This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
File:                     9vojpSZFyW2w3bFNJPa08FWfvis.mft (raw, json)
Hash identifier:          YNE9xXoa2CaIKOAoPf1bOgtC7fKydgk97fKwByQYhJg=
Subject key identifier:   31:71:35:44:A0:41:0E:57:00:CE:A7:0E:CE:A4:4E:37:66:E4:D5:04
Authority key identifier: F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B
Certificate issuer:       /CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
Certificate serial:       019C432264AD820E3E33B8C1D5A165CB9841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
Manifest number:          10
Signing time:             Mon 09 Feb 2026 16:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:53 +0000
Files and hashes:         1: 9vojpSZFyW2w3bFNJPa08FWfvis.crl (hash: u1ceMaym9FgO8V2gm0FEJWxqBr2ZOCrawoJqOMeyp0k=)
                          2: _24DoKc65Eo3K8s-8r6RRL6egqM.roa (hash: adFtcGa6MNyNtKQFNgClfvE2+zVf3OMdW8oYlRY9eEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:64:ad:82:0e:3e:33:b8:c1:d5:a1:65:cb:98:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
        Validity
            Not Before: Feb  9 16:00:53 2026 GMT
            Not After : Feb 10 16:00:53 2026 GMT
        Subject: CN=31713544a0410e5700cea70ecea44e3766e4d504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:cf:4a:8e:07:81:8f:58:bb:5c:33:58:b1:
                    41:5c:65:39:16:0b:78:d4:d8:f6:e9:3c:ec:ba:3a:
                    f4:97:03:49:21:30:ed:b6:fa:ee:c2:bc:40:f0:f8:
                    43:94:43:ad:b1:aa:87:fd:d1:93:74:f2:aa:f4:a5:
                    38:ce:48:2f:4b:0e:39:2f:82:1d:b7:e7:6e:38:a8:
                    9d:b4:a1:c8:25:72:85:78:cd:d5:65:32:70:f8:88:
                    3e:3a:17:ed:73:c6:77:aa:20:f0:8a:ed:8a:30:b6:
                    d4:8d:db:76:a3:39:16:aa:a4:bf:b9:08:f2:6f:29:
                    f8:9d:13:1f:62:75:b9:bd:fe:9f:4d:fd:4e:ee:da:
                    6d:6d:b9:7e:30:fc:10:cc:62:e3:97:3c:8e:79:cc:
                    5c:72:2d:68:fa:10:91:32:86:ab:80:55:2f:61:17:
                    fa:0d:10:7c:7e:84:b3:1e:b3:c8:5a:a0:d6:66:21:
                    bf:35:e1:bc:78:e2:28:9d:f5:fc:8e:00:68:c3:f4:
                    2b:cc:22:b7:9b:37:1a:c2:39:37:72:52:69:19:f2:
                    a8:39:b2:ae:19:a7:d2:c6:da:91:20:a0:8c:01:fb:
                    a7:16:81:33:ce:da:5b:8b:9d:d3:91:17:b0:37:3b:
                    84:0e:fc:cb:e1:06:48:1d:f9:e5:67:18:83:3f:4b:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:71:35:44:A0:41:0E:57:00:CE:A7:0E:CE:A4:4E:37:66:E4:D5:04
            X509v3 Authority Key Identifier:
                keyid:F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ff:f6:57:d5:40:b9:46:c0:1d:f2:76:b6:2d:90:65:7f:18:
         73:ba:37:98:86:ad:0e:cc:12:c9:f2:e5:54:73:ad:80:6a:bd:
         72:28:06:0c:17:5b:41:35:4c:1f:80:a8:b3:09:d3:31:4e:1a:
         c8:fc:81:5b:02:79:4a:92:cc:10:23:e3:00:43:f2:5c:b3:64:
         46:56:45:94:fd:a3:dc:92:6f:26:7f:cd:22:31:27:f9:5c:db:
         e0:83:b9:ea:d5:ff:c5:0c:12:19:51:51:d4:2b:81:81:83:e2:
         b2:c8:0c:2b:61:4f:3c:4c:47:23:0f:40:b5:67:88:5d:b6:12:
         b6:50:a8:3e:69:b8:e1:d0:35:b8:27:b3:8f:54:07:1d:f6:8c:
         f3:48:d0:d6:c7:03:af:d9:5b:af:d0:44:0a:02:76:0c:4d:47:
         a4:5d:3b:62:aa:88:70:70:bf:65:3e:e2:2d:15:6f:3d:2d:ec:
         bf:04:41:76:4e:fd:89:66:5b:de:b6:d8:5a:ac:a0:05:b1:1d:
         6d:39:bd:5a:24:e6:d0:46:1f:27:65:48:f5:32:46:66:5f:20:
         2e:99:09:b1:46:be:f4:8b:dc:db:e1:6a:b5:94:d5:a7:e0:6a:
         3c:a4:39:a6:b9:bd:ef:16:96:76:17:fe:03:7e:48:08:cb:50:
         99:15:99:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:15 2026 by rpki-client