This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
File:                     0F9s96mFiwKHHBx_E9GzOIDpii0.mft (raw, json)
Hash identifier:          Nh5j49o9j0L7DrHNbJabA/ADr1qap7sI00pZzaOtgSA=
Subject key identifier:   C9:AC:F5:23:4B:94:06:4E:C0:BE:00:F3:FF:E2:40:1B:D4:30:2E:6E
Authority key identifier: D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D
Certificate issuer:       /CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d
Certificate serial:       019C4246D3CAB014CEACF6BAAC98FF3C4A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
Manifest number:          94
Signing time:             Mon 09 Feb 2026 12:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 12:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 12:01:03 +0000
Files and hashes:         1: 0F9s96mFiwKHHBx_E9GzOIDpii0.crl (hash: /ws2MoEdCyQJxOaccs5Ncpo/WHwfFBOGToyl2vryh4o=)
                          2: dIxRZVoK391SO4N57N0kDl39xT8.roa (hash: svamFcAbrklGijDHK+E9cDfDGI1J3qNLX+B2lQjxTj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:d3:ca:b0:14:ce:ac:f6:ba:ac:98:ff:3c:4a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d
        Validity
            Not Before: Feb  9 12:01:03 2026 GMT
            Not After : Feb 10 12:01:03 2026 GMT
        Subject: CN=c9acf5234b94064ec0be00f3ffe2401bd4302e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:47:53:b6:72:ea:cc:ee:25:60:4c:4a:ef:4e:
                    42:19:8e:42:2b:93:b8:13:23:b7:9e:a8:bd:77:f9:
                    93:68:66:2a:3b:be:7a:f0:15:c5:67:a8:b8:bc:fa:
                    99:42:14:b2:b8:4c:eb:f3:98:8b:2d:96:1f:40:7e:
                    36:81:3c:be:50:8e:c7:72:d3:29:74:fa:a5:08:41:
                    6b:68:e9:d3:9b:52:81:1d:74:be:b8:ad:82:1d:ca:
                    84:46:bd:49:ba:9d:84:d3:73:5e:c2:05:6f:b2:9b:
                    d2:0d:d1:1a:ae:41:8c:ab:21:02:56:ae:82:5a:ff:
                    11:16:13:84:65:ec:80:a9:2c:ee:c5:8e:23:0b:69:
                    5c:03:2e:31:53:47:06:00:6d:6c:bc:85:ca:9d:2c:
                    63:69:8b:8c:fe:8b:0b:23:da:9b:6d:cc:2f:5a:2f:
                    b9:c5:ca:78:7c:4e:a3:d9:f3:f0:cc:ca:ef:ba:90:
                    ab:54:e5:18:e8:50:88:4c:0d:03:2f:ea:10:53:39:
                    a9:3e:50:d1:d9:41:8d:c3:38:31:d8:c6:78:1e:ec:
                    29:3e:f0:78:be:e5:8e:ea:c9:1b:51:95:cc:20:74:
                    3f:ac:ba:20:07:67:36:e6:15:01:da:74:79:81:14:
                    8b:1d:65:96:51:bd:3a:05:22:56:5e:c9:dc:73:70:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AC:F5:23:4B:94:06:4E:C0:BE:00:F3:FF:E2:40:1B:D4:30:2E:6E
            X509v3 Authority Key Identifier:
                keyid:D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:1d:93:fb:f6:21:57:64:2e:11:e4:d7:93:a2:94:09:cf:88:
         77:b8:18:fe:32:cb:2c:11:82:e0:0a:90:93:e8:91:4c:18:85:
         c4:7a:c6:8b:f9:4f:7d:5c:fa:1e:06:05:63:74:08:47:4b:05:
         76:7e:c8:77:ec:d4:3a:9a:6a:9c:00:40:5d:7f:87:0d:39:d2:
         30:96:b9:0c:fa:15:d4:35:03:07:7e:10:f1:65:05:c6:28:41:
         97:62:4d:92:45:b7:f0:fe:4e:ae:a8:7b:cd:a9:30:b6:b0:eb:
         44:9b:f4:be:d7:15:cc:f1:a2:b8:77:7a:ff:7a:49:7f:3d:a9:
         7d:6b:a5:6f:31:2a:a8:ab:90:a3:0b:22:b2:08:d5:52:1c:9d:
         76:fa:71:df:c3:3e:57:c4:fb:a5:04:4e:32:f7:60:3d:72:a2:
         3b:58:1a:fa:3f:32:39:32:22:e6:d0:d4:0e:74:98:c5:0d:5b:
         a6:9e:71:2a:eb:c6:72:57:ff:9e:dc:29:16:01:94:8b:28:db:
         4f:89:e3:7d:71:fb:b8:a4:5e:1c:0a:ca:a6:1d:a4:42:dc:3b:
         89:e7:b5:df:29:50:90:76:e0:8e:4b:6a:00:42:7e:44:0c:5d:
         5c:67:41:81:9c:57:e0:c4:ca:34:c9:af:53:a3:0b:2f:d4:0c:
         09:5c:00:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:27 2026 by rpki-client