This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File:                     FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier:          orN98gpXr2ijJJ+ItJ3P/s3Op52mFaKrEKeh58HnuyI=
Subject key identifier:   C9:36:B1:B3:ED:23:6A:B8:B2:6D:FC:6D:17:D1:37:C9:DE:4E:AE:61
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer:       /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial:       019B7AB80C6D8036961D33D43E9A14BB66B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number:          0D9F
Signing time:             Thu 01 Jan 2026 18:00:40 +0000
Manifest this update:     Thu 01 Jan 2026 18:00:40 +0000
Manifest next update:     Fri 02 Jan 2026 18:00:40 +0000
Files and hashes:         1: FDjfPJ1b2un54RcsxFzXrmIh9vw.roa (hash: Ccv8c7H4XZKfbC/jZrSX0si2V/3E8zoZJ2jD84UglfQ=)
                          2: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: tKiFdVURRcP6mbErzsGSu3SdC+UPJw+uMHShtCOWvbE=)
                          3: RnUS1igSJL82HjX33CCsU61QZck.roa (hash: Ca4C5GBPcPOUxC7vkHsVjTSt9X2mkmWbGHVff1pumQA=)
                          4: nenXOTdR_MN811e1s9Lg1rInHxY.roa (hash: hyWjywUgqQpYVmd438IBWEVlqHt+CxuJlbA1x1JMEic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:b8:0c:6d:80:36:96:1d:33:d4:3e:9a:14:bb:66:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
        Validity
            Not Before: Jan  1 18:00:40 2026 GMT
            Not After : Jan  2 18:00:40 2026 GMT
        Subject: CN=c936b1b3ed236ab8b26dfc6d17d137c9de4eae61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:20:90:91:2d:38:75:92:54:f4:5a:f9:f2:72:
                    44:d9:17:d1:09:db:8a:fc:d8:02:0a:74:77:ab:2c:
                    4b:2e:2d:38:ec:12:82:15:5e:21:7f:b8:eb:1a:af:
                    b2:7d:a9:6b:32:80:97:04:a5:01:8d:7e:f4:89:de:
                    9f:28:de:65:01:23:5a:eb:ea:df:3d:35:bd:4d:07:
                    9e:61:94:a7:3c:06:fe:f0:0c:81:da:88:0d:f9:2c:
                    a8:a1:63:5a:f9:bf:bb:84:bc:1f:31:b8:50:ec:56:
                    f1:1a:ee:f0:45:18:5e:39:43:a2:31:4f:e7:31:0b:
                    1a:d6:44:12:61:b8:30:1f:5f:3a:71:77:6a:e5:36:
                    ee:93:13:98:c4:0f:60:f5:86:79:7d:59:b3:a0:04:
                    61:9e:7a:2b:f2:82:f1:8a:90:d0:63:d4:6c:43:46:
                    f7:f4:46:3f:65:6f:63:58:0c:cc:cf:fe:73:37:e6:
                    3d:9d:67:10:1c:f7:ff:3b:77:1b:ae:1c:4b:fe:07:
                    6f:1a:c6:91:43:7e:2a:3c:bf:88:82:e0:82:70:30:
                    e9:a0:77:44:a2:56:e8:f7:d4:8a:73:21:7e:3e:d6:
                    58:c7:43:27:35:7b:b9:9b:4b:c9:49:ad:5a:3f:d1:
                    1d:01:59:46:83:1a:bc:38:02:e3:2a:77:3f:ba:7a:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:36:B1:B3:ED:23:6A:B8:B2:6D:FC:6D:17:D1:37:C9:DE:4E:AE:61
            X509v3 Authority Key Identifier:
                keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ee:7a:d6:a4:39:ad:72:15:ad:1f:c1:0e:b2:88:63:58:87:
         a5:dd:90:e9:3e:18:2c:e6:f2:78:1b:8e:2b:03:cd:9b:5b:3d:
         ae:d2:c1:90:84:9b:41:5a:98:34:e2:82:4c:4d:8b:f4:80:22:
         16:e9:37:40:5e:27:d5:3b:1f:45:a1:08:9f:f0:22:01:a6:18:
         1f:ef:04:3b:ad:78:09:b3:5a:7b:7b:f7:ab:e3:d4:1e:d7:c4:
         f0:f5:5c:0a:65:8c:aa:c7:d8:63:7b:43:97:51:7d:bf:09:0b:
         db:70:1d:ba:20:ad:2b:7f:c2:80:20:d9:57:36:09:7a:39:24:
         83:14:ef:4f:58:7d:38:70:87:ca:4e:c4:a6:c0:dd:92:27:57:
         57:8d:ad:c4:4a:b1:81:1d:12:b2:cd:f8:45:0b:86:3a:e9:58:
         a6:1d:96:9c:ac:0d:38:8e:cf:ee:a1:3c:c9:0b:18:ba:65:95:
         36:b4:24:94:0d:60:8d:6c:74:a1:6d:04:be:56:0f:90:f2:a6:
         46:55:8b:6c:e4:fa:e4:37:7a:9f:3d:3d:4c:4d:77:43:bd:f9:
         c9:38:7f:98:cf:c4:6f:30:36:7b:b0:68:ce:56:db:a6:22:d5:
         33:0c:74:20:4a:8b:52:aa:2d:a6:c1:04:23:28:d7:b6:41:b6:
         44:af:5c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 19:46:46 2026 by rpki-client