This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File:                     m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier:          q+BzX5M4R3yRlZHu931gLW0zWskkx3OednAzoj+G4xc=
Subject key identifier:   93:E8:FD:78:52:97:0D:FF:84:47:25:D4:60:DF:85:D4:37:DC:0F:27
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer:       /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial:       019C446B9D86F90DEFBE3EBDD000EE7CD4EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 22:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:29 +0000
Files and hashes:         1: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: vZV6s53xD7ZLu6k2igEp3/4EW5b7AId5coVGSjizsAs=)
                          2: uqRQxH9qEjG0hA9B3Ap6knKry0I.roa (hash: aVZsCZDmcN6Rpr0mzKedChfzxWEnLoXai4QxhXhqgNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:9d:86:f9:0d:ef:be:3e:bd:d0:00:ee:7c:d4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
        Validity
            Not Before: Feb  9 22:00:29 2026 GMT
            Not After : Feb 10 22:00:29 2026 GMT
        Subject: CN=93e8fd7852970dff844725d460df85d437dc0f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:66:74:86:ad:df:d7:26:35:84:75:71:59:
                    a1:fe:19:31:50:01:ea:75:bd:8d:23:c3:d0:ad:57:
                    24:7c:d4:6c:ad:25:1b:af:34:6c:ce:6e:af:dc:13:
                    cb:f1:07:1c:47:04:9a:1b:c6:5a:4c:91:c6:c2:79:
                    56:e3:d7:15:ad:39:e3:ae:af:9c:4d:85:4f:3d:5e:
                    64:37:c9:d6:79:7d:fa:8c:4d:fe:b3:96:58:cc:ce:
                    05:25:51:6b:19:66:0a:a5:80:8d:6b:91:97:91:54:
                    91:89:70:30:71:b6:49:9d:88:95:3f:86:2a:94:a3:
                    7f:91:ae:81:48:04:5a:a0:a3:dc:38:da:2c:16:22:
                    48:2b:79:34:f9:c8:67:5d:aa:0b:7a:ec:c1:cc:3b:
                    af:1c:bb:b5:67:b0:4a:83:bd:84:d7:44:1e:ef:ed:
                    cd:f4:e0:04:0a:f2:3a:0e:ed:f2:3f:69:f9:76:86:
                    22:30:99:6c:25:97:3e:d4:27:9a:05:04:87:eb:b4:
                    43:e7:e8:b1:4b:04:ce:4d:f6:37:e0:47:d1:d0:a9:
                    a5:d8:bc:06:f9:39:67:bf:de:09:3e:41:2c:4a:90:
                    82:05:18:a4:73:d8:4a:4d:d8:d8:e0:1a:d3:b0:a1:
                    17:c7:b7:c7:e5:26:21:2a:78:98:01:81:ed:67:47:
                    9a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E8:FD:78:52:97:0D:FF:84:47:25:D4:60:DF:85:D4:37:DC:0F:27
            X509v3 Authority Key Identifier:
                keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:52:be:90:ec:26:ef:59:90:01:97:dc:d7:47:e7:fe:f8:20:
         30:01:30:32:6b:68:92:83:b0:26:c4:da:d3:43:06:54:b7:f8:
         ca:fe:c3:b7:cf:d0:a3:d8:d0:8b:fd:93:b4:35:41:f5:e3:ec:
         5f:d3:97:34:21:c7:69:1d:2f:27:96:dd:05:47:32:ee:20:cd:
         c2:73:24:73:e4:9b:c3:95:64:44:b6:26:05:1a:59:a7:ca:82:
         6c:28:5a:38:a4:ec:59:64:68:bb:c5:a7:d5:fe:18:13:b0:f1:
         50:fe:58:21:17:79:19:cd:bf:ce:12:d3:f5:c8:2a:6d:d4:4d:
         f8:3b:9a:60:be:cb:ed:33:36:c6:cd:03:2f:d7:3a:7e:72:35:
         72:17:18:c7:77:e5:21:2a:ae:0d:0b:2c:a5:2b:13:aa:ea:00:
         44:a5:84:27:69:2f:15:70:9c:50:e8:2e:94:c5:5d:b8:42:3b:
         7f:fb:22:21:03:bd:4c:ec:fb:a6:7d:70:16:eb:c2:62:c8:34:
         7a:d6:2c:fb:19:16:d1:56:58:9a:ec:9c:07:39:4f:03:93:12:
         f5:c7:ab:fb:c3:18:39:f0:a4:2a:0c:9d:70:8f:9f:93:56:59:
         2c:10:6a:8f:b5:a3:49:66:37:08:f6:d7:0c:f7:1c:9c:10:37:
         e9:c2:5d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:11 2026 by rpki-client