This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File:                     fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier:          0/67hW9asIHfgHcN2U6M1PfSP+hq+FbVtYFp3ZhUjNA=
Subject key identifier:   61:3C:24:2C:15:C2:66:E7:54:75:14:0B:59:D6:5B:BA:C1:A3:4B:D8
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer:       /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial:       019C4390ACD0D45DD3AF25912670A895C689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number:          1824
Signing time:             Mon 09 Feb 2026 18:01:20 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:20 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:20 +0000
Files and hashes:         1: OexBeKcIncb0jKb4JvVZXcJT1Ug.roa (hash: O2kEZ95yzKLiq43k1ys04PPuKi6PpIFY+Xw79K5ILEo=)
                          2: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: 2oj3/UarEV8uFT4kGQ5NYks09m5y4Hj6wv2N1UfVOR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:ac:d0:d4:5d:d3:af:25:91:26:70:a8:95:c6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
        Validity
            Not Before: Feb  9 18:01:20 2026 GMT
            Not After : Feb 10 18:01:20 2026 GMT
        Subject: CN=613c242c15c266e75475140b59d65bbac1a34bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:6a:66:03:0c:69:2a:ad:d2:53:3e:ac:e2:
                    76:d1:53:f5:b4:0c:62:05:3c:12:8b:05:fe:3a:6d:
                    4e:70:3e:6b:79:20:80:fc:ac:f0:bd:e4:ca:66:69:
                    98:ae:8a:1b:a1:54:47:18:ba:62:2e:7a:d9:cc:50:
                    73:9e:ea:c0:bc:f8:e6:d6:1d:be:e5:65:74:72:22:
                    f0:ed:8e:25:ae:10:19:20:46:3b:0c:99:09:77:dc:
                    ab:82:95:b9:37:1d:19:9f:b6:2b:a4:3b:6e:4a:00:
                    f1:76:42:cd:62:69:1c:1f:b5:41:55:62:73:72:eb:
                    1e:a9:f0:09:07:a0:95:89:02:cf:55:f3:cc:07:71:
                    2e:40:64:e0:d1:ba:96:b2:25:72:c4:a7:e0:2b:37:
                    08:34:b2:97:13:21:c4:0d:15:d2:53:fe:54:a9:96:
                    a6:9f:f1:58:5f:0f:6e:38:42:fe:4d:e7:31:f6:05:
                    62:ba:ce:87:40:c9:8f:00:b6:5f:3d:2b:06:fb:8e:
                    9e:59:1d:b1:e3:7b:54:16:b8:9a:6e:1b:b8:45:6d:
                    33:f2:07:1c:c4:ed:c3:83:ac:86:03:77:87:65:1d:
                    c4:3a:0c:42:a5:59:16:e2:3b:ef:4d:39:ce:ae:4c:
                    53:93:bf:7d:29:1a:26:fb:3d:d7:9a:36:27:bf:8b:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3C:24:2C:15:C2:66:E7:54:75:14:0B:59:D6:5B:BA:C1:A3:4B:D8
            X509v3 Authority Key Identifier:
                keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:be:f7:69:b1:c7:08:48:2b:35:5f:41:81:f3:c0:e4:7d:60:
         5f:ca:bd:05:ad:b2:62:f0:0f:22:e7:7a:99:09:8e:31:48:cc:
         92:bf:f4:75:51:6a:11:6d:d8:2d:1a:1a:8b:49:90:21:a3:14:
         36:81:e9:0a:12:71:9d:d4:02:7a:89:49:dc:86:a8:39:e2:8e:
         75:6f:ab:d3:00:22:1d:85:41:b7:96:ff:63:ab:82:aa:42:96:
         d9:e4:ff:ae:23:02:13:de:b8:d2:10:1d:84:6c:d0:56:1a:da:
         eb:45:82:e4:54:fc:fa:81:63:3f:ff:3b:c2:66:8a:97:fa:e9:
         33:f0:98:13:d7:6a:d6:d5:26:4f:a1:58:73:f3:a3:0a:62:62:
         83:e1:f4:49:93:b3:d9:b2:3b:ed:7a:ab:d4:95:bc:7b:3e:34:
         7e:fe:b3:c0:d4:45:cc:e7:85:03:29:58:c3:84:f7:15:05:f9:
         16:5c:a4:a2:4f:df:72:fa:c1:c1:81:45:e6:86:5c:f7:2f:ca:
         cd:36:41:cd:df:53:a2:98:b4:d5:ad:d0:91:4d:52:e9:24:3d:
         29:6a:98:4f:6a:77:ae:90:c4:2c:8a:9a:63:89:0d:f0:8f:b4:
         e5:11:b6:a9:a9:3e:3c:53:27:82:16:87:90:95:cb:2f:52:10:
         35:4c:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:16 2026 by rpki-client