This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
File:                     ftjlhnV1ut-0FwacbZAaCR2EvzE.mft (raw, json)
Hash identifier:          1YUyXmAGAHN5zlJvotfV3qZgyPRhzDa1IowaWjMuYuU=
Subject key identifier:   53:AB:C9:FA:04:D1:F3:A7:AE:1A:08:DC:B0:EB:3E:70:F2:F5:88:02
Authority key identifier: 7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31
Certificate issuer:       /CN=7ed8e5867575badfb417069c6d901a091d84bf31
Certificate serial:       019C41A2716BF229A9F653A02CB1BA60D6F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
Manifest number:          0304
Signing time:             Mon 09 Feb 2026 09:01:30 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:30 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:30 +0000
Files and hashes:         1: ftjlhnV1ut-0FwacbZAaCR2EvzE.crl (hash: iLiemBYcbiFRmXvkn1969bvyvTaUqW7iCDVXkBDoz74=)
                          2: zV9qn6rjLPdM3Y9L_4yH8rBRu5Q.asa (hash: PbbVW62w4nIIXsACjk+Z131fGv46DWI3bK0EUB7pFbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:71:6b:f2:29:a9:f6:53:a0:2c:b1:ba:60:d6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed8e5867575badfb417069c6d901a091d84bf31
        Validity
            Not Before: Feb  9 09:01:30 2026 GMT
            Not After : Feb 10 09:01:30 2026 GMT
        Subject: CN=53abc9fa04d1f3a7ae1a08dcb0eb3e70f2f58802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5f:80:44:0f:bf:13:01:01:84:ff:de:a4:96:
                    7c:d7:e4:06:5b:0d:80:c7:99:5b:bd:b6:cc:80:17:
                    76:eb:d6:04:3e:96:92:10:5f:ba:d8:c2:65:97:33:
                    01:fe:07:83:d2:aa:cc:28:eb:ad:43:b5:62:23:6f:
                    d3:4f:57:56:48:c2:9b:5f:5f:96:c8:1d:30:78:3b:
                    0a:3f:1a:27:c2:1e:43:d3:2b:f6:54:e1:40:4b:5e:
                    38:e9:90:aa:4e:27:65:78:b0:11:75:f9:31:fa:42:
                    94:b3:05:38:ad:35:68:13:7c:db:84:af:b2:f4:e5:
                    b6:2a:51:e9:51:6f:81:d2:9c:17:b9:ac:d8:e0:cb:
                    b3:66:7c:3b:0b:fc:42:31:1d:8b:ee:0c:c1:5c:be:
                    ae:e5:77:be:9e:ad:28:ae:15:d7:80:5b:3c:ad:16:
                    cc:1e:a7:21:6f:23:68:2a:01:34:d2:f9:4a:71:aa:
                    5b:4a:b7:87:6f:42:46:f4:bf:cd:ca:74:af:e3:be:
                    cb:14:43:69:ff:30:a4:39:71:d4:04:9f:db:09:c7:
                    f4:10:9d:ad:89:e3:1e:d5:6d:22:41:fc:4b:ec:42:
                    ea:b5:fd:50:c5:ab:be:e5:52:a1:39:06:6d:10:1f:
                    f0:2f:69:89:04:58:e5:2b:a7:c2:58:29:00:fd:e8:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AB:C9:FA:04:D1:F3:A7:AE:1A:08:DC:B0:EB:3E:70:F2:F5:88:02
            X509v3 Authority Key Identifier:
                keyid:7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:84:12:b3:2e:e4:45:82:da:3f:97:db:9f:53:20:d6:0a:a4:
         ee:38:5c:81:86:0f:3d:a4:48:06:e5:fc:1f:b0:eb:75:86:63:
         86:87:79:5c:4d:62:89:00:c4:fb:48:5c:9d:24:7e:83:3a:02:
         40:44:23:9c:0d:24:a4:bc:33:72:03:dd:f7:90:a6:ee:92:a5:
         1b:e9:c2:a2:e3:39:13:7a:3b:ea:7b:a6:11:5d:c7:dc:a6:68:
         08:96:f6:d4:25:ee:0c:33:fa:e3:9b:2b:c8:29:7f:50:61:90:
         62:12:f6:cf:63:af:28:b7:35:3f:ad:43:81:07:5e:a4:bf:bf:
         c4:db:80:22:33:f6:81:f5:5f:14:ae:58:90:04:60:f5:46:bd:
         2a:59:bf:00:da:6c:a3:ea:21:d8:25:71:f3:5f:b7:a4:4b:21:
         e3:f1:e2:8c:2b:3e:8e:2d:63:e1:63:8f:f6:e5:28:97:30:00:
         a5:f3:e2:8b:fa:21:4f:d6:9a:99:cc:7e:b8:08:7d:b1:9d:bd:
         5f:7c:f8:d9:22:07:b6:fb:f7:7e:d8:ef:58:e9:f8:6a:45:5d:
         0a:9c:60:cd:97:52:75:ed:9f:af:00:72:21:f6:47:19:0d:46:
         75:b8:46:47:f7:31:fa:e3:10:d0:b2:a1:02:43:20:4f:32:df:
         bf:49:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:29 2026 by rpki-client