This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File:                     9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier:          kJl2kWaZ1DuExc8ydza/mxWKPW9B/kisj5mMX7LW4XI=
Subject key identifier:   30:55:C1:73:CF:0E:5D:08:89:AD:BE:E4:26:58:C8:46:84:A3:82:3B
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer:       /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial:       019C41D832182D0158AF851DF3DDA50DC95A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number:          07F4
Signing time:             Mon 09 Feb 2026 10:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:13 +0000
Files and hashes:         1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: 6TP/BMKn/kCMUUpjY27Ui5NwbupzzjoKGHyTou1CowE=)
                          2: rHQdQwrAVRUi1O-wNwGNXoOAwg0.roa (hash: 99E6Pbyu+albbhKOZ1Sk3PoNSHlEGTIbABGjf0VzSBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:32:18:2d:01:58:af:85:1d:f3:dd:a5:0d:c9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
        Validity
            Not Before: Feb  9 10:00:13 2026 GMT
            Not After : Feb 10 10:00:13 2026 GMT
        Subject: CN=3055c173cf0e5d0889adbee42658c84684a3823b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e8:06:bd:19:7b:33:a0:29:15:41:02:ac:1f:
                    e6:af:43:bf:54:af:e8:e9:27:d2:b3:85:c9:16:21:
                    8c:ad:15:7d:d6:ad:c4:a1:09:c5:ab:ae:06:bc:ae:
                    f4:48:75:87:64:65:96:05:fd:6c:01:4e:0b:00:7a:
                    bc:3f:6c:71:05:1c:7d:07:85:41:bb:2b:cf:6e:db:
                    60:2c:cd:a7:2e:22:00:56:2b:ab:78:73:02:5a:ad:
                    f7:96:91:ca:af:a0:3e:b2:02:96:ac:36:74:98:64:
                    e3:2d:83:c6:ab:fb:7e:58:ab:e8:45:90:81:b8:81:
                    43:75:19:6c:17:8c:53:9f:38:46:d9:ef:fd:d1:2b:
                    8e:e1:8c:c1:7a:10:62:8f:b5:8a:16:b1:67:e1:42:
                    2c:22:1b:71:ee:b6:f2:99:5b:61:de:1c:70:13:ee:
                    d1:a4:8e:c6:e0:d4:7a:91:42:9f:64:7e:a2:b1:55:
                    8f:f0:7e:db:0d:8b:2a:98:b2:34:57:b2:81:26:9f:
                    2b:b3:71:6c:16:6a:81:0a:3a:bc:b9:ff:08:13:99:
                    43:32:df:96:8b:6b:8c:8e:99:f5:ff:19:7d:f6:17:
                    d7:99:75:cd:8a:6d:aa:34:b5:d3:3c:e2:6a:fc:aa:
                    78:7d:cf:a0:53:c0:2a:45:c1:2f:2d:3d:2d:28:c1:
                    14:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:55:C1:73:CF:0E:5D:08:89:AD:BE:E4:26:58:C8:46:84:A3:82:3B
            X509v3 Authority Key Identifier:
                keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:28:91:94:e5:94:bd:19:5f:44:04:a3:4d:59:09:49:f5:df:
         62:b0:1b:ed:7e:94:35:b5:cb:ab:4a:b3:bf:4c:a2:63:3c:c5:
         0b:6b:f7:f5:40:0d:68:3d:7c:2e:1a:03:4a:ec:6e:d5:7e:21:
         1d:d3:ce:99:fe:85:e1:70:6f:92:9e:d9:d6:8b:63:3a:b7:34:
         31:79:e4:32:68:31:66:d7:e2:4f:33:de:e6:52:ab:f1:78:e9:
         34:d7:3d:be:39:68:d8:06:b8:31:de:1e:41:bb:a8:f8:a6:2a:
         d1:0b:8c:fa:41:a3:74:3a:48:04:79:9e:b0:5a:0e:61:63:71:
         b2:c9:0e:3a:27:21:25:4b:62:f7:63:22:15:ac:78:2e:79:e2:
         40:50:0a:9d:9d:c8:18:6e:cc:5c:8c:e5:14:45:db:bf:7b:4f:
         40:4d:dd:57:03:99:84:31:26:7c:7d:9e:7c:14:d1:5e:2e:4e:
         11:e8:83:a3:0e:dd:4d:b9:42:21:b1:eb:3b:43:d0:56:f7:b1:
         fb:b9:1d:6f:01:3a:0a:ea:bd:6c:59:97:3a:55:4b:89:31:dd:
         e5:e9:cb:75:40:9e:8a:3f:99:27:b9:71:22:1a:25:c5:39:76:
         f2:d5:25:97:38:86:28:5f:aa:01:d5:5f:70:74:4a:17:8c:f9:
         85:5b:0b:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2DIYLQFYr4Ud892lDclaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MDk1MjhiODgyOGI0ZDgyNjM1NWUyYzUyMjM3ZDY0MjA3
MWNkNTQwHhcNMjYwMjA5MTAwMDEzWhcNMjYwMjEwMTAwMDEzWjAzMTEwLwYDVQQD
EygzMDU1YzE3M2NmMGU1ZDA4ODlhZGJlZTQyNjU4Yzg0Njg0YTM4MjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiegGvRl7M6ApFUECrB/mr0O/VK/o
6SfSs4XJFiGMrRV91q3EoQnFq64GvK70SHWHZGWWBf1sAU4LAHq8P2xxBRx9B4VB
uyvPbttgLM2nLiIAViureHMCWq33lpHKr6A+sgKWrDZ0mGTjLYPGq/t+WKvoRZCB
uIFDdRlsF4xTnzhG2e/90SuO4YzBehBij7WKFrFn4UIsIhtx7rbymVth3hxwE+7R
pI7G4NR6kUKfZH6isVWP8H7bDYsqmLI0V7KBJp8rs3FsFmqBCjq8uf8IE5lDMt+W
i2uMjpn1/xl99hfXmXXNim2qNLXTPOJq/Kp4fc+gU8AqRcEvLT0tKMEUwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBVwXPPDl0Iia2+5CZYyEaEo4I7MB8GA1UdIwQY
MBaAFPcJUouIKLTYJjVeLFIjfWQgcc1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEt
OWY3NGZhY2FlOGYxLzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEtOWY3NGZhY2FlOGYx
LzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCiRlOWU
vRlfRASjTVkJSfXfYrAb7X6UNbXLq0qzv0yiYzzFC2v39UANaD18LhoDSuxu1X4h
HdPOmf6F4XBvkp7Z1otjOrc0MXnkMmgxZtfiTzPe5lKr8XjpNNc9vjlo2Aa4Md4e
Qbuo+KYq0QuM+kGjdDpIBHmesFoOYWNxsskOOichJUti92MiFax4LnniQFAKnZ3I
GG7MXIzlFEXbv3tPQE3dVwOZhDEmfH2efBTRXi5OEeiDow7dTblCIbHrO0PQVvex
+7kdbwE6Cuq9bFmXOlVLiTHd5enLdUCeij+ZJ7lxIholxTl28tUllziGKF+qAdVf
cHRKF4z5hVsLAw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:34 2026 by rpki-client