This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
File:                     soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json)
Hash identifier:          0Z9syEJIXcMLQW7pyZWFv7Yi0tbzZ2cOExas1mcr9SE=
Subject key identifier:   95:E5:BD:06:7F:B1:0A:F8:A8:A9:00:E1:49:D1:20:03:53:C9:7C:E0
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Certificate issuer:       /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial:       019C427DD871A962297700C0A0CDC4D062A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
Manifest number:          1100
Signing time:             Mon 09 Feb 2026 13:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:09 +0000
Files and hashes:         1: 9edgoRI9JlNIz79sa7BfNr6pgh8.roa (hash: DRtSkD3Pzsqv0sboOuhUp1FzUNEQXeI+pQ9DuM7Nj18=)
                          2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: hqRUwhj8SwONPaLt4UbEZaxxRXcxDOri/EIcBZ+znPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:d8:71:a9:62:29:77:00:c0:a0:cd:c4:d0:62:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
        Validity
            Not Before: Feb  9 13:01:09 2026 GMT
            Not After : Feb 10 13:01:09 2026 GMT
        Subject: CN=95e5bd067fb10af8a8a900e149d1200353c97ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:07:e2:3e:ae:04:65:63:30:60:df:f0:ac:7e:
                    fd:a1:41:54:95:1f:0a:51:c8:24:dd:41:c2:1e:1f:
                    c4:f8:c1:81:8d:3e:86:c5:b5:19:4f:57:b7:30:fc:
                    a9:0a:f7:b3:7d:8e:f7:1f:cb:bb:6c:2a:d8:03:02:
                    f9:1a:2b:93:1d:04:d1:b5:40:ec:c0:61:e5:a7:9d:
                    fe:9f:33:d9:1f:c6:cb:c2:b3:66:6a:cd:7a:20:31:
                    74:40:ae:25:59:9e:a0:38:af:c6:b4:58:b9:f4:9b:
                    64:11:0b:6f:6b:bd:46:31:79:0a:71:80:94:67:47:
                    00:8f:2f:3d:de:3f:a2:07:df:bc:cb:ba:76:63:46:
                    17:59:dd:ef:77:64:1f:cf:9a:14:20:13:6e:11:ab:
                    53:4a:fd:c6:d3:44:ae:2c:50:29:9c:72:f0:6a:f7:
                    0c:87:16:b0:5f:43:64:6a:d9:0a:b0:2c:b5:c3:a5:
                    b2:72:d3:a8:80:b4:9e:26:7c:1e:6a:81:7c:b3:9d:
                    ea:7f:0b:f2:65:0f:02:79:c9:99:ab:ff:0e:2e:0a:
                    fd:1c:fb:f7:0f:1e:09:b2:4d:98:bb:c8:67:41:95:
                    02:98:cf:99:07:c4:d3:13:c1:69:34:c1:28:f5:85:
                    7d:6d:78:59:51:9b:2a:a6:16:ef:a9:ea:99:fa:ba:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E5:BD:06:7F:B1:0A:F8:A8:A9:00:E1:49:D1:20:03:53:C9:7C:E0
            X509v3 Authority Key Identifier:
                keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5b:f1:ff:b0:86:fe:7c:e2:0f:49:70:e5:a3:e6:89:0b:59:
         5c:d8:35:f8:92:85:75:64:c6:3d:7c:32:66:54:96:da:d3:c7:
         43:05:af:3e:79:7b:11:fd:5f:1a:e2:0b:0c:9a:2c:89:cf:bf:
         7c:45:c3:d1:70:f6:00:90:4a:1e:3a:30:68:52:3d:43:59:a9:
         17:79:d7:fa:67:bb:82:e6:6b:4a:12:21:b5:cf:60:da:b2:8c:
         92:92:b8:39:68:95:06:d7:b1:2b:57:30:7c:ca:4f:fd:c5:59:
         cb:f0:e4:53:60:14:87:81:98:d6:04:14:e1:f9:46:81:f3:cd:
         1c:3a:2f:75:a3:bb:63:cb:8e:1a:46:f0:33:d7:ef:84:d0:51:
         21:88:c9:c8:fa:5c:5d:42:c5:7e:9a:e0:1c:e5:9a:dd:80:46:
         55:64:ca:93:a4:36:10:30:e3:55:9a:a3:01:92:cd:cd:3a:ef:
         7e:c9:59:2e:f0:07:19:d4:7e:a7:a2:5a:db:34:44:c9:59:87:
         18:5e:8b:99:60:f7:a5:56:7f:40:a1:da:69:9f:cb:f2:e2:46:
         73:4c:d3:e1:15:2c:91:c4:89:6f:f0:c6:d1:1e:c7:4e:a6:bb:
         d7:b8:33:81:9b:2f:27:53:6e:f1:68:44:06:2d:35:a1:4c:a5:
         d3:9f:4c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:38 2026 by rpki-client