This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File:                     9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier:          Y6u6iLBE4oJUad+8XxHxHIVO344RzCtamBJES56BIVQ=
Subject key identifier:   48:F8:9C:4D:C1:C3:8F:EB:5E:D6:0B:4A:83:71:97:65:B4:81:5F:2D
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer:       /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial:       019C4133D6A01476CCAFD3AB9455315C8C2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number:          0C48
Signing time:             Mon 09 Feb 2026 07:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:42 +0000
Files and hashes:         1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: vVAWu1C22Efot4/IltdW/Y4C2Bua24tz1jOczEdEwOk=)
                          2: d5odnptrjJaW4wbv5e-w-InznHA.roa (hash: HdS9hjcjd6FA7NCMLYoBnDJO3cACO6YPZ4nZtli4PVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:d6:a0:14:76:cc:af:d3:ab:94:55:31:5c:8c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
        Validity
            Not Before: Feb  9 07:00:42 2026 GMT
            Not After : Feb 10 07:00:42 2026 GMT
        Subject: CN=48f89c4dc1c38feb5ed60b4a83719765b4815f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2b:e6:d5:ff:98:3f:35:36:e2:ea:3c:d9:0b:
                    f8:6f:ef:05:f7:5e:54:14:ad:28:65:d6:5a:06:bc:
                    ee:41:72:b3:14:16:d0:8d:39:fd:5b:ba:17:f7:89:
                    e6:45:45:93:a3:38:ba:0c:0e:74:92:c7:3b:07:15:
                    ce:99:6e:98:df:03:70:bc:74:78:c7:0e:4d:ac:6a:
                    ce:79:63:02:b7:56:0c:01:76:72:a7:f5:9f:b8:1c:
                    cc:41:0a:bc:4a:13:be:02:17:bc:6a:6a:40:7d:b9:
                    07:77:50:a0:2a:77:ec:dc:0a:f0:15:5a:08:01:dc:
                    8a:40:f8:1f:9d:a4:c4:27:49:25:68:ce:0c:28:1a:
                    a1:81:21:af:9c:8f:79:5f:52:21:a8:9b:8e:85:d8:
                    f2:fd:7a:3c:a9:7c:cd:17:fe:42:fb:82:aa:fd:b5:
                    ea:10:94:b8:c6:74:49:fc:a9:95:2c:81:52:20:2c:
                    b8:b5:08:ea:3b:1a:4b:d2:76:4c:c1:c9:b2:2e:d9:
                    32:87:aa:0f:6e:5d:77:09:75:f1:f2:ba:8c:07:47:
                    df:27:bc:a0:c6:d4:15:26:ac:42:b9:2e:dc:79:85:
                    99:ee:a0:2b:f8:c9:11:ee:69:2d:40:f4:20:fa:e1:
                    af:47:82:d6:eb:c3:40:67:22:87:eb:c7:50:99:d4:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F8:9C:4D:C1:C3:8F:EB:5E:D6:0B:4A:83:71:97:65:B4:81:5F:2D
            X509v3 Authority Key Identifier:
                keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:35:27:44:7c:da:00:63:90:7c:e7:ef:58:4c:7e:70:0a:d0:
         09:8b:bc:4f:1c:d9:1f:fe:19:40:b4:4e:41:63:8e:97:38:bc:
         fe:33:20:1c:3d:4c:35:44:a6:0e:49:54:6d:10:18:6e:e9:3a:
         12:e1:81:7c:11:6f:7c:00:71:11:5e:2c:82:67:b4:9d:1c:c3:
         48:5f:e8:55:90:45:ea:c7:50:5c:c1:67:04:34:29:d6:db:77:
         3d:41:f7:46:5b:3d:6b:75:6f:d2:5f:13:b1:90:df:7e:53:0d:
         77:8e:0e:6d:bf:18:4e:57:b3:64:1c:cb:33:ec:1a:05:4e:14:
         f0:2b:b7:ff:0f:ee:95:29:10:ab:19:74:58:a6:66:26:01:d7:
         23:79:62:8c:6f:6b:06:d7:3e:ee:88:92:aa:30:fe:07:f2:83:
         c2:5f:86:ad:29:64:d4:4b:71:98:9f:df:2f:37:e5:61:f5:0e:
         a6:ab:5c:3d:52:a3:af:ad:c0:ec:03:ff:b6:2d:0a:b0:14:4f:
         bb:77:f7:47:cb:2a:68:32:85:89:f8:4b:9a:f4:21:43:68:33:
         4e:96:c8:3c:ca:f8:cb:cf:ce:75:0f:8a:fa:d3:75:ee:74:91:
         fe:06:b2:27:4c:65:69:aa:c8:63:32:7b:ff:59:73:70:99:11:
         ac:c2:1f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:29 2026 by rpki-client