This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File:                     C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier:          M0U6wee0rh9v9gOokW5j5Nx0SiQ0Mb6nxBDLGoAMacA=
Subject key identifier:   68:DC:DE:BA:76:C9:75:FC:62:2E:2C:EB:14:58:5B:E6:18:E6:82:21
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer:       /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial:       019C41D8CFA79284FC88E6DD3E56EE33AA81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 10:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:53 +0000
Files and hashes:         1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: 64bkipwY/hWW9PAWzu/yU8HSi2E6rHAe4elER/LkHdM=)
                          2: dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa (hash: Y2dgJ4DWPL8fkVQXpK7L7O/MdaqkPR462UIcleTQtzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:cf:a7:92:84:fc:88:e6:dd:3e:56:ee:33:aa:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
        Validity
            Not Before: Feb  9 10:00:53 2026 GMT
            Not After : Feb 10 10:00:53 2026 GMT
        Subject: CN=68dcdeba76c975fc622e2ceb14585be618e68221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:c6:83:8d:b4:63:a5:4a:a8:38:57:5d:95:
                    cc:12:38:5d:8a:2c:e1:00:41:30:d6:4b:08:d4:1c:
                    e4:3a:d6:d5:0d:c6:0b:c5:e4:fe:c4:33:30:1f:19:
                    e7:2c:e7:7c:5d:fe:c6:f8:ad:bf:36:a1:f3:21:e5:
                    c1:6b:5c:de:b3:35:82:e5:22:f5:e1:bd:24:32:a6:
                    36:4f:f9:9b:91:f9:2f:ad:fa:87:75:a7:2b:5a:eb:
                    2e:97:a4:34:00:21:46:f4:38:be:f6:a1:b0:0a:e4:
                    2c:14:68:36:0a:bc:8f:74:33:57:6a:b1:30:4a:40:
                    9d:73:b0:22:b5:3f:22:a2:d5:b1:1f:59:00:80:99:
                    27:12:0b:4b:d5:93:7a:c5:aa:de:c6:d8:f5:87:19:
                    38:64:bf:02:a1:df:6e:44:8f:ec:ce:8d:e0:7d:bd:
                    0d:f0:e0:20:dd:37:e0:a3:2c:2c:21:00:0a:f3:f8:
                    3a:b8:d5:a5:db:9a:a3:0b:27:91:3e:37:5f:12:f9:
                    f7:31:00:75:44:92:ca:12:ee:07:49:c4:a6:ed:39:
                    60:a5:03:d9:92:f6:38:22:ce:a9:4c:1b:20:0b:ec:
                    57:37:e6:e8:c0:14:bb:7a:d0:c5:85:21:59:87:95:
                    69:5d:03:21:da:fd:4b:3c:f6:4a:2c:f8:2e:fe:af:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DC:DE:BA:76:C9:75:FC:62:2E:2C:EB:14:58:5B:E6:18:E6:82:21
            X509v3 Authority Key Identifier:
                keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a7:f4:e9:4b:be:48:4f:93:b7:54:05:8d:8b:da:3a:85:ab:
         36:c2:e7:53:49:50:ee:35:8a:96:aa:72:d8:b8:29:af:58:8a:
         c4:9a:d5:fc:87:59:f3:7d:21:42:76:68:49:44:2a:a0:1c:6c:
         cf:d7:28:3b:dc:fc:a4:da:55:98:e2:25:ea:a9:9a:6c:55:3a:
         60:0b:91:2f:2f:00:eb:ef:c5:84:19:9a:64:9c:be:51:80:0b:
         e9:6d:af:31:dd:73:5f:4c:59:87:7c:18:86:8f:de:cd:a7:24:
         34:ae:b1:1b:53:32:43:76:cc:c5:a8:2d:1e:7c:d5:0c:74:5b:
         59:f5:8e:a4:07:13:c4:a1:76:d8:20:62:d7:96:96:28:42:d7:
         e7:82:25:62:34:4d:02:09:ca:be:80:f4:26:fa:f5:7d:08:5c:
         98:c0:ce:e7:1d:2a:b6:2b:9d:18:81:a6:0f:50:9f:93:d9:5a:
         e3:f6:0e:a6:7b:a4:e9:eb:45:59:c8:a3:c0:7e:8a:77:8d:5e:
         d7:d5:c5:74:4c:d6:db:35:c8:19:f7:ba:bc:17:2a:13:35:d6:
         07:ff:81:8c:18:fe:2d:47:01:da:ad:d1:2d:ef:33:0c:9f:c3:
         ae:9e:27:6d:c5:aa:8b:5c:11:6d:cb:1e:1f:63:81:af:54:4d:
         ca:0c:69:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:25 2026 by rpki-client