This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File:                     n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier:          X4m8U8+fS0yEDhirEiPbQXbUmfChRijyTb1N/LCnZks=
Subject key identifier:   B2:BA:C8:BC:7E:C4:90:59:34:4E:46:AF:4C:50:A8:0E:45:13:02:B8
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer:       /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial:       019C43FDB4D80DF1E16D546BECA3D947C65D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number:          05CF
Signing time:             Mon 09 Feb 2026 20:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:26 +0000
Files and hashes:         1: BbSoHPZ6_5cJFXmdCfnvim5a3TI.roa (hash: McuildlUAIggMuk9JmdtRzn1hMk29EnAK+dUtR/t2JI=)
                          2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: TIgKJQXitH+Zuxd5YhtxQ+f5lwbca3eR7QzSdg5iBAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:b4:d8:0d:f1:e1:6d:54:6b:ec:a3:d9:47:c6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
        Validity
            Not Before: Feb  9 20:00:26 2026 GMT
            Not After : Feb 10 20:00:26 2026 GMT
        Subject: CN=b2bac8bc7ec49059344e46af4c50a80e451302b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:72:86:1b:62:e8:7c:12:dd:80:e7:65:1d:f9:
                    e7:01:01:7e:56:40:38:d4:d3:29:ef:97:3a:e1:1f:
                    4f:70:d3:3c:94:ed:37:be:ec:3f:3f:ff:e6:f9:47:
                    d7:f5:c8:40:5d:86:d1:c8:f5:e8:12:d0:15:7a:7a:
                    ba:1f:42:f4:42:f9:57:c6:1b:f1:3e:f4:be:24:b4:
                    f2:ec:40:0e:0b:09:34:d0:82:2d:eb:49:0f:c7:65:
                    57:03:55:02:79:6e:e7:d7:28:81:25:44:7a:3b:d8:
                    5e:d9:c2:4e:b7:ee:b6:76:1f:1a:c5:77:18:9b:6e:
                    8e:9a:18:1c:32:61:23:90:45:57:99:46:ee:8e:a8:
                    98:ff:c7:b4:49:c2:2e:8d:29:05:41:fc:a8:27:c9:
                    a5:98:b1:6a:b1:ab:02:b0:59:42:7b:69:22:f6:3c:
                    33:c3:b4:21:7f:98:5b:70:a5:8c:66:38:aa:2c:96:
                    48:07:35:cd:9f:72:fa:70:c7:e5:d1:ad:3e:bc:24:
                    53:46:73:3d:22:c2:98:c0:48:61:65:30:47:c5:7a:
                    09:88:fc:e9:46:47:c2:15:bb:e5:ac:0b:bc:4b:fc:
                    49:4f:a7:79:1a:67:1e:9a:f5:85:68:b3:36:a5:4f:
                    c4:52:90:b1:42:43:8f:db:b6:95:f4:a8:ed:50:5b:
                    1f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BA:C8:BC:7E:C4:90:59:34:4E:46:AF:4C:50:A8:0E:45:13:02:B8
            X509v3 Authority Key Identifier:
                keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:07:d7:e0:1f:61:7c:da:6f:a6:87:eb:1b:73:e6:d7:7b:
         4c:27:d0:da:ff:7c:5d:35:04:28:4e:37:94:e8:bc:29:eb:0b:
         ca:3f:4c:ad:a5:12:59:99:66:df:e3:bd:60:c6:68:91:42:48:
         ed:95:93:f0:12:e9:6c:77:02:84:35:5c:19:bc:d9:72:ec:f5:
         eb:bd:21:70:48:8d:ef:8c:56:55:77:08:85:d5:38:cb:f7:ff:
         13:4e:9e:23:77:b4:6b:17:d1:87:63:2d:54:1d:74:3e:53:0d:
         fe:49:fd:26:77:a9:1b:06:e5:a8:ec:24:6e:7f:5b:9c:a3:35:
         89:4b:6a:32:77:cc:46:6e:99:0b:8b:8c:71:60:c5:a4:77:72:
         53:e9:4e:9b:25:5e:62:5f:8c:d4:36:db:a9:69:c5:67:e3:93:
         1a:31:33:66:37:79:18:1c:b6:bf:86:1d:5d:c0:62:33:85:33:
         13:49:8c:eb:5a:15:47:69:92:47:31:46:fb:8e:18:ce:30:f8:
         10:79:94:88:d1:92:27:20:d1:d9:63:64:b0:d7:33:3a:2c:fc:
         f3:32:cb:2f:1e:0c:76:04:75:87:cd:a9:61:b5:17:29:41:00:
         90:a2:12:95:df:c4:34:64:49:0d:84:e0:c4:3d:23:5e:39:d2:
         e5:0b:73:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:07 2026 by rpki-client