This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8f0e03-d288-42ec-8dd7-95299f4c177d/1/FJnBEvFV4Fwsoc-cbatZ2lfAWvI.mft
File:                     FJnBEvFV4Fwsoc-cbatZ2lfAWvI.mft (raw, json)
Hash identifier:          fPH2QAjRLKhfgsa6AQ/hw9DwXGEmIBuXNyo9Wjh84Ac=
Subject key identifier:   9D:35:69:21:83:B8:D9:5C:E4:68:2A:F2:68:C3:29:B6:C2:DC:62:42
Authority key identifier: 14:99:C1:12:F1:55:E0:5C:2C:A1:CF:9C:6D:AB:59:DA:57:C0:5A:F2
Certificate issuer:       /CN=1499c112f155e05c2ca1cf9c6dab59da57c05af2
Certificate serial:       019C43900BA173E025EC57338EBC5FC80AD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJnBEvFV4Fwsoc-cbatZ2lfAWvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/8f0e03-d288-42ec-8dd7-95299f4c177d/1/FJnBEvFV4Fwsoc-cbatZ2lfAWvI.mft
Manifest number:          70
Signing time:             Mon 09 Feb 2026 18:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:39 +0000
Files and hashes:         1: FJnBEvFV4Fwsoc-cbatZ2lfAWvI.crl (hash: ZVHBSQNk6Nc1pVQsTs/xjBiluJT9gidu0zrRGkDadiE=)
                          2: iLktwCSpDizG07gTZPc-RsNcU8A.roa (hash: +MvxE9DFuSkVtHjUz98ldX8DM+Xopbp6J+nB8zFJfhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/8f0e03-d288-42ec-8dd7-95299f4c177d/1/FJnBEvFV4Fwsoc-cbatZ2lfAWvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/8f0e03-d288-42ec-8dd7-95299f4c177d/1/FJnBEvFV4Fwsoc-cbatZ2lfAWvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJnBEvFV4Fwsoc-cbatZ2lfAWvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:0b:a1:73:e0:25:ec:57:33:8e:bc:5f:c8:0a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1499c112f155e05c2ca1cf9c6dab59da57c05af2
        Validity
            Not Before: Feb  9 18:00:39 2026 GMT
            Not After : Feb 10 18:00:39 2026 GMT
        Subject: CN=9d35692183b8d95ce4682af268c329b6c2dc6242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:ab:8b:97:55:93:48:9b:62:2d:e1:12:b7:
                    c5:30:d0:22:79:6d:92:45:e6:7b:59:27:15:b8:7f:
                    3a:4d:89:ce:73:55:f6:17:e7:19:2c:2b:2a:b3:9f:
                    bb:b3:d8:c8:0e:51:79:a8:e2:60:ea:fd:33:d6:41:
                    d4:61:82:ea:97:b0:ad:da:6c:91:a6:1c:72:d3:e0:
                    c7:24:37:4d:73:58:47:03:bf:25:57:e0:4d:d0:ee:
                    69:d3:e6:56:dc:94:d7:7e:60:be:52:75:1e:ba:87:
                    a5:81:42:77:f1:55:b0:e1:96:6c:7e:ba:23:cf:25:
                    d7:d7:ac:c8:89:e1:31:ff:67:b4:98:73:f0:29:b3:
                    9e:f5:18:04:5e:fa:0e:50:10:69:e7:73:a9:b8:28:
                    b5:61:d4:0b:82:2e:b0:03:0e:8c:d8:97:2f:5b:1a:
                    05:6d:47:46:13:c6:99:13:27:99:e1:55:3a:9d:16:
                    10:d2:76:37:e6:5e:aa:aa:5a:90:bc:59:53:fd:8d:
                    12:14:6a:50:f4:9b:0f:8c:f3:1a:c5:81:f5:95:e9:
                    ef:13:79:79:4a:eb:03:ac:14:9c:13:0c:22:24:bf:
                    7b:87:f7:72:3f:1c:c4:8a:3d:89:d8:4f:ab:c5:1c:
                    e3:9d:05:e4:79:3f:4a:f6:9e:0a:62:a3:c7:0d:59:
                    54:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:35:69:21:83:B8:D9:5C:E4:68:2A:F2:68:C3:29:B6:C2:DC:62:42
            X509v3 Authority Key Identifier:
                keyid:14:99:C1:12:F1:55:E0:5C:2C:A1:CF:9C:6D:AB:59:DA:57:C0:5A:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJnBEvFV4Fwsoc-cbatZ2lfAWvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8f0e03-d288-42ec-8dd7-95299f4c177d/1/FJnBEvFV4Fwsoc-cbatZ2lfAWvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8f0e03-d288-42ec-8dd7-95299f4c177d/1/FJnBEvFV4Fwsoc-cbatZ2lfAWvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:6e:cd:86:77:7a:93:3a:0c:09:5a:54:cb:a1:d8:eb:63:ec:
         4c:6f:b2:0b:ac:36:8b:82:c6:69:68:d0:20:88:5d:df:02:0b:
         34:ac:8d:71:96:b0:f5:bf:82:4a:3a:49:f4:81:9d:bd:3c:a4:
         d4:dd:f8:d5:d7:b5:dc:6a:d0:67:6a:87:77:d4:12:2a:5d:cf:
         f4:5e:0b:dc:5b:a3:5e:6f:8b:88:c4:e3:bc:37:bf:6f:e4:ae:
         db:73:e7:44:3b:99:41:0b:d8:ed:05:5d:0f:a2:f8:0d:c4:5d:
         3b:c6:e3:e9:44:8f:3d:02:3e:60:42:bb:93:bf:a5:ca:ba:40:
         24:41:ea:8f:1d:e7:5a:ef:58:5e:39:6a:3b:af:1a:5b:d9:98:
         4a:0d:f9:dd:d7:49:ac:6a:1f:fc:24:6b:36:d1:d5:c0:82:cd:
         8d:e0:25:f2:6d:56:cb:c4:7f:55:ce:f3:97:85:b7:7f:8a:ee:
         04:31:43:4d:ec:4d:01:04:68:54:f3:50:b6:e7:31:5e:e0:9a:
         28:8f:4d:26:7d:ab:dd:e1:e9:10:38:b2:69:de:50:74:7e:2f:
         06:cf:ef:c9:d3:07:c5:99:d1:77:49:8c:df:6d:9e:48:0c:15:
         e9:08:e6:10:9f:9b:77:84:03:62:62:04:d9:2b:88:ab:87:6f:
         15:82:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:47 2026 by rpki-client