This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
File:                     9vqbUoZNztDV7ON-dDciSyVCJIs.mft (raw, json)
Hash identifier:          I8tXRhMXii46O3OPlAaTyc2f7mh0u4TCyw8sAldG660=
Subject key identifier:   87:F6:45:CA:B2:C4:27:95:99:40:A7:2A:43:C6:8B:04:13:44:DC:4C
Authority key identifier: F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
Certificate issuer:       /CN=f6fa9b52864dced0d5ece37e7437224b2542248b
Certificate serial:       019C4358CCC0002CBAF80DAC8EA0D5572F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
Manifest number:          016C
Signing time:             Mon 09 Feb 2026 17:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:18 +0000
Files and hashes:         1: 9vqbUoZNztDV7ON-dDciSyVCJIs.crl (hash: 7GlDvnfdh3n/MdZuIJcOBIdF7yYVPEI+IfzaHNgafWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:cc:c0:00:2c:ba:f8:0d:ac:8e:a0:d5:57:2f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fa9b52864dced0d5ece37e7437224b2542248b
        Validity
            Not Before: Feb  9 17:00:18 2026 GMT
            Not After : Feb 10 17:00:18 2026 GMT
        Subject: CN=87f645cab2c427959940a72a43c68b041344dc4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fe:ed:01:15:86:e9:09:84:a7:d0:29:9c:5c:
                    65:5e:17:58:d1:16:38:5a:f9:63:c3:fe:43:ad:b9:
                    b3:c6:c5:26:c8:3a:e1:61:53:64:ce:b4:32:93:e0:
                    c7:89:b4:64:77:25:af:84:fd:5a:21:5f:b4:00:6d:
                    9e:21:e7:26:4a:df:b5:69:b6:b8:77:74:b6:e4:0f:
                    2c:3e:f1:8d:87:10:d0:aa:b4:f7:ae:cf:d5:14:e2:
                    3b:a8:64:08:fc:93:6d:5e:e2:c1:cd:4a:95:e1:0c:
                    ec:b9:4f:6a:05:63:fe:88:51:52:0e:c0:8e:83:bc:
                    6b:64:5c:6b:cf:0f:11:42:44:d8:2c:b5:b2:39:a2:
                    44:a9:e9:d9:80:49:cc:b1:d2:df:4d:68:6f:5f:0f:
                    cc:fc:0d:a6:45:19:91:83:fa:87:4f:0e:00:30:48:
                    13:81:57:23:a4:10:64:30:0c:f0:37:ed:79:bb:4b:
                    e3:53:63:95:4f:db:b7:46:3f:86:af:26:9a:e8:d9:
                    97:6c:01:93:14:36:45:a3:6e:d6:4d:6e:b4:8b:eb:
                    03:b2:be:d4:89:b8:8f:66:7f:5e:3e:07:71:da:2a:
                    65:b8:3a:c2:d7:12:1b:7d:f7:54:87:81:0b:81:67:
                    47:76:9a:b2:f6:2d:b2:41:c0:7b:93:ea:e3:a9:22:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F6:45:CA:B2:C4:27:95:99:40:A7:2A:43:C6:8B:04:13:44:DC:4C
            X509v3 Authority Key Identifier:
                keyid:F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:48:20:3b:6c:3d:f4:68:d3:5f:ca:80:de:d9:e4:74:a5:3c:
         1f:90:93:23:84:01:bf:89:49:a1:4f:f0:dc:c1:d4:41:18:de:
         fb:4e:26:85:5c:e9:d2:bd:b7:9d:54:8b:7f:7a:69:0a:90:c1:
         71:1e:4b:5a:b2:5c:8a:c0:76:93:1f:ad:26:c1:7e:4e:65:a3:
         84:2f:f0:33:28:fb:26:13:d1:e4:c6:e5:c2:74:96:19:70:25:
         f7:60:58:18:8c:e6:d5:76:f1:ec:23:28:50:5d:49:aa:c6:38:
         48:90:2e:0d:3b:04:23:1f:a3:56:f3:d3:35:56:f5:ac:6e:85:
         9a:69:ac:76:89:6b:48:fa:86:fc:f3:45:ab:03:f4:42:86:13:
         8c:16:54:dd:e2:44:bc:f9:d0:a5:1a:d7:a7:61:83:bd:6d:b3:
         20:6b:c0:84:3a:11:c4:33:5a:4f:e1:8d:0b:ea:aa:59:f3:29:
         8b:23:e2:e3:84:ac:39:30:b0:42:1f:f8:ac:fc:03:4c:54:06:
         27:60:c7:c3:a2:f8:d3:fe:64:1e:66:4b:f9:1f:73:3c:86:e4:
         76:72:be:1e:4d:49:dc:dc:c8:8b:8d:54:a1:c0:37:d4:91:a0:
         59:42:ce:13:17:31:9c:f9:92:5d:d1:5e:17:71:83:f1:cc:03:
         d9:ec:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:58 2026 by rpki-client