This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File:                     1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier:          5mPyZE0Y9Xo/99Ht0dgDbeNK/uPZnyyjxEcz6yPkGm4=
Subject key identifier:   52:35:C9:AF:D5:DE:A0:CD:A2:F7:C8:F7:0A:5B:5D:03:DA:98:0F:BB
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer:       /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial:       019C4322AF04900C3860B1ECDE2326D5DDCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 16:01:12 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:12 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:12 +0000
Files and hashes:         1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: 4cLCJS8AQBd7BUUuq2Jl2rZ3lrowwOw4FlHyOC1EtRo=)
                          2: MYsq3VI7S6Tys8tH6kZ55isv4aM.roa (hash: nLJu9Ca3UL28v4nK9lRnWd7XxYbaE6zulNTp5ZAXAYk=)
                          3: q_ccM_3Nsf3YIqRvSxwp7j28WKA.roa (hash: bQAdrUPOpax3Tea6DtDpoS5dYyAQRIvDyf7eum/Y1dM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:af:04:90:0c:38:60:b1:ec:de:23:26:d5:dd:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
        Validity
            Not Before: Feb  9 16:01:12 2026 GMT
            Not After : Feb 10 16:01:12 2026 GMT
        Subject: CN=5235c9afd5dea0cda2f7c8f70a5b5d03da980fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8d:e9:ff:7e:7e:6e:e4:e2:d0:44:57:95:bf:
                    f1:a5:58:00:1b:1f:67:0c:5b:20:99:33:31:40:10:
                    66:ea:c8:45:03:10:52:9d:0a:a7:f7:5a:5c:b7:97:
                    a5:03:6b:99:44:69:99:10:a2:a0:31:d9:31:da:c2:
                    5e:a0:3d:83:37:00:56:22:58:7c:68:07:ee:1d:63:
                    58:1e:41:ed:bb:da:eb:6b:0b:28:c9:a0:9d:5d:be:
                    a8:5d:6d:42:1b:e5:9b:20:16:ca:86:36:cc:02:db:
                    b7:d0:1a:c1:cb:f2:57:a3:2f:5e:f3:4e:02:04:58:
                    2d:93:be:8a:ea:53:f4:d9:dd:65:c8:13:b1:cc:8c:
                    5b:52:16:c2:13:7a:c2:52:c4:e4:5e:83:de:8a:9a:
                    11:11:57:9f:e3:e4:f3:13:49:d4:51:c5:81:04:b9:
                    58:e1:fb:79:a5:74:61:bf:0d:72:43:b4:fb:bd:df:
                    0a:6d:34:35:41:43:37:7b:78:97:e1:00:0f:34:93:
                    40:70:b3:c7:27:5b:40:95:82:6f:ce:c9:b2:18:72:
                    5f:a1:64:d8:01:af:30:59:3c:10:b6:c9:03:ad:03:
                    48:40:c4:07:1b:90:29:19:fc:f8:73:1b:32:05:60:
                    0e:32:ca:20:f6:d7:82:95:f9:66:d1:90:74:19:62:
                    41:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:35:C9:AF:D5:DE:A0:CD:A2:F7:C8:F7:0A:5B:5D:03:DA:98:0F:BB
            X509v3 Authority Key Identifier:
                keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:57:2f:9a:17:14:70:74:3a:e5:07:95:9b:c5:42:2d:ba:c9:
         5b:cc:53:36:1d:09:05:65:a7:a4:32:a6:b2:14:78:59:06:e1:
         97:f1:fa:9e:9f:ee:48:fa:67:73:81:8d:03:1b:4e:8c:1a:05:
         ee:3e:5e:56:25:1a:b3:52:02:60:ad:25:4a:50:5b:7c:b1:db:
         33:fd:18:da:52:81:db:9d:5a:0b:10:d5:c8:9c:c6:65:e6:92:
         0e:5f:14:6f:b5:f6:49:26:e0:56:5b:00:b2:e1:7e:62:16:bb:
         0a:42:7d:3c:b1:28:66:79:d8:bb:0f:92:fa:4c:ae:5a:03:9a:
         14:f0:c9:8c:bc:36:ec:c0:4f:11:b9:55:bb:85:a9:fb:e9:ff:
         05:39:4d:7f:64:0b:8a:59:91:c6:10:00:92:ee:98:26:ba:c8:
         cf:0c:25:dc:41:7f:bc:c2:c1:69:27:54:00:7a:47:7c:be:15:
         38:e5:b4:81:3c:73:08:6b:d9:56:b2:9e:45:55:55:84:55:21:
         63:be:7d:83:c4:71:48:67:7d:b2:50:3d:70:c1:c4:d5:6c:4a:
         7b:03:f4:89:78:91:b3:6e:b4:0e:f0:45:b7:29:dc:d1:89:5e:
         ff:52:86:eb:09:ac:8d:3a:91:8b:60:1d:f7:5a:1d:a6:49:3a:
         ce:13:48:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:29 2026 by rpki-client