This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
File:                     mo9LAp4p7t8n1FzU05AQgya-JvA.mft (raw, json)
Hash identifier:          OV1fFeYLUBsPp5gqkseNeWzqsjQTetc7LKBACgynZyE=
Subject key identifier:   5A:F0:20:3F:18:A9:42:66:00:04:40:7F:88:BA:47:B1:BB:C1:22:0B
Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
Certificate issuer:       /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Certificate serial:       019C42467707A565ACE41E1C8FE127AD310E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 12:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:40 +0000
Files and hashes:         1: _V7Cb-NwO8anySMSbrwiBhmYglM.roa (hash: Ahe9bG/97BT0KbQWugP0o5eBZCTOE3ZbuxcW7SXy2go=)
                          2: mo9LAp4p7t8n1FzU05AQgya-JvA.crl (hash: GBdUmHXy5RQBrx9YhGMwEysbUAtlho1W/CuRhLnv1Ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:77:07:a5:65:ac:e4:1e:1c:8f:e1:27:ad:31:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
        Validity
            Not Before: Feb  9 12:00:40 2026 GMT
            Not After : Feb 10 12:00:40 2026 GMT
        Subject: CN=5af0203f18a942660004407f88ba47b1bbc1220b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:e7:34:18:0b:61:43:8a:7f:62:ee:8f:d5:
                    a3:d2:f9:f4:26:fa:f3:d7:26:ac:e9:29:b0:6c:76:
                    d0:f7:b1:98:7e:eb:a1:30:37:ab:3a:8d:04:da:37:
                    8e:6a:b7:70:19:36:5c:78:67:30:e0:ef:4d:f0:95:
                    4d:83:63:41:03:df:13:c4:e9:98:94:bc:43:00:93:
                    f0:0c:09:61:de:11:4b:d3:35:5d:26:c4:ae:b2:b8:
                    28:bd:48:2d:6a:1f:cd:06:a1:2f:85:d0:ce:b6:ee:
                    1b:8d:ba:b2:bb:08:a9:86:b4:e5:be:bb:e5:47:0b:
                    fc:44:a1:be:12:fb:ed:ad:ae:e4:53:0c:a1:b0:ad:
                    2a:c4:e6:31:d4:c6:5f:dd:0e:2f:f0:9c:fc:82:6b:
                    b5:74:ee:1b:bb:5c:6b:93:71:3c:53:91:63:f4:9c:
                    2d:ed:49:47:6e:98:6d:03:b6:ad:bf:88:61:59:43:
                    b1:e7:85:10:6e:25:db:92:25:44:43:f5:6f:51:35:
                    6c:85:e7:1e:e5:59:5e:28:eb:30:ce:ba:b6:73:7f:
                    21:2f:21:b6:cb:fd:59:a1:70:a2:8f:08:4e:e6:af:
                    a6:6c:63:be:18:55:99:f2:1a:f4:1a:7b:73:55:3a:
                    3c:e1:d8:2b:01:f8:0c:cb:cb:8b:98:5a:76:b8:ac:
                    26:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F0:20:3F:18:A9:42:66:00:04:40:7F:88:BA:47:B1:BB:C1:22:0B
            X509v3 Authority Key Identifier:
                keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:50:e7:06:8c:70:e6:06:3e:36:fb:56:ae:c3:f6:a5:d1:26:
         33:cd:a9:ac:50:80:c5:d6:98:28:94:eb:91:20:29:1d:11:e0:
         a2:69:4a:d1:a0:da:f6:52:0c:46:1a:77:36:5c:28:68:07:10:
         c5:fd:a5:27:4b:80:17:9a:10:bd:51:a7:99:86:8d:96:50:be:
         e4:3d:6c:7c:17:74:1a:a8:ec:da:0d:ea:1e:3a:08:45:79:80:
         36:c4:06:95:f2:a7:34:6c:1e:65:a1:46:39:6d:c6:29:03:0a:
         5b:20:b1:75:b7:85:03:be:71:5d:cb:04:c9:67:ca:9d:83:ae:
         f7:6c:18:6f:42:29:6b:47:81:b6:f1:ac:aa:6a:b6:57:0c:d8:
         a7:1c:57:24:32:49:b0:fe:a5:ec:0e:24:c5:e0:a5:63:51:4c:
         0d:63:7c:7d:89:46:67:a2:ee:d1:77:6e:cd:33:d7:e0:4e:fa:
         9f:6e:91:cb:92:0e:2a:bb:e7:4a:a4:20:b5:df:6c:08:a6:fe:
         89:ef:54:17:64:55:ac:f7:84:f3:a3:31:10:34:c0:b8:70:a8:
         72:3e:b6:8a:2e:ef:5b:e9:eb:02:58:fc:ba:3c:32:96:4c:a5:
         05:79:cc:a4:05:5e:a1:be:f8:6a:f9:3a:0f:8d:f3:3f:fa:cc:
         a3:75:3d:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRncHpWWs5B4cj+EnrTEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOGY0YjAyOWUyOWVlZGYyN2Q0NWNkNGQzOTAxMDgzMjZi
ZTI2ZjAwHhcNMjYwMjA5MTIwMDQwWhcNMjYwMjEwMTIwMDQwWjAzMTEwLwYDVQQD
Eyg1YWYwMjAzZjE4YTk0MjY2MDAwNDQwN2Y4OGJhNDdiMWJiYzEyMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG/nNBgLYUOKf2Luj9Wj0vn0Jvrz
1yas6SmwbHbQ97GYfuuhMDerOo0E2jeOardwGTZceGcw4O9N8JVNg2NBA98TxOmY
lLxDAJPwDAlh3hFL0zVdJsSusrgovUgtah/NBqEvhdDOtu4bjbqyuwiphrTlvrvl
Rwv8RKG+Evvtra7kUwyhsK0qxOYx1MZf3Q4v8Jz8gmu1dO4bu1xrk3E8U5Fj9Jwt
7UlHbphtA7atv4hhWUOx54UQbiXbkiVEQ/VvUTVshece5VleKOswzrq2c38hLyG2
y/1ZoXCijwhO5q+mbGO+GFWZ8hr0GntzVTo84dgrAfgMy8uLmFp2uKwmEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrwID8YqUJmAARAf4i6R7G7wSILMB8GA1UdIwQY
MBaAFJqPSwKeKe7fJ9Rc1NOQEIMmvibwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW85TEFwNHA3dDhuMUZ6VTA1QVFneWEtSnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xOTQ1ODktNmM2ZS00N2NlLTk3MzMt
MTM5NTI2NDNmMTE0LzEvbW85TEFwNHA3dDhuMUZ6VTA1QVFneWEtSnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xOTQ1ODktNmM2ZS00N2NlLTk3MzMtMTM5NTI2NDNmMTE0
LzEvbW85TEFwNHA3dDhuMUZ6VTA1QVFneWEtSnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1DnBoxw
5gY+NvtWrsP2pdEmM82prFCAxdaYKJTrkSApHRHgomlK0aDa9lIMRhp3NlwoaAcQ
xf2lJ0uAF5oQvVGnmYaNllC+5D1sfBd0Gqjs2g3qHjoIRXmANsQGlfKnNGweZaFG
OW3GKQMKWyCxdbeFA75xXcsEyWfKnYOu92wYb0Ipa0eBtvGsqmq2VwzYpxxXJDJJ
sP6l7A4kxeClY1FMDWN8fYlGZ6Lu0XduzTPX4E76n26Ry5IOKrvnSqQgtd9sCKb+
ie9UF2RVrPeE86MxEDTAuHCocj62ii7vW+nrAlj8ujwylkylBXnMpAVeob74avk6
D43zP/rMo3U9vA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:09 2026 by rpki-client