This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
File:                     Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft (raw, json)
Hash identifier:          ywCgYgluLYebrSYxHFHj8tDpO5kqvvdEJUc5ieSwhTc=
Subject key identifier:   CF:28:B1:CF:DC:C4:3D:E6:A2:66:B5:B7:BB:2F:90:77:A0:80:E2:0F
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Certificate issuer:       /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial:       019C42EAF32CA024AAF55FC76DF2E2035E43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
Manifest number:          1822
Signing time:             Mon 09 Feb 2026 15:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:19 +0000
Files and hashes:         1: Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl (hash: CeqfMwCBJKSOs94y/D4qemc+Ope9hUlFzEI8N3IQ+BI=)
                          2: WDUelmNWtMrCQbOJvUmN2XaStwI.roa (hash: KWgWYImtf/YNaXBplwW65YCHE6E/0lUKm659Dqli3Kc=)
                          3: Wt_ouvMs8E7XNhDiQlEIBb5_EdQ.roa (hash: XqNX6SSr2Oq+GTNhsHhbudiKIR3OH7BFPiSnD24oL6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:f3:2c:a0:24:aa:f5:5f:c7:6d:f2:e2:03:5e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
        Validity
            Not Before: Feb  9 15:00:19 2026 GMT
            Not After : Feb 10 15:00:19 2026 GMT
        Subject: CN=cf28b1cfdcc43de6a266b5b7bb2f9077a080e20f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:16:86:44:6f:e0:1a:1b:85:a5:8c:2b:f0:3e:
                    e8:26:93:8a:f3:1f:48:bc:a1:bd:81:43:d3:0f:23:
                    83:73:90:ad:e6:af:03:de:ab:91:e8:ee:16:67:7b:
                    3e:0b:14:43:c6:e2:39:95:7a:2b:96:b9:c4:a6:7f:
                    25:c0:8b:d8:64:70:0d:34:4a:c2:87:5f:1b:b6:75:
                    67:1a:65:fb:b3:b8:cc:30:b5:c2:f0:d2:a8:47:de:
                    01:91:e6:0e:5a:2e:69:a8:49:e0:f2:94:7b:b9:b3:
                    af:d4:1f:f7:35:ea:fd:09:84:e9:db:8b:f7:79:ae:
                    90:5c:0c:d3:0e:9e:38:b9:64:43:a6:49:de:52:50:
                    7a:16:3e:f7:55:ed:c6:08:7e:60:68:1d:bc:d2:6e:
                    42:a4:a0:de:ba:f0:6c:b1:8c:a6:94:80:5f:cc:1a:
                    23:e3:37:26:67:96:36:4b:c7:f5:9c:8a:dd:a5:66:
                    d0:88:36:d5:2c:32:9f:91:9b:c4:3d:ef:c5:8d:80:
                    4c:ef:90:08:f6:55:49:66:e0:eb:11:bc:8a:09:d8:
                    e3:79:16:19:3b:83:00:64:f1:de:0f:f6:82:6f:f3:
                    35:36:70:72:be:d1:60:35:56:af:38:77:c1:4c:b8:
                    f4:20:a5:a3:cd:2e:d8:38:ef:85:76:8b:60:f0:a1:
                    b9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:28:B1:CF:DC:C4:3D:E6:A2:66:B5:B7:BB:2F:90:77:A0:80:E2:0F
            X509v3 Authority Key Identifier:
                keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ed:99:71:e6:93:f1:7c:da:e1:11:31:a2:df:9e:c9:9c:92:
         b0:05:4c:ae:44:36:c4:47:c0:f1:3d:9c:de:ce:20:85:e8:7e:
         8a:67:f8:04:54:40:3e:19:6d:91:4c:5c:71:19:56:18:5e:81:
         1b:f1:21:98:7a:ff:3a:8c:9a:be:42:49:e5:0f:08:32:43:4b:
         2c:e6:01:bf:8c:10:c2:bb:a9:67:a7:c4:02:94:1a:6c:da:c5:
         62:aa:c0:87:bd:d5:15:a4:8e:65:65:a6:dd:e6:e6:86:55:5f:
         39:b8:2d:9a:38:49:6c:e1:be:b2:30:47:73:08:0a:36:a2:57:
         ef:07:a4:f8:0f:19:ac:18:6f:db:bd:dc:1e:96:2c:d3:86:12:
         46:f4:ca:42:aa:ae:1e:24:e6:42:8a:df:4d:80:16:51:b5:a4:
         28:d0:7a:df:5d:8f:67:a5:bd:57:2d:68:da:0b:35:e9:21:37:
         54:8b:14:08:71:2e:71:2f:cd:e3:d5:a9:95:e9:04:ef:9c:3e:
         25:ce:5b:19:3d:c4:4f:b5:d0:0c:eb:31:c4:6b:f2:2b:48:8d:
         be:54:9a:cc:ee:e0:49:ae:a6:b1:81:55:eb:a2:a1:e4:8b:50:
         2f:16:16:4a:99:a3:0c:2e:12:d4:f3:ad:af:0f:fc:9b:1b:bd:
         df:3b:d9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:23 2026 by rpki-client