This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
File:                     FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json)
Hash identifier:          hW+2D95vowiQ8Rm19VKgw7RDF7CFdOSGiV2blbwfIeM=
Subject key identifier:   70:63:6F:EE:73:3A:3F:45:EF:C4:B6:A4:76:F8:11:BA:F4:DB:3B:3F
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Certificate issuer:       /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial:       019C42B423C296274E7C67CBE7E1EBEA6F83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 14:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:27 +0000
Files and hashes:         1: 1RanCO1mu-OiQ0iZEtdw-yAjkTI.roa (hash: yloj+KSnzpOLHXmmnW6y/9LvQrZ1HgM73eQl1+fYOuI=)
                          2: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: KREd6U56zXk+ccIx9fDtgSPD11r2Nuzp3I0oWpeoKIE=)
                          3: G83x6tFUMdJXFpkh7ob8iQJOyWk.roa (hash: fqKR1JBeUu0DbH/b90tqdDXbcTIQ5RZlC7Ezhyu15AQ=)
                          4: IwnuHUcrSyqTDj2R1SrfqJthDz0.roa (hash: SAYzINhAcM78pjeHDBOp09qDlTIFRrqRQDRqGfJbZ6g=)
                          5: QguY6sNw_4yrqydTBsOIYz60GsQ.roa (hash: MwsRxWqp1y4l7li+nXNmzcRZf3idKS20ILN1jbY4EjI=)
                          6: YGxOWC67xnFdZpqiT6jQNZ3x7F8.roa (hash: IBA2eWmYoe53rLsRx6eyDDNbF8a4NYDcbQ80+DftLrA=)
                          7: bqonASN6m8_X-0PLTWyL1k78XVc.roa (hash: BHHdw7qa2kmdkeh9BUPFPvgX9iTcx117t99txuo1M88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:23:c2:96:27:4e:7c:67:cb:e7:e1:eb:ea:6f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
        Validity
            Not Before: Feb  9 14:00:27 2026 GMT
            Not After : Feb 10 14:00:27 2026 GMT
        Subject: CN=70636fee733a3f45efc4b6a476f811baf4db3b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:96:dd:a9:52:4a:88:3d:4c:56:a2:a7:a9:
                    d2:c0:05:15:9c:c6:37:d3:57:53:d0:04:3a:23:27:
                    4d:98:38:da:97:f6:d1:0c:bf:10:b2:b0:8e:e1:32:
                    62:b2:19:b6:98:2c:51:99:67:60:17:3d:3b:53:45:
                    a7:39:6d:be:ab:04:20:bc:0e:d7:40:c5:c5:da:ee:
                    6d:5f:76:e4:4a:9f:af:a4:f1:9a:3d:01:1c:30:7a:
                    d0:29:a6:eb:ba:ea:6d:bd:1a:96:16:ac:87:a4:5c:
                    a5:4f:78:8f:c1:49:f2:58:d5:7c:f2:e3:48:20:4f:
                    fa:81:fc:e4:b5:94:1d:89:03:06:9e:3a:4e:11:07:
                    01:85:fd:0e:bd:83:ff:9f:f0:f6:7a:04:0a:8d:8f:
                    17:b7:81:bd:f9:13:fe:18:ab:d4:15:5d:0e:84:55:
                    61:e6:5a:49:1e:9f:c1:6f:46:8c:28:a1:18:c2:25:
                    85:e7:8a:47:ea:a9:b9:e5:e8:74:aa:43:24:b8:07:
                    5a:30:51:9e:17:b5:38:09:97:6b:cb:46:27:70:0b:
                    0c:cd:10:81:c3:55:49:66:d0:2e:cd:8c:77:cf:b3:
                    fb:73:3f:2e:95:0e:44:86:7d:28:71:b0:05:81:bd:
                    ae:27:62:2d:74:e9:17:ee:b4:0f:41:0a:f3:b6:45:
                    1f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:63:6F:EE:73:3A:3F:45:EF:C4:B6:A4:76:F8:11:BA:F4:DB:3B:3F
            X509v3 Authority Key Identifier:
                keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:17:c6:f1:8d:44:35:7f:dd:11:84:64:5a:27:ee:dd:49:53:
         78:b2:bb:82:b8:35:62:e5:2f:47:86:22:84:95:d5:8b:97:51:
         26:c7:bd:1d:d7:1a:fb:56:d6:83:74:76:80:65:f0:19:56:b8:
         e9:67:16:4f:37:4b:b3:7c:6e:45:a1:55:44:64:9e:26:bb:4e:
         9c:7f:61:bc:48:7e:a0:2c:e8:ed:67:28:f7:08:38:09:22:53:
         2d:3f:87:f0:11:ec:8b:cc:c7:54:42:c8:99:78:98:e1:0c:a9:
         78:52:d3:e6:09:f4:3c:c1:11:8c:33:b2:6e:b1:ad:86:d2:ba:
         3e:8f:24:59:df:f2:0c:38:84:ce:c9:71:7b:9e:59:78:a4:c4:
         18:20:eb:7d:3b:0e:12:90:0d:40:ec:cd:19:21:5e:e1:be:f5:
         91:0d:07:f3:74:df:34:d2:7d:50:f8:5f:0c:00:47:ae:5e:02:
         87:d7:69:8e:e6:da:19:ed:ed:5b:6b:62:03:14:21:ce:24:ea:
         d6:d6:ee:43:bf:18:a4:95:0b:b7:75:4b:a9:23:17:ab:18:32:
         3f:84:d9:7d:c0:0a:97:ef:d0:eb:22:43:69:52:b7:48:4e:7d:
         3b:dd:34:2d:c3:23:a2:c8:70:e5:45:c4:bf:cc:c5:c1:fd:3e:
         a1:45:e6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:17 2026 by rpki-client