This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
File:                     1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json)
Hash identifier:          JqXxBgmh8ReVmImAEZFUgnPprJZSsftcraXgztSB+Vw=
Subject key identifier:   6C:29:89:79:CA:C4:DE:B1:43:2F:67:37:9A:18:6E:DE:C2:63:02:6E
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Certificate issuer:       /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial:       019C42EB903A7A42EDF9D69A3DA2D36FB948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 15:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:59 +0000
Files and hashes:         1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: boCIdbBHIKsM7WRQjhM9t9u6W048S06aZC/uPTwYyg4=)
                          2: 9Oi-skDqT11YOFGA1xXs-LnJ9RY.roa (hash: rHObD1OASYFGq7YdeSfBqKYMqx4XVn3mmaRGeO1liZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:90:3a:7a:42:ed:f9:d6:9a:3d:a2:d3:6f:b9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
        Validity
            Not Before: Feb  9 15:00:59 2026 GMT
            Not After : Feb 10 15:00:59 2026 GMT
        Subject: CN=6c298979cac4deb1432f67379a186edec263026e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:10:d8:7a:82:04:2e:32:bb:bd:f0:fd:55:
                    4d:51:86:17:b1:3a:73:f0:da:a9:8b:18:20:7b:b8:
                    a6:0a:c8:ee:90:e0:f6:a1:56:1c:8b:b6:96:7e:15:
                    0d:6f:85:52:2a:4c:08:4b:20:a8:82:6f:32:51:c7:
                    4e:85:48:dd:dd:e4:b0:ac:fa:48:32:e6:74:e2:1f:
                    9c:a0:40:e3:7d:63:d2:c3:a2:64:c0:21:dd:a1:6b:
                    23:d7:7e:a4:11:23:93:81:31:2b:45:0c:08:6f:7b:
                    ab:a1:6b:da:01:a2:c5:a1:af:35:91:c9:a5:c0:09:
                    2a:96:0e:14:8c:76:8a:62:1a:3b:9c:43:28:fb:ee:
                    ef:10:31:9b:97:16:b6:53:20:98:3f:06:2a:98:f4:
                    5e:f5:12:f2:32:a4:1d:1b:f5:bc:4c:73:80:99:0a:
                    99:3f:ed:53:62:0c:de:1f:a1:f9:5a:3c:3f:48:53:
                    cc:c9:7b:8f:49:73:14:00:d0:77:99:bc:b8:d7:95:
                    9d:24:9b:70:5e:35:a9:6d:e5:c0:54:1a:d5:97:41:
                    4f:07:2f:70:9f:4d:be:1a:6c:e7:9d:c5:8c:0b:d8:
                    bc:c6:aa:38:b8:f0:99:db:ce:27:31:46:a2:21:5b:
                    60:9e:e7:6d:1e:10:fb:d5:0c:a7:88:d4:da:0b:07:
                    11:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:29:89:79:CA:C4:DE:B1:43:2F:67:37:9A:18:6E:DE:C2:63:02:6E
            X509v3 Authority Key Identifier:
                keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:04:eb:16:11:b0:6b:e1:52:47:ec:5d:97:5d:74:de:46:f3:
         ce:a7:6c:73:f0:f7:58:12:58:a8:ef:f2:89:bb:c2:fb:87:bb:
         e9:ee:19:47:8c:1b:86:0d:c8:32:12:9c:84:51:0a:32:ae:19:
         17:7c:99:2d:3f:b3:e5:bc:7c:66:a5:2a:bc:8e:85:85:6e:3e:
         dd:92:0b:96:15:b9:78:23:c0:80:aa:36:28:81:30:15:45:b8:
         b2:44:15:3f:bc:5a:8f:6f:00:50:09:c1:b1:e1:77:17:ea:a1:
         9f:73:45:c9:36:db:ee:4a:e3:95:5c:6c:94:56:04:91:0b:09:
         37:b9:52:fe:6e:af:e6:b7:7a:a9:11:95:aa:ec:0a:dd:2e:3b:
         94:a7:85:26:10:73:1d:04:69:b1:4f:34:37:3a:2f:da:3a:fb:
         97:6b:f7:97:1f:30:e4:ad:cc:65:53:75:1f:b4:e5:27:aa:29:
         ba:d7:16:33:43:24:dd:30:c6:ac:f1:50:fd:7f:c5:2d:2f:95:
         e5:70:11:f6:a0:4a:6c:d2:4b:b9:de:0a:26:d2:ba:1c:11:3c:
         ea:13:28:56:53:b7:cf:19:99:f4:dd:cb:5a:e1:90:2a:88:7a:
         ec:8e:b3:3e:4e:cd:95:a6:87:2e:5f:91:46:a3:75:64:5d:f5:
         1e:12:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:12 2026 by rpki-client