This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
File:                     F3XdxSn1elmets19uiuSstN190o.mft (raw, json)
Hash identifier:          tFB1jviQ/P++CEy1A6Uq5cpshtsmPfEW/8iVnNG7pao=
Subject key identifier:   11:74:D7:35:27:D8:45:7A:F4:F7:D1:BB:C6:AF:7D:46:17:2A:D9:F6
Authority key identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
Certificate issuer:       /CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Certificate serial:       019C4321F081CC39AB4E52B9AAC9920E2E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
Manifest number:          0A45
Signing time:             Mon 09 Feb 2026 16:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:23 +0000
Files and hashes:         1: F3XdxSn1elmets19uiuSstN190o.crl (hash: aQM3/TR4APelXNhgMPvS2qfFZaXWh0n4cWwky5yQwnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:f0:81:cc:39:ab:4e:52:b9:aa:c9:92:0e:2e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
        Validity
            Not Before: Feb  9 16:00:23 2026 GMT
            Not After : Feb 10 16:00:23 2026 GMT
        Subject: CN=1174d73527d8457af4f7d1bbc6af7d46172ad9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:ae:52:b8:34:16:a9:50:4f:af:6d:bd:1d:
                    0c:02:85:f0:e6:ae:6a:80:b9:74:d2:36:aa:0b:9f:
                    bd:94:79:93:59:eb:a2:8c:f6:fb:3b:56:fb:4a:e3:
                    63:f5:48:16:7f:42:48:0f:52:83:4d:74:95:fc:03:
                    09:5f:15:f5:9b:a1:0a:32:28:7f:16:2e:2a:ab:d8:
                    fb:cb:bd:84:92:0a:f4:02:26:24:19:92:1c:aa:fc:
                    fd:2a:1d:ca:66:a7:fa:33:0a:a8:4f:2b:26:28:3d:
                    9d:6a:3d:c4:5f:7c:57:66:0f:7e:fd:82:a4:99:60:
                    93:fb:c3:32:9c:01:6c:2b:8c:18:cd:2f:09:cb:fb:
                    76:16:32:59:41:51:ea:49:83:e2:67:bc:38:45:ba:
                    21:8d:3a:7e:f2:d4:52:9c:94:8f:ee:7b:a5:8d:c8:
                    b6:ff:d0:e7:a2:54:d9:04:c1:ea:f0:bf:1e:9c:14:
                    bf:6b:ae:d0:83:f5:5f:a8:7e:1e:c2:59:65:c4:bf:
                    96:a4:b2:43:88:e3:79:90:42:9e:e6:40:44:b5:14:
                    24:fd:38:48:24:d1:b6:19:c0:ec:ce:59:bd:37:78:
                    00:d5:0d:54:ce:a7:97:bf:88:5a:40:68:a3:5b:4a:
                    34:40:02:6a:cb:27:ba:2d:14:b9:5d:e6:55:a8:66:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:74:D7:35:27:D8:45:7A:F4:F7:D1:BB:C6:AF:7D:46:17:2A:D9:F6
            X509v3 Authority Key Identifier:
                keyid:17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:9a:47:3f:9b:e7:10:01:cd:f0:48:7a:96:f0:78:0a:68:00:
         8a:c4:28:35:e2:66:69:66:3e:a7:e9:ae:24:6a:22:bf:10:e0:
         07:fc:07:4e:71:b9:54:ec:95:c5:2e:bc:80:e4:db:e3:cb:69:
         dc:67:73:48:42:7e:fb:f4:b4:ad:cc:9c:40:40:aa:cc:c4:e5:
         7c:4d:f2:4c:26:40:59:9d:d0:43:b0:d4:12:a6:69:5a:7f:a9:
         b9:54:66:8e:d1:31:50:0c:a7:aa:f9:2e:4b:8a:bd:21:c9:af:
         72:27:a3:33:77:8c:f3:fd:65:41:0a:8c:4e:b2:6f:61:e6:ab:
         3e:27:95:d0:a4:3c:06:5f:73:76:ea:c9:44:ff:f0:20:bd:e6:
         d0:a8:cf:15:7d:53:b3:a9:4f:a6:13:58:8b:22:6b:97:52:de:
         ee:6c:e7:47:68:8f:9d:01:f9:7d:f6:6a:f4:de:f7:b1:7d:ac:
         e6:bd:a3:89:9d:71:59:25:dd:ff:bb:a2:61:83:8e:fa:a2:d9:
         f9:9c:8f:3b:94:91:2b:9b:01:80:9c:6a:ab:b6:29:e3:3f:86:
         76:ae:99:47:8e:51:ca:22:30:bd:96:e5:5c:76:1b:91:7d:2e:
         1a:a5:fb:fa:db:b1:1a:fe:cd:68:f7:8c:fa:66:61:8c:9d:21:
         44:a0:be:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:11:23 2026 by rpki-client