This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
File:                     Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft (raw, json)
Hash identifier:          cq2dhewTAYxZ+nDseZjkSzDoJz6VRu4owP4f+oXvCY0=
Subject key identifier:   35:EC:A8:A8:D6:13:C5:BE:56:34:A1:8E:66:B2:67:AE:55:C7:F9:81
Authority key identifier: 32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
Certificate issuer:       /CN=3238786e9f70e6db74230d72675a483bd24ef256
Certificate serial:       019C42467F6602F71CE999C7C026829D21A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
Manifest number:          16C9
Signing time:             Mon 09 Feb 2026 12:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:42 +0000
Files and hashes:         1: 6y-m_Tv-2HoY3JwEXM2VnrUnxqw.roa (hash: E8R/wgypDJ4w/RMOeLSWRMfPnr8DkZ+AnD4la/0OefA=)
                          2: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl (hash: 3Y9bQmTIw53GTESSKRHv9sp45ZcIJHkZETD7d0Wzv3g=)
                          3: g6_rqmKpsS185RvKdmzQuRpD6EA.roa (hash: 8MQ+OY82cMO0+coHMBrDE3ACEbDQROHmItcidzbIiKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:7f:66:02:f7:1c:e9:99:c7:c0:26:82:9d:21:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3238786e9f70e6db74230d72675a483bd24ef256
        Validity
            Not Before: Feb  9 12:00:42 2026 GMT
            Not After : Feb 10 12:00:42 2026 GMT
        Subject: CN=35eca8a8d613c5be5634a18e66b267ae55c7f981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:42:e6:7f:cf:77:fd:87:5a:73:d9:c1:9d:84:
                    9e:1d:70:14:38:e9:c7:06:70:92:ba:24:88:95:de:
                    07:ba:1e:4a:54:53:a0:e0:2b:3b:68:33:31:c7:a2:
                    be:20:10:68:cf:84:2d:8e:a4:8f:ee:36:74:69:f1:
                    0a:7b:0c:be:1e:18:d8:6a:ec:52:39:79:35:98:a7:
                    17:3f:85:a4:5d:ad:62:2f:79:ed:0d:b1:26:3b:3a:
                    ec:da:4c:ab:8a:ce:b0:8a:2c:77:18:eb:87:b1:9b:
                    9d:05:68:cf:dd:38:6d:13:fe:50:5f:9d:aa:bd:81:
                    47:0b:92:01:02:85:90:e7:7e:46:a5:90:a6:97:ac:
                    42:2a:3b:c3:75:2e:45:65:0d:1a:83:f8:b7:6f:f7:
                    51:24:27:20:f8:c7:3b:d2:c1:07:89:63:8f:8d:44:
                    c5:96:d9:87:06:2b:9c:a6:6c:07:d5:92:4f:2c:49:
                    1e:36:62:e8:ad:90:e5:82:73:45:cb:7b:39:3e:dc:
                    fd:c4:61:06:ae:29:b0:71:01:21:d5:36:48:00:e5:
                    f0:cf:fd:4e:b7:7e:40:97:3d:f3:3c:9a:54:a6:7a:
                    ff:3d:1d:22:6c:57:d4:aa:26:92:46:80:b4:58:a5:
                    7e:32:da:7c:06:3e:4c:75:ea:42:68:3c:59:c3:9e:
                    b5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EC:A8:A8:D6:13:C5:BE:56:34:A1:8E:66:B2:67:AE:55:C7:F9:81
            X509v3 Authority Key Identifier:
                keyid:32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:55:22:8b:f5:e2:69:0d:16:03:1a:ca:68:44:6a:10:b6:62:
         45:d3:22:9e:c0:dd:73:3a:59:57:24:d2:00:c7:c3:a1:5b:8a:
         55:ce:9e:5b:36:9d:26:34:bb:86:a3:11:f2:79:2c:76:e0:f5:
         a8:ba:1b:7f:40:80:b5:05:b2:3a:78:f1:de:00:8f:ae:ea:23:
         5e:87:4b:c4:bf:60:de:24:d9:f4:53:c5:e2:88:88:41:aa:a6:
         e9:e8:cc:64:47:29:db:6f:96:49:c5:d4:f9:5e:56:a7:21:1b:
         57:29:bb:2f:f8:23:e9:ab:97:e9:e9:77:20:f1:37:4a:62:30:
         91:e6:06:12:45:6f:d9:1e:2c:be:0b:37:0e:07:8d:52:63:be:
         8c:1b:17:a7:53:c9:4c:03:05:fb:7f:bd:d6:8c:28:fc:19:03:
         98:a5:d5:06:0c:b1:9c:8d:28:2f:41:b1:54:bb:18:8f:ba:63:
         fc:bc:66:e8:b4:90:a2:89:1e:13:de:55:b1:cd:30:8d:fa:6e:
         d9:38:e6:f2:a5:a0:04:d9:8a:a4:34:2a:f0:f7:cc:7d:1a:e0:
         69:82:8b:f4:83:42:45:62:0a:3d:7e:53:19:34:23:89:d2:9c:
         56:72:5a:8c:61:20:01:32:a7:8e:7c:d5:70:dc:92:62:d5:52:
         63:88:be:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:14 2026 by rpki-client