This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
File:                     g9zjc8GLlAqXg5CycnACebMv7jo.mft (raw, json)
Hash identifier:          /QB+wjqnJwUC6vtXTplt2jnarmmJblHHlKYN2XW+1S0=
Subject key identifier:   93:38:96:36:3C:F0:D1:7A:F9:ED:75:A3:5C:03:92:41:FF:C0:E3:87
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Certificate issuer:       /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial:       019C427D9B0D130E45BFF739FE7350BA5CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 13:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:53 +0000
Files and hashes:         1: e9eDn1it9NdIiHqx44a7i4SS4xg.roa (hash: D0mw6gNgZUzu18/xmTgF0h13ejYJeMIRk7OFNvDQw/g=)
                          2: g9zjc8GLlAqXg5CycnACebMv7jo.crl (hash: w3lMEk9+TQzvn6gCyD2tomvERaB4+nRu0UyOyCGm6uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:9b:0d:13:0e:45:bf:f7:39:fe:73:50:ba:5c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
        Validity
            Not Before: Feb  9 13:00:53 2026 GMT
            Not After : Feb 10 13:00:53 2026 GMT
        Subject: CN=933896363cf0d17af9ed75a35c039241ffc0e387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:56:30:9c:71:8a:3e:51:16:86:d0:42:4b:52:
                    a2:3a:19:61:bf:3d:e7:bf:1b:d4:11:fa:08:bf:d9:
                    3a:6d:68:9a:09:14:37:48:9c:51:2c:95:21:54:05:
                    26:70:e5:a2:94:fa:09:84:06:96:2a:96:1a:93:6c:
                    4d:23:b0:7e:f1:76:f6:51:98:c6:68:d0:5f:6c:6f:
                    a8:08:90:2d:69:ef:a2:5e:34:7b:94:43:e6:f8:24:
                    57:97:a3:3b:b1:29:35:f4:8b:31:70:1e:66:6b:25:
                    d8:7c:4d:f0:05:4c:b0:db:74:ab:0e:3f:77:40:3a:
                    8f:3d:91:d3:19:9d:db:4d:cf:b3:02:3a:93:bb:a0:
                    ed:dc:36:3f:d9:34:2e:0b:e5:22:65:a1:0b:0a:54:
                    24:0e:80:d8:e6:93:41:66:40:0b:2e:48:a9:5e:fe:
                    8a:97:81:0e:50:f3:41:74:1e:2d:9f:59:47:a5:d1:
                    cc:af:0a:81:92:ae:ff:ea:f3:17:d1:83:68:6a:18:
                    45:fe:8a:00:3f:40:a5:5e:10:04:f6:0e:5c:f6:b3:
                    22:1c:fd:7f:ba:60:e6:a5:89:43:4f:ef:62:d0:b6:
                    44:8d:e6:fe:4f:11:35:a5:b5:97:8e:d4:75:ee:fc:
                    82:c4:dc:b9:7e:bd:90:da:27:81:7c:22:d5:42:e9:
                    41:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:38:96:36:3C:F0:D1:7A:F9:ED:75:A3:5C:03:92:41:FF:C0:E3:87
            X509v3 Authority Key Identifier:
                keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:53:c5:42:9e:a1:c8:fa:9c:c7:aa:5c:56:d6:cb:94:6c:86:
         f3:3c:b0:94:dc:f3:8c:eb:5f:52:d8:1b:05:8d:bb:39:1d:03:
         7a:5d:fe:2f:b4:90:61:37:4a:11:90:24:96:de:0f:c0:96:bb:
         f9:a6:e1:6c:79:bb:e3:dc:73:83:7e:b6:ac:87:02:97:b6:d6:
         26:1c:b2:22:e4:90:ca:e5:96:8d:f7:8d:92:37:9b:2a:db:7e:
         4d:70:4d:73:30:7e:cd:fa:5e:cb:ae:2b:a8:d5:e0:17:6a:0f:
         f4:dd:3e:af:5d:7a:a4:4c:35:55:d5:09:13:1a:1f:38:a1:fb:
         57:92:d9:33:8e:70:26:e2:93:07:26:95:94:3a:a6:fb:a2:66:
         32:9d:b9:36:8e:cf:0b:76:42:b1:47:24:1c:d7:3b:84:f6:93:
         73:25:4b:7f:72:8a:34:b8:8c:a9:c7:e9:4d:33:95:0d:ec:0b:
         2c:e3:65:9f:10:e7:e4:d2:f4:eb:c9:b1:4c:a6:5e:92:0b:b9:
         b2:b9:88:ea:7d:45:bd:09:7e:e7:13:d7:c4:4a:86:b3:52:f2:
         69:21:5c:63:7d:fc:74:6b:31:0d:07:78:4e:bc:e9:8c:c2:1f:
         86:92:65:60:4e:e9:a5:35:77:6d:e7:20:a3:2f:30:8f:82:2a:
         01:be:96:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:13 2026 by rpki-client