This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
File:                     9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json)
Hash identifier:          nw0PWf2tJilL4uGzWS5bfba7/rXfVVbAWn38II/x/Fw=
Subject key identifier:   49:71:73:CA:DB:17:06:F3:65:21:11:A6:2D:A1:F3:AA:83:22:64:25
Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
Certificate issuer:       /CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Certificate serial:       019C420FE96EA28349E9B700D18E6DC76713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
Manifest number:          0529
Signing time:             Mon 09 Feb 2026 11:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:04 +0000
Files and hashes:         1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: 9ydnVSgzQbm1j0YgNu9C6H3fzky7XAb4VJpIhDm1PUA=)
                          2: Fnxy3WJWYvuek9Fr0KYOmQUUsw4.roa (hash: Ch+0FQEjljg05e4GEw4ZsydId/PhinfJoSdNkBFbTQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:e9:6e:a2:83:49:e9:b7:00:d1:8e:6d:c7:67:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d
        Validity
            Not Before: Feb  9 11:01:04 2026 GMT
            Not After : Feb 10 11:01:04 2026 GMT
        Subject: CN=497173cadb1706f3652111a62da1f3aa83226425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:10:48:21:79:8d:eb:c8:35:60:6e:88:83:
                    e4:c4:db:4a:69:5e:52:7c:80:78:4b:6b:bd:d6:9d:
                    2b:30:d6:db:3a:82:50:ce:c9:34:03:89:4a:c3:c6:
                    ed:7f:6a:65:a3:fe:3e:58:69:44:ef:2d:a4:0d:d7:
                    89:3f:f4:60:83:08:1c:33:38:60:0e:4a:0f:62:23:
                    5b:bf:1a:cc:ab:2b:17:8c:76:0a:f6:45:5e:da:4e:
                    c5:10:80:77:88:5c:34:34:98:7f:66:bb:5e:45:09:
                    21:24:cc:2f:c5:cc:93:97:a6:ed:34:d2:90:3b:ed:
                    90:6d:95:9b:ee:8b:8b:ff:45:d1:7e:e1:f2:7e:69:
                    55:09:11:a3:93:37:c4:ed:3b:3a:b6:ad:7f:49:b1:
                    a5:df:55:54:55:2b:7f:b6:3b:5e:af:12:d1:1f:6c:
                    08:63:dc:d6:89:81:19:19:c0:fc:76:3b:3f:61:4a:
                    58:ac:55:31:5a:75:60:f2:b0:c9:e6:72:0b:7a:00:
                    bb:07:38:3a:57:86:4b:be:f5:4a:81:bf:af:f2:15:
                    65:cf:7b:68:93:81:03:e0:76:04:8b:e2:d2:a3:3a:
                    a0:32:28:d8:30:35:d5:36:0a:c7:51:9a:74:35:1c:
                    85:37:f9:df:e2:63:e6:70:71:a2:f9:7d:ed:9f:77:
                    23:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:71:73:CA:DB:17:06:F3:65:21:11:A6:2D:A1:F3:AA:83:22:64:25
            X509v3 Authority Key Identifier:
                keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:32:0b:c2:3d:61:ff:de:27:8a:35:b9:9e:f8:d6:cb:e6:7e:
         f7:05:b8:74:80:f6:e3:40:bf:07:01:18:90:e4:5e:90:29:9a:
         b9:65:4f:e0:bc:bb:6b:82:89:28:43:69:e4:e5:71:6e:14:1e:
         58:d7:62:70:06:c1:80:71:ee:ef:95:dc:ab:74:c3:aa:c7:8d:
         02:61:ac:21:d1:07:28:5f:2c:7f:bb:c0:5c:f2:fd:ee:88:19:
         7e:a5:63:11:7b:26:c1:06:b8:39:5c:7c:1a:42:48:68:83:fc:
         2a:8b:db:39:47:89:3d:56:be:63:d7:79:79:c5:e2:6c:55:6b:
         88:8c:f8:7e:6f:26:3c:ce:5d:4c:fc:f4:77:9b:21:39:7f:76:
         e6:9a:e3:3b:b5:ab:97:00:e5:48:e9:3d:62:cd:fc:ba:d8:00:
         ef:cb:82:5a:fc:56:84:2d:8b:56:41:6c:08:91:2a:54:05:f2:
         b0:26:a5:7d:8b:29:16:fe:d5:a3:e9:31:4b:2b:02:62:17:97:
         d0:92:81:73:c5:76:4b:44:04:7e:1c:d1:80:7a:b8:e5:20:e2:
         63:6c:04:36:8d:e1:18:af:dd:6f:78:37:df:c2:a1:a4:c0:e5:
         c1:df:a5:19:13:3b:dc:2a:7f:8a:79:c0:f3:04:ce:b6:a3:b4:
         5c:c2:0e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:27 2026 by rpki-client