This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File:                     adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier:          caTvNeXiCbSUWJFIcQBQVnBOzn16MY/W9FBprhjyanI=
Subject key identifier:   C9:F6:5A:9C:DF:B2:A3:5E:A3:C2:07:E2:2B:91:AD:4D:E3:AE:60:DA
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer:       /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial:       019C427DFFC6C6F6A9557451633BCF44CCAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number:          114F
Signing time:             Mon 09 Feb 2026 13:01:19 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:19 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:19 +0000
Files and hashes:         1: _D3Sx9Q_gbo96AfGIDxHaE95AuY.roa (hash: p9qntnK/kcs265CcfjBLNs1kWk9qAHv/FsQZ2r3slpo=)
                          2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: +EHC2r42yYnKZxdDEFzCibrepGeTfqlfuU1NCsLmih8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:ff:c6:c6:f6:a9:55:74:51:63:3b:cf:44:cc:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
        Validity
            Not Before: Feb  9 13:01:19 2026 GMT
            Not After : Feb 10 13:01:19 2026 GMT
        Subject: CN=c9f65a9cdfb2a35ea3c207e22b91ad4de3ae60da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:fb:e1:ca:61:68:80:93:2a:04:a3:30:ea:
                    c6:53:2e:2f:05:d8:75:62:f4:76:77:a5:d3:fc:29:
                    cd:03:19:dc:59:7d:e5:c1:36:a7:66:18:dc:bd:f9:
                    c1:2e:06:52:01:e5:a8:5d:b6:7a:e2:b9:36:ad:8a:
                    c5:1a:e9:fc:4e:f9:28:3d:2a:55:34:41:14:3f:5e:
                    a4:14:1d:a4:a7:ec:34:a7:80:b7:c8:c5:ef:f3:c0:
                    e8:5f:a0:2c:c5:3c:39:a3:93:d0:99:49:f5:6f:bc:
                    fd:7a:89:ff:c0:ae:bb:42:2f:96:ce:20:e0:8c:41:
                    f1:88:9c:10:1d:99:65:8b:4c:16:04:52:99:e9:f9:
                    02:14:0b:ad:d6:1e:de:b1:a9:e0:ef:79:80:41:fa:
                    55:97:98:55:01:5d:51:07:5e:86:53:9d:f3:28:25:
                    10:3c:e0:f0:ee:9b:5c:f2:75:0e:65:0b:f0:8c:14:
                    16:fd:92:8d:44:0d:d9:28:56:6c:0b:04:17:85:db:
                    74:c2:3a:3a:d1:eb:e4:2b:10:70:36:99:6c:70:08:
                    01:f2:ed:ce:23:72:d8:ce:c1:32:65:d6:f6:5b:9a:
                    65:e1:13:be:38:e2:b8:0e:25:fe:85:aa:2b:a3:8d:
                    13:d7:86:95:16:30:f5:3e:b7:f7:bf:a2:95:4a:07:
                    93:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F6:5A:9C:DF:B2:A3:5E:A3:C2:07:E2:2B:91:AD:4D:E3:AE:60:DA
            X509v3 Authority Key Identifier:
                keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:89:30:f8:96:6d:c2:a9:c8:dc:d9:81:e5:e2:20:e3:50:c5:
         99:e1:d5:84:a9:0d:6a:2b:6a:e5:f0:ae:c7:7e:3d:ea:99:6a:
         66:8e:78:4b:31:aa:96:65:54:0b:f9:4e:51:58:9e:d0:8b:d4:
         2f:4d:06:49:b7:a8:2d:53:1f:9c:0c:cc:cb:75:b4:b1:a8:60:
         ea:5a:21:43:5a:f9:da:5b:e4:50:d8:cd:bd:78:af:75:9e:94:
         e5:bc:ac:19:66:fd:a6:2a:52:38:e0:5c:39:f0:35:36:fb:f0:
         14:dd:38:32:32:3e:9b:bb:03:a0:8b:c3:fe:16:02:b5:2c:d4:
         5f:b5:33:92:69:c4:cb:77:d7:24:ad:2e:82:f9:b3:d2:45:78:
         f5:32:f6:17:5a:ac:02:26:26:9f:f4:67:53:a5:2e:90:75:33:
         9f:f8:4d:dc:76:0f:3b:f4:f6:cf:36:7c:fe:d1:9b:7c:74:23:
         d7:f3:a1:19:13:61:77:df:99:57:d1:ea:02:cd:0c:9a:2f:30:
         6b:fa:d6:7e:dd:53:06:b8:50:4b:41:3a:c2:7a:32:28:1f:ff:
         03:71:53:53:a2:f7:1d:fa:e6:b5:36:ba:68:30:f1:48:87:ee:
         be:00:dc:a9:05:65:0b:0f:0c:d6:36:34:9d:a3:23:01:01:94:
         3d:39:dc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:38 2026 by rpki-client