This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
File:                     9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json)
Hash identifier:          Ck9ZBTY6QXS9/dhHiAIquB0EQbfSy6+Ft8Lr7MjDKUI=
Subject key identifier:   69:E4:ED:C6:FF:DD:72:A3:22:D8:1A:1D:2B:AF:45:6B:B5:94:51:7F
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Certificate issuer:       /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial:       019C42EB3ADDFD8DF6E1E51D725C6BEA2C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
Manifest number:          1365
Signing time:             Mon 09 Feb 2026 15:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:38 +0000
Files and hashes:         1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: Oeetp5C1i1ayW5AHnYT+JjqwCKmEbEJ/BdPGKdlab3s=)
                          2: F5y9ZOsLF94osiTAvUu_ZpYquTw.roa (hash: XwqPFonWgi2NEgeq0iK4xwmr9JNoIB6OncnPE0wX2yA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:3a:dd:fd:8d:f6:e1:e5:1d:72:5c:6b:ea:2c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
        Validity
            Not Before: Feb  9 15:00:38 2026 GMT
            Not After : Feb 10 15:00:38 2026 GMT
        Subject: CN=69e4edc6ffdd72a322d81a1d2baf456bb594517f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:69:66:73:09:cc:2d:ba:d5:5b:e9:28:f8:
                    11:55:a0:09:7c:cb:23:95:13:24:0f:1e:ee:e3:e3:
                    83:fb:4d:94:47:92:d4:aa:ed:18:67:ba:67:94:a9:
                    0b:99:fa:11:7c:36:7c:e2:fe:78:37:8b:be:25:ba:
                    55:d0:4e:ff:03:36:ba:fc:6d:3a:9c:5e:75:0d:64:
                    a0:96:b3:70:5d:8a:05:c5:bd:15:45:d4:46:00:98:
                    55:bc:53:b0:f0:cb:75:23:2a:84:d4:06:bc:fb:32:
                    18:13:7f:04:c4:ae:35:75:c5:b7:bc:15:d5:ee:8b:
                    80:63:f1:59:16:53:83:95:22:ef:b7:11:0f:38:52:
                    4d:c1:85:f3:08:88:1e:a4:39:24:30:ec:82:1c:dc:
                    24:78:d9:e7:91:dd:73:02:92:4a:e7:fa:01:f8:e9:
                    b4:81:c2:f1:39:29:6a:13:1e:76:e9:2d:d7:77:ae:
                    2a:f8:06:61:5e:a8:68:1d:af:2e:a4:d0:41:db:59:
                    39:8b:12:bf:2e:76:fd:8b:14:1b:0c:a1:5f:57:84:
                    8d:95:b8:24:f6:a5:24:8d:cb:e5:3e:9c:31:48:6f:
                    97:c7:94:82:e0:ab:7c:99:f9:72:db:7e:f3:56:5a:
                    c3:0c:a0:3b:55:28:7e:f7:2e:9a:e4:53:05:08:d0:
                    91:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E4:ED:C6:FF:DD:72:A3:22:D8:1A:1D:2B:AF:45:6B:B5:94:51:7F
            X509v3 Authority Key Identifier:
                keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:fb:7c:8d:5b:7f:77:91:75:27:61:c1:9f:3d:ab:e9:a2:e3:
         7e:f8:d0:14:08:87:c1:54:70:f9:1b:2a:91:24:a5:fa:0b:27:
         1f:56:ec:0d:2f:7e:57:ea:bb:d6:8c:f2:e7:d0:2d:e3:93:30:
         8d:6e:61:fb:21:4c:a7:8b:72:3c:2b:ee:e7:78:6a:db:4c:4d:
         e6:1b:72:2e:a2:30:05:7f:56:92:90:01:b1:a8:af:de:27:d2:
         64:0d:19:fb:6a:4d:4b:35:6d:a5:72:ca:e9:d2:96:03:82:f8:
         90:02:2c:4e:5d:c3:5e:6f:2b:d4:88:dd:1e:be:fc:3d:e4:df:
         45:ad:4c:42:be:13:6e:61:52:95:f5:ad:34:84:53:86:b5:92:
         47:c5:38:f5:e7:bc:05:23:d2:64:57:80:00:eb:8c:d5:18:4c:
         ea:1d:7d:e5:e6:73:43:16:68:5e:11:5b:b8:59:d8:5c:d6:f5:
         b7:89:ee:36:4b:02:9f:93:26:f7:59:8f:5d:5c:0a:6c:cc:f0:
         fd:30:55:3f:82:c0:93:4c:f5:06:13:5a:ca:e8:5d:90:96:ae:
         fa:c7:d5:bd:95:e1:b2:f7:93:7f:71:74:33:cd:e8:ae:82:ab:
         ee:40:89:32:a6:5f:89:ef:be:e9:69:67:9f:23:5a:c6:9a:d9:
         99:2b:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:24 2026 by rpki-client