This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
File:                     m9ReJgecMchSFrcwDNjmMw1D1a8.mft (raw, json)
Hash identifier:          Ozab3lg4kZA5nyNMNx42mJuihjcWM57+D+UQnXkHQR8=
Subject key identifier:   B2:51:AF:30:25:B0:35:3B:5C:77:27:5A:6B:61:A0:C9:06:B3:AC:FA
Authority key identifier: 9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
Certificate issuer:       /CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Certificate serial:       019C42B4839372EE6E03D454FC5047820507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
Manifest number:          02A1
Signing time:             Mon 09 Feb 2026 14:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:52 +0000
Files and hashes:         1: eRcv9H0kj-nbfOiGSSrJz38IxLU.roa (hash: DewykMuWLgPE2A0H2gavCxDnLQ8/NmjjeAOgscMAs70=)
                          2: m9ReJgecMchSFrcwDNjmMw1D1a8.crl (hash: eEMTROXxkMWiBwa3U3WtE9tOKUdABmhltxej6kxOqwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:83:93:72:ee:6e:03:d4:54:fc:50:47:82:05:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
        Validity
            Not Before: Feb  9 14:00:52 2026 GMT
            Not After : Feb 10 14:00:52 2026 GMT
        Subject: CN=b251af3025b0353b5c77275a6b61a0c906b3acfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:da:93:b3:31:c9:07:02:5a:bc:50:6e:a9:
                    67:6f:ee:7c:6b:31:51:d3:77:fa:66:ee:c2:50:2d:
                    e8:60:87:9f:09:e6:35:70:40:8a:fe:0d:93:ee:87:
                    74:50:e1:e7:d0:58:28:15:50:05:b8:1d:e8:a0:87:
                    17:b0:43:43:08:14:20:77:6c:f8:97:9d:16:1e:33:
                    0b:67:fe:7a:11:c3:60:cd:31:56:2c:12:a0:09:cf:
                    54:e0:b0:0c:d9:eb:3a:9e:0b:6c:c2:d2:9b:98:41:
                    ad:4c:e2:e4:cc:17:72:a0:cb:69:e6:2d:be:b4:fa:
                    ff:c7:96:0b:ab:4a:8b:20:e6:eb:7b:0f:38:6a:a5:
                    67:20:5b:d6:e8:9e:b8:e9:d9:fa:30:00:27:96:1f:
                    db:ed:12:fb:19:d7:24:d8:e8:b8:73:8a:89:83:6b:
                    c9:96:bf:03:63:04:e5:9a:d2:4a:8c:c5:23:41:76:
                    40:c2:68:b5:89:f4:70:91:51:f8:d6:e2:49:a5:d8:
                    72:8b:77:fb:58:8b:47:6b:14:4d:4a:19:cd:d9:0c:
                    c4:d8:20:2a:d8:b3:52:47:b3:80:82:c0:dd:ec:1a:
                    92:69:b6:71:a3:cd:2c:5f:0d:b2:83:ce:0c:a2:74:
                    7c:b3:16:f5:2a:10:05:c2:a3:8d:c1:a2:21:47:87:
                    2f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:51:AF:30:25:B0:35:3B:5C:77:27:5A:6B:61:A0:C9:06:B3:AC:FA
            X509v3 Authority Key Identifier:
                keyid:9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:13:b5:b3:cc:97:2f:50:6e:f3:29:17:07:db:b2:bf:a7:65:
         90:06:84:c3:96:88:80:02:d2:35:f1:ff:37:b1:1f:1e:0b:8c:
         47:9b:fd:6f:3c:81:5d:93:28:fc:42:9c:ef:93:53:26:de:ff:
         66:c8:c9:25:5b:76:8e:53:0b:52:13:41:5b:3e:ac:b4:f5:2b:
         55:63:5a:5d:5f:35:bc:2b:c4:fb:ea:48:01:e1:a5:bd:f0:84:
         b6:56:07:f0:96:ef:06:a2:96:3a:36:33:56:82:72:70:68:5e:
         2d:48:b2:ac:c7:4c:43:61:1a:ba:b2:a8:45:af:62:23:17:14:
         39:99:c0:a1:fc:b4:73:38:e1:32:3a:85:90:97:4d:b5:dd:f7:
         bd:36:4d:3d:d5:dd:19:ac:5c:fb:65:43:f1:b7:c1:24:93:36:
         42:9e:94:54:03:7f:5a:f7:f8:01:86:ed:7d:9e:e0:f0:a1:d7:
         d0:14:47:9a:e2:e3:66:cb:04:8f:64:ac:cf:9a:c1:72:06:23:
         9f:07:2d:b8:8d:41:0a:c3:b4:fe:6c:41:27:af:62:ba:bc:77:
         af:6a:dd:df:8b:f3:2d:18:58:a3:6b:0b:4a:ff:44:b4:23:69:
         31:00:fc:dd:6f:98:6d:a8:28:23:8e:be:88:b2:18:0e:6e:eb:
         73:8e:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:04:31 2026 by rpki-client