This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
File:                     S_xaKUEPH_z03ipacFj1FiCzC3k.mft (raw, json)
Hash identifier:          +yA2G5qX7sN68Bh83sNe55mDTotjiqAXCqgdUYM2rUA=
Subject key identifier:   FB:20:3A:78:C1:D0:D7:4D:F6:63:08:31:67:23:31:13:F7:B9:82:6D
Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
Certificate issuer:       /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Certificate serial:       019C438FE2ACF581719AD141765B6934DC15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
Manifest number:          0FC3
Signing time:             Mon 09 Feb 2026 18:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:28 +0000
Files and hashes:         1: S_xaKUEPH_z03ipacFj1FiCzC3k.crl (hash: B7Eu7q8HrEZ3xPuq4OJtTFhks7m62cc2AD4i2EmFi7U=)
                          2: fcl-EttwXxzdVTjzavFgoRNlwJI.roa (hash: aFrd+hEOx0zldgqlIlCbagrbwCzJhdbfMgtfzgPtR+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:e2:ac:f5:81:71:9a:d1:41:76:5b:69:34:dc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
        Validity
            Not Before: Feb  9 18:00:28 2026 GMT
            Not After : Feb 10 18:00:28 2026 GMT
        Subject: CN=fb203a78c1d0d74df663083167233113f7b9826d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:75:e3:a6:04:34:6f:88:5d:b5:18:e4:48:
                    4c:fe:59:28:05:1b:49:d4:ab:12:4a:44:29:73:62:
                    6b:a1:f3:71:ff:42:2b:e9:a2:49:64:96:8f:09:ba:
                    74:1a:01:f3:c2:c3:e7:61:af:44:43:6e:26:21:29:
                    53:ee:97:8e:14:50:fb:1e:1f:63:f8:45:50:48:b7:
                    88:ff:f1:c4:27:56:da:39:fa:b9:df:67:a0:5e:9c:
                    31:e4:42:3e:1a:8e:00:ff:ee:30:c0:ce:72:9c:f5:
                    fb:f6:0f:37:7d:90:0e:dd:df:f6:b7:14:1a:85:5f:
                    f1:9b:c4:12:42:bc:3b:1f:41:a3:3c:c8:bf:d4:4a:
                    d7:10:94:ea:21:c3:ec:fa:35:cd:bd:a9:b0:8d:5a:
                    c1:a1:94:7d:45:b0:f1:90:fd:c0:20:b9:71:52:5c:
                    e4:1f:d4:c6:d1:ea:27:64:7e:59:15:0c:63:b5:5d:
                    fc:35:3a:b1:a3:2c:19:fd:c5:b3:23:36:ea:04:82:
                    d6:18:37:2f:37:e2:90:cf:a7:3b:eb:f1:ea:6a:98:
                    37:37:39:25:25:e9:70:fb:24:9d:1a:d4:f2:19:b5:
                    b6:55:ca:a6:c2:cd:42:07:4a:e5:d2:bb:89:91:8e:
                    9f:1a:c8:f3:94:c3:a3:6c:45:47:d2:e5:db:1f:48:
                    1d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:20:3A:78:C1:D0:D7:4D:F6:63:08:31:67:23:31:13:F7:B9:82:6D
            X509v3 Authority Key Identifier:
                keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a6:8d:59:96:90:e3:f3:44:64:d1:3a:68:85:e9:73:0c:04:
         18:52:88:94:fe:6d:90:75:92:d1:c0:e6:36:b3:37:78:73:90:
         ce:3d:3d:88:c8:f2:41:93:10:46:d8:ba:07:97:a5:3b:14:e4:
         ea:5c:49:be:2e:bd:e5:fa:c8:4b:91:5f:07:d0:d4:12:a6:03:
         34:b0:f2:40:cd:52:89:8c:b5:26:90:2b:11:95:59:f4:f1:98:
         80:05:a7:0b:0c:79:a2:eb:90:f1:f8:fa:bf:cf:32:1b:4b:b6:
         c6:62:5f:a4:ea:9e:f3:7f:f0:0b:e0:a4:a4:0d:e9:4f:e7:85:
         64:0f:3b:d9:37:36:46:2a:ac:9e:94:24:ca:be:e1:5a:09:e9:
         a9:46:da:ee:20:9c:bd:f3:34:d9:bc:5c:cf:32:18:87:c6:7a:
         02:6b:57:0a:25:27:05:a8:9c:29:af:d4:f5:34:e9:88:5c:46:
         a5:15:d4:1f:07:d1:d9:83:85:9b:3c:a1:ed:78:a7:0d:60:4d:
         96:7a:87:cb:d5:b9:2e:02:bb:ef:af:f1:58:37:98:92:f3:00:
         ed:63:21:3d:a4:2b:90:87:eb:5d:b3:41:86:e5:4c:d0:65:ae:
         57:05:12:31:b0:6e:00:0a:52:d1:6f:55:0b:6a:02:fa:82:fb:
         12:fe:4d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:56 2026 by rpki-client