This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          Au5M0vCqjJ15iOm1amwcmDQW0lYWrk5IZo8ff8rONlk=
Subject key identifier:   AF:7A:2C:21:E0:38:C7:BC:59:D8:5E:1B:62:CF:5D:57:D1:44:83:B9
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019BB1396C1A868AE8811F8358FEB9B8A487
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          15B9
Signing time:             Mon 12 Jan 2026 08:01:29 +0000
Manifest this update:     Mon 12 Jan 2026 08:01:29 +0000
Manifest next update:     Tue 13 Jan 2026 08:01:29 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: OHd0+wzm8VENU8MCOPp9maKXs7iDzwseZtLDNgCYvdg=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b1:39:6c:1a:86:8a:e8:81:1f:83:58:fe:b9:b8:a4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Jan 12 08:01:29 2026 GMT
            Not After : Jan 13 08:01:29 2026 GMT
        Subject: CN=af7a2c21e038c7bc59d85e1b62cf5d57d14483b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1f:6c:5f:52:c2:0f:a9:c2:ca:52:c9:a3:c4:
                    e5:12:c9:63:01:ef:aa:df:73:b3:18:13:95:3a:8b:
                    d2:ed:8f:a6:b9:ae:7e:15:c6:25:0f:40:1f:11:ea:
                    18:3e:90:30:0e:cb:81:b7:2a:2c:ea:01:6e:a6:a0:
                    fe:a5:e0:f4:28:e1:a9:f8:8f:72:fe:29:2d:b2:c7:
                    4c:e0:e8:47:de:75:ae:03:1a:c8:ea:b5:e4:01:24:
                    ff:e8:12:39:6a:25:5c:00:3c:b6:46:c4:1b:0a:bb:
                    42:79:15:20:c8:dc:e3:00:b2:e2:89:41:67:fb:f1:
                    09:d7:8e:9b:1b:cd:ff:57:ed:74:c7:98:8e:f5:2c:
                    8b:74:02:33:af:6e:6d:c6:3a:33:8f:10:45:7b:c8:
                    24:d0:08:8a:42:17:d5:cd:39:03:26:79:e7:d5:44:
                    4a:89:0e:9e:58:5a:64:d8:55:31:f9:4b:b8:d8:73:
                    3f:ea:39:9c:6d:40:fd:17:82:bb:ec:10:12:da:90:
                    18:60:d5:99:b2:19:bd:92:80:1e:a4:74:5f:a9:e5:
                    dc:7c:fa:81:1a:88:d4:5e:83:21:06:74:6e:f1:a1:
                    ce:68:41:40:e3:d1:0b:d6:45:73:30:a6:9f:10:e5:
                    30:8e:af:7d:59:67:6a:f2:09:90:f0:32:a5:4e:4d:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7A:2C:21:E0:38:C7:BC:59:D8:5E:1B:62:CF:5D:57:D1:44:83:B9
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d9:29:aa:83:f3:25:38:8e:50:3d:e5:ed:00:00:08:a7:d0:
         51:49:cf:24:e3:45:b9:68:34:4f:a4:1f:47:de:fb:3d:8e:ea:
         ad:af:7d:70:9e:1b:1e:dd:95:35:f2:be:ac:49:2f:af:23:f4:
         82:df:bf:9c:c2:33:cb:54:7b:eb:47:e3:97:da:e2:26:8d:2f:
         38:f8:0a:60:38:95:a6:0b:44:c4:a2:4c:26:35:1d:7a:96:22:
         33:18:78:a8:cd:45:06:13:2c:08:08:58:77:4a:73:9e:64:0d:
         e4:7d:be:ba:30:f2:bb:79:2b:f1:53:ae:39:bb:ad:88:ab:47:
         c0:56:31:0c:40:db:99:e1:ce:3a:53:8a:ec:09:ad:d7:7b:4b:
         d0:d4:e1:61:03:f2:12:69:68:70:3f:c7:2c:a3:9a:ff:aa:cc:
         43:c8:7d:c0:a0:27:31:16:0c:5a:31:e5:04:d1:2e:bb:a4:75:
         a9:99:e8:f5:ba:c1:b4:11:63:70:e1:b2:df:9d:fe:6d:c1:ca:
         20:d1:af:e6:e1:d9:58:b3:ec:03:20:58:6d:85:e8:3e:28:ed:
         ff:85:10:81:d5:a2:b8:8c:f4:96:7d:17:90:30:05:60:18:38:
         e5:6c:d1:2f:a9:59:e7:e6:d0:4c:42:df:da:44:cb:d5:5b:27:
         9a:63:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:18:56 2026 by rpki-client