This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
File:                     FycWA_qPBq-kSoeCBl81-WWcft0.mft (raw, json)
Hash identifier:          XkY53OzFHFP4XcvWLf6JfCO1MoiW7drzqNMPThO0Avw=
Subject key identifier:   00:1F:06:60:42:79:B1:5F:59:A7:61:46:22:47:F1:A4:CC:6B:5D:E2
Authority key identifier: 17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD
Certificate issuer:       /CN=17271603fa8f06afa44a8782065f35f9659c7edd
Certificate serial:       019C420F8E277404457D0391D01A13F90916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
Manifest number:          03AB
Signing time:             Mon 09 Feb 2026 11:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:41 +0000
Files and hashes:         1: FycWA_qPBq-kSoeCBl81-WWcft0.crl (hash: TTczCUU/rMWmrM1a0QiPvuZtoYgYRvc6KyxY1mss/O0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:8e:27:74:04:45:7d:03:91:d0:1a:13:f9:09:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17271603fa8f06afa44a8782065f35f9659c7edd
        Validity
            Not Before: Feb  9 11:00:41 2026 GMT
            Not After : Feb 10 11:00:41 2026 GMT
        Subject: CN=001f06604279b15f59a761462247f1a4cc6b5de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cc:07:c1:fa:b6:93:c5:b8:32:30:7e:c5:f8:
                    1c:52:ed:cb:8e:00:ad:94:98:39:67:7e:c7:50:37:
                    f4:c1:5f:b4:01:6e:08:5a:18:98:2b:7a:6f:70:32:
                    31:e5:e6:df:ed:fc:ff:e0:e2:45:b1:32:43:1d:8f:
                    61:11:b2:89:16:29:6b:37:fe:af:41:52:17:f8:0e:
                    51:22:6b:2a:da:d8:f7:da:52:a4:83:6f:98:55:ea:
                    a3:98:41:c1:31:cc:d2:fa:92:0a:27:f3:bf:27:54:
                    37:d7:a7:d7:79:9b:5c:52:53:a6:55:59:6d:a2:15:
                    75:d1:c3:8b:46:cc:6b:e9:b0:53:af:3d:02:57:8c:
                    e6:2e:bf:11:36:a4:17:0a:3a:2c:6f:73:80:d2:b5:
                    55:3a:c4:5f:68:84:24:66:65:e5:3a:e6:01:42:0e:
                    e7:aa:97:96:97:fd:8e:60:bd:e3:4c:ae:7d:3f:44:
                    4d:be:d7:df:c9:19:bf:7d:21:96:d6:6b:25:90:82:
                    24:29:c6:f2:b9:2c:c2:09:ad:ee:30:59:21:12:f8:
                    79:1a:21:07:78:57:71:aa:26:3d:fe:d8:c1:72:33:
                    24:00:60:1a:0e:e5:6f:5f:4f:f4:61:e2:0c:c8:d5:
                    a1:1b:b1:49:52:ca:ef:30:b4:ab:c5:a7:37:c5:52:
                    56:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1F:06:60:42:79:B1:5F:59:A7:61:46:22:47:F1:A4:CC:6B:5D:E2
            X509v3 Authority Key Identifier:
                keyid:17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:71:b3:62:6b:ef:17:12:7a:eb:86:5d:61:ac:dc:21:7c:13:
         b4:99:88:77:00:4e:59:22:87:b6:c2:d3:29:28:28:26:b7:26:
         db:01:54:52:68:58:3c:ab:39:d2:40:51:2f:ce:2c:38:30:0c:
         ad:27:70:b8:db:45:a7:c9:fa:d0:a6:81:f3:57:33:66:b8:be:
         0c:f3:c4:11:ad:4a:04:39:99:c9:fb:3c:9b:e9:7f:0d:9f:83:
         7d:5b:8e:f0:83:69:18:47:a4:25:e8:ef:a3:c6:4c:c6:3e:ba:
         87:d9:3a:fc:29:b3:84:05:c0:7d:45:02:c2:70:85:b2:08:63:
         6c:79:2c:c0:fb:34:0b:69:ef:54:75:f7:73:8c:46:01:04:36:
         17:0c:f7:42:fa:9f:2f:5a:c9:41:7d:ff:e7:8a:b4:4c:99:44:
         0c:e9:99:1d:83:22:f9:b3:a2:cd:11:44:47:90:03:9b:55:9f:
         9a:9e:5e:6e:8c:b8:bc:e9:ef:e1:a2:5f:7b:68:84:21:8e:f7:
         73:b1:03:2e:39:cd:30:bc:b9:7b:23:7a:3b:87:9c:be:5f:4e:
         b5:ef:65:49:2d:58:2d:5b:df:41:1e:b7:c9:ad:8d:e2:4b:54:
         41:7b:5f:c5:88:60:36:6f:a0:a4:19:12:09:43:bf:ef:3f:09:
         81:bb:2c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:19 2026 by rpki-client