This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
File:                     mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft (raw, json)
Hash identifier:          IynSnOns0ALhB2oJyxr7Ki71tJktWtGmhgLDppbL8nw=
Subject key identifier:   C8:14:76:A0:5B:16:32:55:F4:52:BB:CE:83:D5:4D:54:02:A0:79:E7
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Certificate issuer:       /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial:       019C427D11648784CDE91B0AF219C2F5C5C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 13:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:18 +0000
Files and hashes:         1: IWjwsY1bgLSJyFmigfatosgU_Vg.roa (hash: 8dY5ihKfXw7w5x8t/2Vfg5q46ZrOCREowiMp97eEXuE=)
                          2: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl (hash: YtnmsWKKo3YNxTGh3ewa70RuKwXvEz1P/jgqEIKTFoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:11:64:87:84:cd:e9:1b:0a:f2:19:c2:f5:c5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
        Validity
            Not Before: Feb  9 13:00:18 2026 GMT
            Not After : Feb 10 13:00:18 2026 GMT
        Subject: CN=c81476a05b163255f452bbce83d54d5402a079e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:36:fb:41:9e:91:b4:fb:a7:ec:51:71:7b:
                    a1:66:74:ab:44:3c:0a:25:23:1f:f9:d1:de:d8:82:
                    65:3f:c6:b5:8e:28:22:5a:19:35:f4:8e:15:c8:4f:
                    d7:05:94:b7:72:82:f4:75:cc:f7:48:2e:be:a6:d5:
                    62:3d:ca:48:84:8e:bc:1d:8a:19:e2:68:4d:80:5a:
                    cd:ab:85:c7:36:ec:fc:f2:dc:08:f3:a8:7d:32:3c:
                    84:21:f0:bc:ea:8b:1b:f0:6d:74:cf:88:c4:fa:f1:
                    c5:0c:33:32:49:cd:5d:53:f2:9a:fb:bb:e2:da:8d:
                    d7:1a:4b:32:b3:44:df:0d:62:c1:e3:73:ac:83:2e:
                    22:93:62:94:68:a3:72:b5:49:7e:92:41:a7:94:1e:
                    83:dd:71:7d:13:18:e1:fd:f2:6a:82:c9:89:e3:df:
                    56:53:f0:f3:df:d6:6d:89:06:c1:37:e4:05:96:4d:
                    d1:f6:0b:71:68:d9:84:3c:ac:55:54:96:d7:2a:d1:
                    2b:5c:87:a9:fa:da:74:da:1a:11:db:e0:12:73:3c:
                    19:26:3b:33:8c:7c:9e:3e:dc:d9:3e:31:ef:cc:15:
                    c6:14:89:3f:d1:06:e0:76:d4:52:aa:7d:e6:0b:be:
                    51:5c:5d:f0:60:dd:b0:ad:49:77:6e:bd:1c:26:22:
                    bf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:14:76:A0:5B:16:32:55:F4:52:BB:CE:83:D5:4D:54:02:A0:79:E7
            X509v3 Authority Key Identifier:
                keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:9b:84:fd:3f:fd:ec:f7:f9:14:f7:59:9c:df:0e:4e:8d:3f:
         54:0a:9f:30:80:3d:b8:9a:a8:9b:12:21:cb:06:4b:c0:dc:bc:
         0f:34:a2:7e:b4:03:fb:1c:43:74:47:65:26:a3:35:c6:e9:5c:
         72:b8:fb:23:2a:b1:b1:5f:5d:2c:9b:3f:46:5a:a8:c9:a7:e0:
         08:88:fd:de:fa:55:2b:b1:1c:63:38:0c:22:c0:ed:ee:83:18:
         a7:1f:65:37:30:a1:cb:6d:12:11:9a:fa:7a:16:ca:ad:9a:8d:
         e8:28:97:44:8e:0b:89:92:6d:74:92:d2:1a:0b:c3:7e:5d:fe:
         86:a2:95:5b:93:da:a2:6b:01:b4:c3:07:c2:31:96:ed:37:0c:
         e2:4c:16:b4:78:92:f8:90:74:25:9a:b4:66:7a:a9:3a:26:c8:
         c4:c9:68:0e:d5:47:6a:75:6e:c0:3a:b1:85:f4:5f:c4:67:5a:
         cf:50:98:eb:fa:54:46:ba:97:d4:88:da:47:50:97:6a:de:cd:
         18:eb:2e:13:9f:c2:4f:63:90:99:9f:89:11:5d:24:48:94:49:
         d9:84:3c:45:c2:75:61:db:72:62:fb:87:34:14:01:86:6c:fe:
         32:c3:d1:6f:80:b8:d1:ff:c0:5a:8a:91:18:28:11:d7:82:71:
         8f:38:7e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:09 2026 by rpki-client