This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
File:                     FcGBcG9hxLc3zX63j3Iw40zfwUw.mft (raw, json)
Hash identifier:          e7sivVIbnw46GMK0uYhTAC1k3XBnPtj2tClf2proHQ4=
Subject key identifier:   7F:2B:36:7A:16:C1:49:5B:F1:34:67:F9:D7:E9:62:D1:F0:3D:49:95
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Certificate issuer:       /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial:       019B7CA713B4CB68B3453235EBEB28D5A035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
Manifest number:          01C9
Signing time:             Fri 02 Jan 2026 03:01:22 +0000
Manifest this update:     Fri 02 Jan 2026 03:01:22 +0000
Manifest next update:     Sat 03 Jan 2026 03:01:22 +0000
Files and hashes:         1: FcGBcG9hxLc3zX63j3Iw40zfwUw.crl (hash: 51yQsQlRQ17ZtP3MYUCZJXObtd3s5qazktA2Wk7zVyw=)
                          2: TODaCUho62Gehv-2PizceaR7ohg.roa (hash: EEJ5eEmNl9HYrtpyde+m1i67aXqJjeNEtfrXMxwcvR8=)
                          3: njg2vaPfciqJR5R5nbxzG2lmchg.roa (hash: hRVFVxSb35peMjVcWnWK+AgafRYFP/BZDTvTgJv0dRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:a7:13:b4:cb:68:b3:45:32:35:eb:eb:28:d5:a0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
        Validity
            Not Before: Jan  2 03:01:22 2026 GMT
            Not After : Jan  3 03:01:22 2026 GMT
        Subject: CN=7f2b367a16c1495bf13467f9d7e962d1f03d4995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1d:d1:66:60:e6:d5:a4:4b:f5:94:8b:f7:1a:
                    47:bb:8e:95:70:3d:f7:25:ef:fd:0a:5d:38:64:fc:
                    49:89:7a:db:f8:bb:41:17:f5:4f:ff:e5:4b:76:cf:
                    07:c8:ae:9c:61:b1:dc:4f:74:44:06:0b:25:e1:da:
                    86:62:5c:9f:1d:fb:00:aa:b9:c8:ce:42:ca:18:fe:
                    eb:31:92:a5:a1:86:7c:89:df:de:0b:8f:5e:cc:8a:
                    8b:3f:ea:cd:dd:53:7e:7f:75:67:cf:3f:f5:34:e7:
                    3b:b2:98:85:99:d1:d9:90:21:52:42:fe:b2:d5:6b:
                    53:aa:4b:e5:cd:c5:50:3e:da:54:dd:07:2a:19:d7:
                    5a:71:39:2e:48:b0:7e:8a:3e:70:8a:46:7d:32:6d:
                    db:be:49:24:98:78:2b:f2:9a:55:72:be:f0:0f:99:
                    c9:a5:0e:8d:d7:49:db:9a:3c:ed:5a:53:18:b6:2d:
                    09:13:cc:bd:51:8e:ef:7f:21:62:a9:2a:c7:96:49:
                    b3:ab:fd:f3:6b:6c:90:a3:bc:b2:80:dd:cf:8c:0f:
                    72:81:dd:7b:bf:c0:75:8b:cb:9b:b1:74:3e:10:41:
                    5f:cb:25:6c:fc:bb:ca:dd:9a:4f:9e:9f:01:3b:ae:
                    08:a7:99:fa:ca:38:1b:f6:85:84:fb:77:90:96:46:
                    43:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2B:36:7A:16:C1:49:5B:F1:34:67:F9:D7:E9:62:D1:F0:3D:49:95
            X509v3 Authority Key Identifier:
                keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c3:59:b3:2a:19:c9:2d:39:bc:d5:4f:76:d5:60:41:64:6e:
         90:d8:1d:d8:1a:0e:59:d8:0e:34:86:57:3a:eb:9b:aa:96:30:
         79:91:52:71:73:d3:e9:47:23:bb:de:d2:da:c3:31:88:d3:1e:
         3d:ed:aa:39:d9:d3:35:d5:94:ba:32:e0:29:2c:f1:5b:3a:68:
         4c:0a:41:ce:d7:a0:21:9b:6c:06:6f:59:9c:11:11:15:3f:f3:
         c4:62:e4:c5:c2:ba:8f:cd:1e:6a:75:a1:aa:c5:77:d2:de:84:
         64:ac:83:fb:61:10:40:ab:ea:a7:90:d4:53:19:94:de:c7:cf:
         28:ac:e8:21:eb:26:9b:9c:36:8d:2b:50:0b:97:65:a4:2d:68:
         b2:73:38:d7:b3:4a:b4:f7:f9:06:15:d2:01:36:bb:73:e2:59:
         24:52:ad:1c:2d:0d:3c:b5:6d:d9:13:3b:5e:05:65:76:0b:74:
         66:48:da:50:75:ac:4f:16:3d:fd:3e:52:0f:48:73:d8:2e:65:
         67:ac:51:39:d6:d4:28:89:73:30:93:57:f2:b7:c0:c3:c3:47:
         9a:ed:09:99:29:50:61:9b:26:f2:ac:65:d7:7a:e1:1d:59:40:
         4b:41:34:81:7a:67:67:5a:13:76:be:26:10:da:4b:55:60:66:
         ad:98:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 13:06:23 2026 by rpki-client