKjWq7HbSM62B7ro=
Subject key identifier:   D3:AF:54:FD:BC:DC:22:D2:69:55:96:C3:BF:F9:0F:01:3F:62:A0:6B
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer:       /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial:       019C43FE190B8A4B4815080135CF114E3ACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number:          086D
Signing time:             Mon 09 Feb 2026 20:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:51 +0000
Files and hashes:         1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: P8miNAbwoE6jPMz8KMi7oeVY82EPzfgToIGv11D3AKc=)
                          2: H89M_EzTc8StQKIth4lnEHjKKN0.roa (hash: IDhPLp9HDBcx8Hw7u+pzfwTPs8upVVlGQyX+6R34mN0=)
                          3: Kk4HsfGd30im4loLCXTsCFiytPU.roa (hash: oKLzpVpeAoy3QzeCxsxeoWZkV7KJYmzZC8B43Ea48cY=)
                          4: ekGCZNDc9ZOt8-ot2-lgD0_VB3o.roa (hash: FwlalKxI5Tx7qsPfQIKwmFy4fzG691p8g1JAVi3TkPw=)
                          5: mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa (hash: crQWmizM31tyk+JqRaLmmMrPZUf827PwrlcRDlFZANc=)
                          6: semdbfvd3TfnGahfQ-_MnPsyXVY.roa (hash: K9glb2D2qochPPxOstvTUytekMPlr9ObTuDnHNr8nXk=)
                          7: tDI9go-g4CqghW05S71dg1-pcIU.roa (hash: ziudTSLoj2qHvEkRBq06kMjV08QbQZjdB8rDgu7yyDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:19:0b:8a:4b:48:15:08:01:35:cf:11:4e:3a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
        Validity
            Not Before: Feb  9 20:00:51 2026 GMT
            Not After : Feb 10 20:00:51 2026 GMT
        Subject: CN=d3af54fdbcdc22d2695596c3bff90f013f62a06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:ee:2a:70:26:ba:4e:f3:a5:9e:a8:f3:e6:
                    9f:06:52:fd:33:53:bb:4a:de:49:63:7b:9a:68:cc:
                    80:6c:56:59:1b:c0:45:b1:ea:74:62:90:37:66:8f:
                    7c:cd:dc:c4:aa:de:2b:83:ac:6c:b3:e7:22:e9:3e:
                    4a:e1:90:09:d2:c3:a3:76:af:0a:1f:d3:9d:4a:88:
                    08:e1:67:55:2a:ba:04:44:3d:cc:8e:a7:7d:14:9c:
                    a5:45:f9:b1:93:97:28:78:32:75:47:50:43:59:d7:
                    d9:11:d2:8b:bc:c1:8a:2e:30:5c:23:7f:34:6d:a5:
                    19:9e:28:5a:76:f8:f1:b5:c2:4f:d3:a7:5c:dc:bc:
                    c9:69:d8:c4:b1:89:5f:4f:84:d7:e4:64:43:fd:78:
                    5b:f2:54:76:40:ff:6d:bb:ab:ab:99:e5:e8:22:35:
                    27:50:b3:06:45:bd:6e:36:08:cf:31:96:87:af:65:
                    46:47:c0:f9:0d:c8:ff:b6:20:67:d4:e3:69:0d:4e:
                    f8:2d:58:81:b8:cb:b9:ee:4c:04:dc:bc:79:2b:f7:
                    81:3c:eb:e1:4e:2b:bc:1b:6b:bb:1a:c6:5e:0d:06:
                    18:2f:43:4c:21:6e:44:b4:c2:75:33:e7:e1:af:83:
                    2c:86:38:f0:f2:16:47:aa:63:7c:b0:e0:f5:39:0f:
                    7c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AF:54:FD:BC:DC:22:D2:69:55:96:C3:BF:F9:0F:01:3F:62:A0:6B
            X509v3 Authority Key Identifier:
                keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a3:b4:7c:80:22:fb:e5:51:2b:57:3f:dd:30:63:db:67:7f:
         46:92:ed:47:e8:c9:2a:32:72:dc:d1:d6:9e:a8:4f:33:9d:9e:
         92:55:a8:42:11:80:2f:d3:1e:49:e4:06:42:68:04:da:b7:97:
         f3:ca:af:ec:63:38:97:f4:eb:72:2b:46:b7:68:89:61:25:1f:
         1e:41:91:e4:8d:23:00:a5:0d:73:51:1e:80:24:ff:24:7b:32:
         6d:e7:66:71:5b:b0:38:c8:75:5c:9b:06:37:1a:24:0a:ea:75:
         6e:54:dd:de:ae:f0:80:3b:91:b4:c9:e1:e4:25:7c:8b:59:bb:
         eb:e0:20:97:d6:bd:e2:98:13:51:69:1a:62:40:42:92:a6:78:
         61:f2:e1:b7:a8:98:77:38:ea:aa:a6:0c:91:9f:3e:11:cf:55:
         e8:e6:99:48:f2:9b:77:10:91:4b:e0:1d:5e:09:32:29:3c:8d:
         01:ac:af:30:e6:4e:c1:6e:68:7f:8b:83:2d:cc:c3:06:d7:19:
         d2:32:27:1c:42:4b:0a:e5:7e:f8:a9:f8:66:e5:dd:9d:ca:06:
         43:de:37:d8:2a:af:13:eb:f0:e2:75:d4:7a:0b:92:a5:5e:67:
         05:99:2b:94:eb:39:fa:32:ce:cb:a2:8d:fb:90:59:b5:ef:e9:
         96:c9:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:59:30 2026 by rpki-client