This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
File:                     9A68dJdsw9CsbGRtUHcPjZoWqeo.mft (raw, json)
Hash identifier:          AtvzVEtVdI1Ai7neDELvACxPfmWbDs7DABAl2mwDqiM=
Subject key identifier:   59:24:0F:66:6A:AE:12:58:EA:5E:EC:72:67:A2:60:CD:36:CD:F3:FE
Authority key identifier: F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA
Certificate issuer:       /CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
Certificate serial:       019C4321CBE5C4026226DD37AA64C4D427BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
Manifest number:          44
Signing time:             Mon 09 Feb 2026 16:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:14 +0000
Files and hashes:         1: 9A68dJdsw9CsbGRtUHcPjZoWqeo.crl (hash: 7ICnOjViN60cVQ669NXkxaLOUWNTykIsatrOGkrKMM8=)
                          2: tVu7BYqzK7HHJE7VWOqHniuV0eI.roa (hash: +vdMw+WbTVZEHF+kPAmVUh0yHJxwjTgxs7NEPk4U6mQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:cb:e5:c4:02:62:26:dd:37:aa:64:c4:d4:27:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
        Validity
            Not Before: Feb  9 16:00:14 2026 GMT
            Not After : Feb 10 16:00:14 2026 GMT
        Subject: CN=59240f666aae1258ea5eec7267a260cd36cdf3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:35:35:ce:50:99:22:10:ed:ee:53:2c:64:
                    8e:4d:e4:61:98:cc:bd:f2:25:cc:27:61:b6:44:2f:
                    c5:38:62:69:69:8b:a1:7a:6f:b0:cf:0c:36:df:e4:
                    b5:c8:99:a5:1c:a4:85:57:ca:44:8d:4c:73:21:ef:
                    e4:46:e6:a4:99:0d:0e:a5:98:19:4a:59:30:aa:64:
                    77:67:97:c7:97:a1:f3:52:b9:3f:96:6d:f4:a5:03:
                    3c:57:3f:cf:c0:17:df:1e:39:84:88:bd:c0:70:53:
                    9c:2b:8a:28:d0:59:8b:e6:86:c0:a6:73:d1:37:41:
                    42:bc:b6:b8:29:ac:fc:76:9b:01:e3:56:e3:5e:93:
                    88:84:68:c5:96:c7:cc:84:47:74:aa:97:ba:20:b4:
                    2d:f0:89:ea:06:a8:06:15:02:95:9b:d0:39:9b:9c:
                    6b:62:01:79:cc:2a:88:15:99:54:80:2a:68:35:b7:
                    65:d1:dc:bb:b6:df:76:02:ac:3c:e5:55:a3:8b:bc:
                    09:53:3d:c2:6a:37:cd:18:e8:d2:b1:94:1a:1d:78:
                    6f:18:37:3f:23:62:4c:c5:a4:11:01:41:55:ba:02:
                    74:23:41:58:4e:c6:92:88:fa:37:61:d0:e8:3a:a9:
                    bc:b6:9f:85:e9:b8:39:45:83:44:90:38:d5:15:19:
                    da:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:24:0F:66:6A:AE:12:58:EA:5E:EC:72:67:A2:60:CD:36:CD:F3:FE
            X509v3 Authority Key Identifier:
                keyid:F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2a:f1:55:13:3f:2f:d9:c2:e8:fb:de:09:16:25:60:14:ba:
         26:f0:7b:a9:e0:7b:cb:18:1f:79:16:36:a7:32:02:d5:55:dc:
         b8:fd:72:de:67:b2:ee:68:d2:7f:0d:57:d4:41:20:0b:44:98:
         9a:9f:4f:87:50:ff:0d:d9:20:c1:b5:8b:c7:fd:07:8e:49:fe:
         94:7c:38:f0:c7:f7:de:e4:87:b6:35:32:e1:86:cb:96:b2:12:
         7d:00:d4:c0:d0:7f:b4:f0:02:4e:a9:6d:d0:32:e8:ce:6b:b3:
         57:8b:b2:db:4c:76:48:23:33:74:f2:90:16:89:82:50:d1:a0:
         a1:52:99:41:12:0b:01:a8:b5:97:50:1a:9c:4e:92:ff:71:7a:
         f7:c4:3b:b6:ac:6c:e2:c3:46:6e:4d:35:8b:ec:ee:b2:ea:52:
         7f:72:30:64:00:e4:3d:e7:43:ac:38:31:46:f8:e7:95:9c:4f:
         29:70:60:fb:9e:c8:9d:b9:0e:c4:85:fc:16:43:34:92:04:4d:
         90:31:55:67:b0:1f:50:dc:be:ff:0f:a7:36:0d:8a:2d:a0:3c:
         65:14:30:89:ed:cc:b3:0d:70:8d:c8:74:78:64:47:0d:e6:aa:
         c9:e5:d2:70:2f:37:c9:a1:17:db:89:a7:f1:9c:2d:08:c5:c3:
         f7:e2:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:39:16 2026 by rpki-client