This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          Z0BTt4+RzG4FjdCJRoJrh4KXTjSASPvfH4PrX3xUuGs=
Subject key identifier:   FF:33:34:F9:B4:77:95:76:C1:BB:10:47:82:5C:D1:49:18:34:BD:77
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019C213AE7682FBE146FCFF7BF471808D8D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          15F3
Signing time:             Tue 03 Feb 2026 02:00:34 +0000
Manifest this update:     Tue 03 Feb 2026 02:00:34 +0000
Manifest next update:     Wed 04 Feb 2026 02:00:34 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: SiEKploQMM4+BC3sa7JtcjrupMvQ42QZVFhEpBkAxsY=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:21:3a:e7:68:2f:be:14:6f:cf:f7:bf:47:18:08:d8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Feb  3 02:00:34 2026 GMT
            Not After : Feb  4 02:00:34 2026 GMT
        Subject: CN=ff3334f9b4779576c1bb1047825cd1491834bd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:2f:71:92:86:4a:69:68:21:75:eb:71:7f:
                    f3:f3:f8:54:87:04:2f:b6:4b:f6:d0:a0:7b:3b:43:
                    b8:62:e4:eb:78:ca:15:1c:6f:46:d4:c5:8b:d3:e4:
                    c7:4c:44:a0:95:df:f0:78:22:c8:bf:0b:79:55:e0:
                    39:c6:9a:3d:a5:3e:3e:c0:6a:5f:63:a8:c5:36:28:
                    7a:58:ed:3e:a0:46:83:80:f3:93:bf:a1:ad:ba:58:
                    2f:70:40:12:54:1b:5e:30:65:19:0b:ac:f5:1c:bc:
                    28:47:11:ab:19:90:7a:9f:aa:2d:68:fb:ed:a0:de:
                    6e:ba:ef:5f:b6:45:a4:f2:de:9c:59:a6:dc:9c:8b:
                    c2:28:94:2e:b1:b3:28:44:92:2f:d5:40:6d:b7:c6:
                    c8:3d:1d:e5:d4:22:a7:ed:51:dd:0c:09:18:bb:83:
                    92:84:0c:cf:75:c9:f2:4b:31:c1:26:a8:32:8f:b5:
                    54:8e:03:0a:9d:ea:dd:f1:f4:e9:fd:19:a0:1f:2e:
                    d6:5c:f7:ee:67:0f:33:e5:e3:04:42:07:4e:ea:6d:
                    f4:13:4b:e8:72:a1:5b:dd:35:20:02:b9:7e:cc:a5:
                    d0:bc:84:4b:54:e3:2f:6a:fd:39:64:f2:b5:4f:0c:
                    4e:22:27:3a:58:88:6e:32:2a:b2:21:dc:74:06:e2:
                    33:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:33:34:F9:B4:77:95:76:C1:BB:10:47:82:5C:D1:49:18:34:BD:77
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4e:be:6f:45:72:77:12:80:b0:6e:4c:8c:4d:ae:ad:8c:d1:
         15:5d:71:40:be:8c:fe:12:f1:a6:9f:29:a1:a5:a7:f6:e6:28:
         a7:11:24:11:d4:64:cf:36:66:5d:c7:01:a4:82:2a:8f:eb:3c:
         c3:16:d2:f3:a6:0b:b7:9c:fb:db:b7:ac:55:af:01:5b:94:3e:
         27:4e:b7:d6:b3:87:ea:7f:ac:51:3e:59:cc:eb:d3:06:4e:52:
         18:8d:80:72:45:dd:a1:24:cd:8f:64:a7:71:30:53:b2:a9:dc:
         eb:8d:58:41:1c:0b:8b:b9:63:47:15:5e:2a:f6:74:1b:42:d1:
         4e:61:2a:7c:25:0a:4c:ed:eb:78:05:d1:88:1c:ce:0c:9b:46:
         0a:63:09:1c:01:55:ce:39:c5:0f:09:0d:ea:cb:21:6c:70:bb:
         6b:25:73:2c:01:4f:97:02:f7:ab:04:c1:da:b5:b6:0f:74:d3:
         27:f5:a8:91:af:69:45:9d:64:63:a7:da:1c:38:0a:c0:91:4b:
         44:2e:84:63:ba:c4:a9:51:12:fe:d9:f5:35:d0:58:69:51:65:
         a6:12:af:84:c9:5d:a0:a1:5d:15:fa:b5:8e:1d:ad:18:e8:30:
         ac:ed:7b:00:d8:80:e5:8d:36:8e:c3:19:d0:53:20:91:9f:98:
         a6:e2:95:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 13:05:00 2026 by rpki-client