This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
File:                     FcGBcG9hxLc3zX63j3Iw40zfwUw.mft (raw, json)
Hash identifier:          s/iDFdQ9rWCe1aZt4nPkDdMbWLA7GDMfHXRTh9G1row=
Subject key identifier:   EB:BB:47:83:63:BA:DB:5E:2C:E1:6C:B6:47:E6:21:38:36:24:EB:5A
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Certificate issuer:       /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial:       019BF53E2EC375C163D20D8E189F1ED21BDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
Manifest number:          0208
Signing time:             Sun 25 Jan 2026 13:00:51 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:51 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:51 +0000
Files and hashes:         1: 9AuCong1zigYqjutdRdR7B3z2og.roa (hash: pxQuSAkEiFjIpythtsl8fCmD/lGDm0b2YQdlT3sht70=)
                          2: FcGBcG9hxLc3zX63j3Iw40zfwUw.crl (hash: 9ubbvvmGO+c7uxxJzQNs5cNrfMLGOumHOqLRBpfUbzI=)
                          3: _3P5Hj-NN5sEQbIoHeVzpxmupBE.roa (hash: fqjtU8iq/3sewZnAYCqosCDuiamCE8qhnJFe+SnTMN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:2e:c3:75:c1:63:d2:0d:8e:18:9f:1e:d2:1b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
        Validity
            Not Before: Jan 25 13:00:51 2026 GMT
            Not After : Jan 26 13:00:51 2026 GMT
        Subject: CN=ebbb478363badb5e2ce16cb647e621383624eb5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:dd:b1:0c:46:7b:a1:4f:12:03:e7:90:2e:
                    af:63:71:60:57:cc:95:bc:da:ba:2e:e9:69:4a:c6:
                    19:47:b8:5d:93:62:33:70:44:f2:a9:90:18:f6:a6:
                    f9:4b:db:5b:88:3d:be:c7:94:da:01:4d:f2:b7:40:
                    d1:9a:76:f6:12:b2:3a:33:00:7a:0c:54:a1:7d:72:
                    7d:48:ea:bf:37:83:65:59:db:9b:49:a7:e2:2b:44:
                    77:83:9e:49:fa:96:66:e4:83:f6:6b:d9:8a:5f:67:
                    d2:99:66:2d:da:89:33:fe:d0:c9:4e:3e:6f:dd:44:
                    72:0a:33:74:cd:5a:a0:3e:14:11:18:2d:87:42:a2:
                    9d:d5:41:13:78:08:2f:6c:63:0a:58:7e:c4:d9:6c:
                    6b:98:01:17:09:70:ef:26:5d:e3:0e:a6:a9:a5:e3:
                    ae:5b:bc:df:e8:86:eb:09:b9:a5:1c:3d:3d:08:90:
                    64:d5:2a:03:8d:7d:68:7b:d2:af:66:ba:fb:1e:57:
                    15:c2:51:22:ca:fe:1b:9a:4b:23:a9:2d:5a:6d:eb:
                    16:b8:a4:8c:89:4d:a8:89:fb:62:33:fe:06:3d:5e:
                    e4:b6:d5:7f:0d:5a:34:b8:fe:bc:be:65:e8:a9:a1:
                    ec:00:02:2c:12:fa:c1:c0:b3:0f:d6:cb:93:80:19:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BB:47:83:63:BA:DB:5E:2C:E1:6C:B6:47:E6:21:38:36:24:EB:5A
            X509v3 Authority Key Identifier:
                keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cb:93:1e:e3:ac:66:be:57:e7:53:a9:e3:8b:8b:9b:7e:47:
         d7:49:8b:9b:4d:2a:8e:54:fc:54:16:ef:45:8a:8e:04:3a:be:
         b4:fa:d5:2d:c1:c3:5c:67:66:2e:7b:69:1f:41:dc:81:12:cd:
         cc:3a:78:e3:c5:8d:57:fb:10:6f:90:e8:79:42:45:8f:e3:28:
         21:a8:30:05:33:cb:30:0a:4c:0d:95:65:e5:e3:99:e5:20:c6:
         c0:98:a6:74:2a:64:90:c2:73:a0:33:bd:0b:5e:ef:6a:2e:6c:
         d0:9f:2a:6b:11:f0:ab:54:99:2b:7f:84:32:23:76:b8:5f:76:
         02:26:a5:ad:ad:11:48:d2:98:02:69:48:00:2a:71:aa:c3:35:
         2f:d9:0a:e7:db:bf:29:44:1c:a4:21:ba:98:6a:7d:cc:06:8d:
         dd:5f:eb:4f:4c:53:25:50:01:f7:f5:ba:15:b2:20:1d:9d:bd:
         5d:14:2a:e7:36:1b:17:3f:64:18:f2:be:c3:b8:fd:46:76:fc:
         86:6f:b5:b0:b4:bf:23:fa:d1:38:c5:a9:5e:b1:28:05:c1:b2:
         70:e6:4c:fd:f4:d7:09:7b:2e:47:3d:7d:aa:72:28:cb:0e:43:
         38:d0:99:12:5d:a4:6f:f8:68:66:b3:b4:2c:fb:0f:f6:40:8c:
         a2:8d:c9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:47:49 2026 by rpki-client