This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
File:                     V9mTMZ3MkpdpQxiyRus29V_xNw4.mft (raw, json)
Hash identifier:          GPIm6V4XlNcatwdL6XKDcpx1QEUsCzBYmN99mn+mT1E=
Subject key identifier:   BA:4A:CD:9C:B2:4D:DD:02:18:37:D7:C5:AE:9B:68:EE:DE:39:C9:EE
Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
Certificate issuer:       /CN=57d993319dcc9297694318b246eb36f55ff1370e
Certificate serial:       019C439000A7D62D6ABFAAA594546F6CB4E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
Manifest number:          1204
Signing time:             Mon 09 Feb 2026 18:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:36 +0000
Files and hashes:         1: V9mTMZ3MkpdpQxiyRus29V_xNw4.crl (hash: 5Wkiogi+s8b8erkTzjey7aBZZNEaT/Pb+zCFu24Itqo=)
                          2: q1BEcW3yDL01Np_jgFRFv-1DHcU.roa (hash: Y97YBZ6a5ecPlLjsFAxO1R/MZtwx3Kn20kQbNzjd2go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:00:a7:d6:2d:6a:bf:aa:a5:94:54:6f:6c:b4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e
        Validity
            Not Before: Feb  9 18:00:36 2026 GMT
            Not After : Feb 10 18:00:36 2026 GMT
        Subject: CN=ba4acd9cb24ddd021837d7c5ae9b68eede39c9ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:30:12:38:8e:0c:89:40:22:09:ab:b0:b9:
                    0a:ad:0a:54:8d:2a:45:bb:95:ec:83:ed:18:af:f8:
                    32:63:6e:95:50:28:70:db:e4:67:f2:47:13:3b:cb:
                    0a:d4:f7:61:ed:69:2a:09:f7:99:94:98:ad:af:90:
                    16:d9:94:9e:0b:8b:c2:2a:ed:77:d9:ab:75:6d:af:
                    26:fc:a2:88:1d:6c:92:80:c5:0d:e5:bd:8b:a3:a8:
                    f5:a8:43:d1:21:d9:6b:d4:12:36:67:4f:25:8c:01:
                    f3:83:5e:d1:cb:85:5a:c7:1e:c6:b5:f9:5a:9f:a9:
                    ce:3b:28:cb:54:0a:17:bd:74:35:4c:aa:70:27:f7:
                    5e:d6:93:9e:1a:f1:cc:98:0d:90:fb:f9:b5:75:a1:
                    f1:9d:1f:92:0c:e9:76:f5:a4:42:75:d7:8b:91:d4:
                    a9:93:1b:03:3b:70:8f:23:32:1c:14:4a:3e:7c:6f:
                    b5:c9:d7:73:80:ca:61:33:11:32:72:21:12:78:e7:
                    b9:7f:68:47:08:5b:b2:2a:4d:4c:a7:36:ef:06:75:
                    46:f4:53:61:f6:40:04:43:a3:0a:91:6a:02:93:f2:
                    be:fa:b6:98:d6:b0:93:3e:bf:8e:24:94:ba:3a:5a:
                    10:f7:7c:fa:52:c7:3e:64:b9:e7:85:76:a8:6c:a0:
                    f6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4A:CD:9C:B2:4D:DD:02:18:37:D7:C5:AE:9B:68:EE:DE:39:C9:EE
            X509v3 Authority Key Identifier:
                keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:72:a2:a3:3e:26:8b:b1:0d:1f:5d:2c:77:88:c5:d1:fa:99:
         7f:61:0d:cd:c2:dd:33:85:fa:f8:57:2e:6e:4d:93:5e:51:c0:
         c5:bd:6f:d5:35:e8:fc:2e:ad:2d:e1:4a:78:ee:1d:1f:98:f5:
         86:3f:a3:a2:7e:fe:21:51:c1:05:08:1c:e7:3b:b8:39:d8:6f:
         7e:e7:a0:0c:cb:94:42:91:df:a8:90:bc:d6:2a:99:a3:d2:78:
         29:b8:66:c2:0b:1f:1b:6c:96:f3:bb:c0:3f:43:a4:85:08:83:
         ec:bd:02:d3:fc:14:8f:ea:fc:af:83:59:9f:60:b2:7c:6f:9a:
         60:71:77:92:33:8d:bc:a8:8f:57:b4:08:12:38:d0:1a:4a:f0:
         78:2a:a8:4c:60:79:f8:f5:2c:16:64:2a:60:50:b8:41:ac:ba:
         21:fe:f2:19:10:4d:38:07:8c:78:82:69:7e:11:22:01:ff:6b:
         75:fa:9f:e1:a3:1d:ed:3c:1c:48:ed:ae:00:72:e8:dc:69:6b:
         d3:d1:e7:b0:88:72:17:aa:ae:e3:d8:dc:59:28:18:52:bd:ad:
         fa:0c:c8:3e:58:54:35:07:97:77:1b:18:4c:9d:51:a4:cf:3a:
         f0:05:18:bd:b5:78:7c:76:a0:ad:7c:c7:58:87:e6:9d:72:06:
         5d:e1:3c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:30 2026 by rpki-client