This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
File:                     FyesE93M6XjmP3r186adq0mS1kU.mft (raw, json)
Hash identifier:          pCJCFE1YaTGqo0roMCxvJ2Vdg/vQT29mJjEZMgADgjA=
Subject key identifier:   A1:EF:50:C7:07:4B:87:AE:1C:CE:BE:3B:32:0E:EF:40:6D:49:73:BF
Authority key identifier: 17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45
Certificate issuer:       /CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
Certificate serial:       019C42101CE2890F4D7A2F15C6DA3E0E365B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
Manifest number:          0B6E
Signing time:             Mon 09 Feb 2026 11:01:17 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:17 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:17 +0000
Files and hashes:         1: FyesE93M6XjmP3r186adq0mS1kU.crl (hash: GCVrYS2VkRdCGc0fS95MOuytXZHokvJBzWNFIe4ziQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:1c:e2:89:0f:4d:7a:2f:15:c6:da:3e:0e:36:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
        Validity
            Not Before: Feb  9 11:01:17 2026 GMT
            Not After : Feb 10 11:01:17 2026 GMT
        Subject: CN=a1ef50c7074b87ae1ccebe3b320eef406d4973bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:2a:23:d0:16:3c:ee:51:7b:00:1f:c6:0a:
                    26:c6:48:9d:83:80:f4:0e:26:d2:e8:4d:40:db:78:
                    b6:41:40:b3:0b:b2:23:8a:29:d8:62:9d:38:c3:5b:
                    cf:c3:a1:2b:4e:8c:c3:01:df:9c:27:9f:dd:09:e4:
                    e3:46:e1:4d:a9:7a:68:80:bf:6b:e5:23:45:1a:ee:
                    d2:4b:4e:8a:e6:98:90:24:16:60:95:5b:7e:c2:87:
                    85:9d:08:85:80:f8:8e:f1:40:77:c0:23:34:5c:25:
                    e0:0e:16:72:43:18:34:67:ea:cf:d0:9a:8a:97:9a:
                    01:df:d2:51:38:02:99:57:73:9e:a0:c6:7f:ae:75:
                    88:91:8c:b9:41:9a:d0:0e:4c:6c:07:e1:bf:a9:db:
                    f3:38:eb:b1:60:32:c1:17:f4:51:ec:44:ac:86:7d:
                    72:f3:05:60:7e:44:8c:91:11:7e:4e:0b:e5:ac:e2:
                    0f:c7:da:a4:c2:58:b7:df:64:10:5c:78:32:1b:0c:
                    1f:66:bb:f7:8d:fb:d2:ad:42:d3:0a:de:b3:7a:ff:
                    6f:23:cc:bf:43:62:1e:eb:bf:ed:3a:a2:4b:9c:17:
                    1c:6e:93:c0:ca:a9:c8:f7:4e:7e:a6:c2:f1:4a:a4:
                    6b:ea:27:97:8a:df:a1:1e:2a:e1:46:1e:28:5d:ff:
                    3f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EF:50:C7:07:4B:87:AE:1C:CE:BE:3B:32:0E:EF:40:6D:49:73:BF
            X509v3 Authority Key Identifier:
                keyid:17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:02:73:f4:50:ae:c2:27:65:5e:88:9f:69:eb:66:c4:41:4e:
         ba:47:6f:c0:6a:39:08:54:a8:98:6c:d1:5f:b4:4a:5a:9c:c2:
         98:e0:60:55:da:4c:70:05:50:d3:1b:7f:64:19:d2:a6:7b:76:
         80:4f:73:2f:fb:50:9d:fe:3a:7e:a1:f7:29:4f:c8:45:f8:c9:
         5c:8c:bf:cb:84:59:9a:c5:27:8d:07:03:fa:d6:51:fc:1d:60:
         1c:18:51:07:26:3f:7c:e9:d2:cf:a4:04:ed:26:65:c7:3c:7d:
         ec:d3:d0:dc:76:2f:7c:e8:53:f0:e7:b2:49:e4:40:34:a3:11:
         f1:2f:d5:8b:d5:66:8c:b3:a8:14:dc:b1:e6:e1:a5:51:4d:94:
         3b:46:0f:6a:73:2a:f4:91:66:37:62:3a:98:6b:7d:a1:02:d5:
         56:42:1e:0a:31:94:d7:79:b6:a0:7e:63:2b:f5:ba:c4:44:85:
         8d:6b:8e:57:9d:ea:13:d4:68:41:04:16:b5:b8:64:8a:c7:1b:
         5f:be:5c:9e:84:26:95:c5:f3:d1:68:48:da:5f:6f:3e:15:8d:
         c0:be:c6:7f:4d:d7:a1:ad:17:9c:c5:8d:5b:1c:7a:19:af:93:
         47:03:d7:9f:b3:31:79:3e:21:8b:28:65:e7:0e:73:0e:7b:fe:
         0a:db:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:30 2026 by rpki-client