This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
File:                     MW9DO7TO3XLYbETthZmQNSK15PE.mft (raw, json)
Hash identifier:          mqN+fWAX+Ig5VzlYmODaT2Q0XCjxmzsOXz13Gk/P9qU=
Subject key identifier:   8A:FA:47:1A:93:69:2A:92:15:63:66:C1:32:B4:FA:89:A6:86:15:4E
Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
Certificate issuer:       /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Certificate serial:       019C420FD10D841C9518134DE34F77BAD4B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
Manifest number:          12F0
Signing time:             Mon 09 Feb 2026 11:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:58 +0000
Files and hashes:         1: MW9DO7TO3XLYbETthZmQNSK15PE.crl (hash: ZmJVwqzyw8MuLePGgOrHg2HxpkBXszKe6KrMSwGBPUE=)
                          2: Q4ow8LCimKzjYqCIeM6du1pQCj4.roa (hash: gGIn6jSJgA0OXpF2GsDtGiH/BCzdqF5tX7x9AZXnSTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:d1:0d:84:1c:95:18:13:4d:e3:4f:77:ba:d4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
        Validity
            Not Before: Feb  9 11:00:58 2026 GMT
            Not After : Feb 10 11:00:58 2026 GMT
        Subject: CN=8afa471a93692a92156366c132b4fa89a686154e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:09:88:9a:7f:cd:26:ea:8e:44:11:fa:9e:
                    db:5c:5b:29:f8:d3:c2:ec:69:f2:53:d9:16:c9:f8:
                    62:96:ec:1a:53:5b:33:f3:56:99:3e:9e:53:46:e9:
                    7c:2d:b8:ff:b2:f7:50:a5:24:06:d6:88:7b:4d:88:
                    e8:ae:f9:40:85:2e:15:af:4d:9d:75:0e:4b:b7:12:
                    a9:ef:1c:48:e4:86:2f:16:84:64:a0:70:f2:15:ce:
                    37:e1:69:b4:e4:09:54:2f:58:6d:0a:a9:7c:28:dd:
                    81:2a:e2:a9:8a:82:6b:31:dd:43:32:4d:a2:b4:aa:
                    b0:20:b0:db:ae:9b:9f:01:38:8d:da:3a:70:33:c1:
                    12:a2:3c:1c:c2:f1:9f:d8:93:0a:79:f2:70:aa:23:
                    80:bf:14:3d:0c:40:eb:cd:bd:cf:30:63:65:bb:47:
                    94:56:98:4b:67:17:56:45:d6:2a:ab:06:d6:91:e4:
                    27:a9:35:10:bb:7d:e3:fe:16:64:32:22:42:0f:b7:
                    2f:71:cb:02:5b:93:bb:b2:22:57:6b:e6:02:81:15:
                    52:0d:c7:91:1e:b4:b0:76:e6:6d:77:90:0d:a8:91:
                    f4:73:2e:c6:e1:a3:f5:ff:55:b5:6a:00:38:ee:cd:
                    06:f5:99:d3:02:61:cb:5e:21:40:62:cf:20:49:92:
                    4f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FA:47:1A:93:69:2A:92:15:63:66:C1:32:B4:FA:89:A6:86:15:4E
            X509v3 Authority Key Identifier:
                keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:27:cd:ae:fa:9b:3d:fa:a3:6c:c8:35:ff:97:76:db:0b:a3:
         31:7b:ae:cf:66:d5:17:d1:bd:75:43:00:88:74:36:67:ed:e3:
         aa:82:3a:2f:2c:28:6f:da:48:71:64:c4:88:89:b8:2c:71:47:
         8c:f3:3d:36:b5:a4:6b:db:63:2a:d5:38:91:90:bf:35:a0:48:
         0c:d2:2b:41:cb:3d:77:50:83:a2:61:c5:11:94:ec:3e:f6:88:
         29:fe:32:e0:b9:27:0c:a4:6b:34:1b:e7:91:71:4a:c8:96:e0:
         67:c7:2d:c6:a8:14:7a:a9:c3:7d:5d:4f:27:9f:1a:a8:59:15:
         13:8c:18:29:4d:5e:f9:e7:c1:b4:59:40:f9:83:79:c8:c1:89:
         b6:3e:5e:c7:83:cc:4a:f2:65:a4:02:e5:32:8c:26:94:e3:ae:
         b1:b7:eb:e2:6f:78:e0:67:e5:77:80:be:a7:50:44:0a:9b:45:
         cc:82:7d:d3:b9:08:3f:3c:08:4d:fd:09:19:8b:76:a1:fe:6b:
         4a:3c:d2:53:ee:bf:07:73:77:12:4f:55:1e:eb:ad:68:14:0e:
         86:67:0e:99:8a:c3:66:da:55:76:a1:32:48:dd:d5:d7:15:da:
         d5:07:3c:ad:af:1f:b5:8c:5c:d9:d9:9d:dd:af:bc:cd:25:d5:
         7b:11:6e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:51 2026 by rpki-client