This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
File:                     d9LZKEIxBOXDSA4htKPtFJiyon4.mft (raw, json)
Hash identifier:          hxGRJuodZn9IqWX3j9ZkjeoBv+eQAy9OalyCgvKIAKA=
Subject key identifier:   BF:4F:AF:4E:A1:5A:8F:34:0D:81:20:97:5D:A6:84:1D:42:E2:E4:67
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Certificate issuer:       /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial:       019C418F41451328A43CE60FD11D27B84E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
Manifest number:          0D8A
Signing time:             Mon 09 Feb 2026 08:40:33 +0000
Manifest this update:     Mon 09 Feb 2026 08:40:33 +0000
Manifest next update:     Tue 10 Feb 2026 08:40:33 +0000
Files and hashes:         1: 6h9k6xzi-eiSHNvIfR1iiY1lGdQ.roa (hash: pfVa1UicKiOy2Facu1pK6Uyiw1IMqVl6D7uB18F/7yw=)
                          2: 9Y6XWJ6VWz8otzDPBalCUtCfzZU.roa (hash: sjrsCbBwaUlQ8V+c9dddc6DlyD0j++DkIm2cvSRmRTg=)
                          3: bWOm_rxxwcbWaTmu2SnHiIL1r88.asa (hash: QCA4tD64a2YOFOaYQUc8hAaRjVEoTC+6/Xd9DFb0omA=)
                          4: d9LZKEIxBOXDSA4htKPtFJiyon4.crl (hash: HhSE0a6djCOO2HfvSxx50kjRS97mPrXA0EuLU8vqAE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:8f:41:45:13:28:a4:3c:e6:0f:d1:1d:27:b8:4e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
        Validity
            Not Before: Feb  9 08:40:33 2026 GMT
            Not After : Feb 10 08:40:33 2026 GMT
        Subject: CN=bf4faf4ea15a8f340d8120975da6841d42e2e467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:3d:89:13:41:69:8d:0e:1b:8a:73:58:70:
                    89:b8:b0:fd:22:69:e4:61:74:77:41:14:5c:eb:6c:
                    51:29:5b:6e:68:b5:0e:b5:d9:9f:e6:9d:6c:9c:18:
                    7d:3d:95:06:6d:9b:79:17:e7:ba:4c:2b:9e:3b:64:
                    56:eb:ba:b5:4e:25:52:7c:82:35:d6:ff:c1:be:53:
                    54:55:95:9d:98:5a:03:77:3d:e4:d5:33:7b:fa:42:
                    72:4f:82:0c:3e:57:2f:90:d3:39:58:ed:90:6b:9e:
                    09:ef:35:fa:a0:f2:01:32:6c:36:e1:fa:d5:0d:ba:
                    5e:87:96:0f:36:19:7a:f4:12:a6:a7:79:99:3a:d9:
                    7b:e8:ad:d4:77:95:e3:19:49:59:cb:51:bf:65:50:
                    77:35:55:bd:be:09:05:38:60:da:07:cb:50:d3:ca:
                    d2:ee:b5:be:17:f0:44:28:0a:6d:4b:39:73:66:68:
                    d9:3f:be:c0:95:bf:e5:ba:0e:c4:a5:02:99:82:ca:
                    2c:10:65:28:37:6c:c9:70:bb:5f:5a:58:08:69:a7:
                    0e:97:bf:6d:b2:0d:06:29:0c:0b:ba:b1:e5:52:71:
                    f5:09:e4:ee:96:f0:84:24:d5:6a:b4:d7:29:e4:46:
                    13:00:1f:c7:43:3f:74:78:9c:5d:d9:1d:89:12:ab:
                    4f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4F:AF:4E:A1:5A:8F:34:0D:81:20:97:5D:A6:84:1D:42:E2:E4:67
            X509v3 Authority Key Identifier:
                keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5e:ab:68:e5:d3:e5:b2:11:06:40:d0:16:4b:34:c8:08:80:
         01:59:c0:46:a2:7f:e1:ee:4d:1b:b7:93:bd:8c:44:3a:9d:1a:
         7d:5f:d8:2b:20:ec:d9:e3:9e:f0:b0:75:04:d2:02:92:b9:cc:
         35:98:c1:5e:55:43:91:99:a2:64:4e:7a:bc:c6:60:8a:a5:93:
         3d:46:13:e0:11:45:bf:0c:d9:d4:66:db:67:1c:39:a1:27:81:
         2e:c5:df:2c:38:92:88:be:fe:d0:aa:28:70:7f:53:13:79:cb:
         97:ab:73:66:fd:5e:9e:82:42:92:c3:07:73:26:36:1d:81:51:
         33:be:e9:46:4b:18:be:54:f5:07:f6:71:41:66:54:0f:bd:c5:
         ed:b6:6b:28:4d:22:37:b9:a2:de:7f:c7:d8:5a:0c:50:6d:36:
         17:b9:48:46:ba:a3:01:18:19:4c:e5:d6:58:18:a5:aa:0c:fc:
         b7:a5:0f:cd:de:bf:3f:4a:ee:ec:df:ea:b7:29:cd:4c:7c:be:
         8a:29:0a:b0:d5:3c:66:6f:6b:84:3c:ee:7a:d5:0b:29:4b:ab:
         d0:6d:bc:92:12:4b:63:59:08:76:d9:7c:40:61:cb:0a:da:03:
         d0:3f:13:24:5b:40:53:d9:1e:53:43:fe:6d:36:42:98:84:c8:
         6d:15:8e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:57 2026 by rpki-client