This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File:                     T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier:          hJSgLnpZ0+xAw699+Ve5m6sKsr7MjurL4+z9VFTuBKo=
Subject key identifier:   81:30:56:73:58:AD:C8:7D:A0:E9:1B:D2:C2:27:E8:2A:50:6A:30:19
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer:       /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial:       019C41D85E1FBA81D94F7DD66A03929FB0F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number:          04BB
Signing time:             Mon 09 Feb 2026 10:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:24 +0000
Files and hashes:         1: Dpnv4EUcYX-n8qPbHdIk5R_FJW4.roa (hash: 358iegoNsmqH7oFOcFPF51BllDNQ4FiGmVnnkcdD73M=)
                          2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: ZM5HeCWSiQtO4aPvTa5LqqcbwR3cp48Ltqo08qx8DMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:5e:1f:ba:81:d9:4f:7d:d6:6a:03:92:9f:b0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
        Validity
            Not Before: Feb  9 10:00:24 2026 GMT
            Not After : Feb 10 10:00:24 2026 GMT
        Subject: CN=8130567358adc87da0e91bd2c227e82a506a3019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:12:2e:29:03:3c:30:2d:6a:d9:3a:70:e7:
                    78:2a:6c:db:0a:84:30:45:04:d4:0b:48:4e:c3:f4:
                    b6:28:ac:42:34:73:0c:24:d1:dd:d2:a8:8a:34:9d:
                    1d:12:a4:cb:32:35:67:95:22:c5:29:99:c0:a5:13:
                    65:06:95:cb:6d:37:6f:6f:7b:cd:df:4b:0b:a6:cb:
                    62:22:4b:76:a8:c2:3f:ab:8c:1c:69:0b:eb:5b:ca:
                    82:af:20:42:94:b6:cf:9e:de:86:8e:a7:d2:45:7a:
                    e1:5e:67:2f:c9:f3:fc:06:fa:64:6d:ad:c4:64:c4:
                    94:53:ce:4b:34:20:22:17:66:f8:0d:68:1d:11:3a:
                    2c:16:b5:7c:e8:be:0b:a4:7b:5b:5b:8b:83:1e:3f:
                    26:d8:44:6e:4c:de:14:f8:17:f5:b5:f1:9a:8c:af:
                    e4:07:a7:c9:55:28:93:7a:f4:60:be:42:81:a8:56:
                    5b:df:0b:14:85:e5:e8:bd:33:01:22:27:4e:26:c6:
                    67:11:a6:d9:d2:fe:e2:03:56:0e:9e:16:5d:b9:4f:
                    85:c9:f4:2b:b3:c3:b1:ef:34:c9:59:8e:ba:70:77:
                    db:ea:6f:51:db:bf:02:92:2e:ef:33:af:d3:90:c6:
                    25:97:0c:99:dc:23:04:ff:8d:d6:53:d7:85:b3:46:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:30:56:73:58:AD:C8:7D:A0:E9:1B:D2:C2:27:E8:2A:50:6A:30:19
            X509v3 Authority Key Identifier:
                keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:01:5f:4c:c6:4f:36:c1:d9:db:a7:40:fd:40:05:83:2f:4e:
         ff:4c:c2:5e:b5:f0:97:87:8e:0f:c9:0c:48:ec:61:16:40:8b:
         03:89:18:12:8f:c4:cd:cd:78:f4:af:56:cf:35:0d:82:2d:be:
         f5:0d:97:9c:74:26:35:f5:ec:ac:b5:5f:33:e3:0e:24:0f:15:
         3d:fe:f1:18:ca:76:82:68:b1:1f:2a:8e:60:43:e0:4e:13:e2:
         35:12:da:83:cb:99:13:8d:47:47:0d:f7:ba:bd:60:76:a2:c2:
         bc:8a:f2:c9:7b:0c:b8:f4:9c:cb:8d:2a:44:f1:59:5b:c2:82:
         dd:81:ab:bc:0a:c7:78:50:25:3e:89:d6:16:60:76:8c:f8:21:
         2a:a8:dd:98:27:c4:40:67:b8:01:ee:3f:b0:6e:3a:cf:6a:7c:
         fc:72:12:49:d7:7b:06:ee:25:33:a7:77:2b:f2:a3:70:6a:c1:
         77:6a:ca:fc:07:c9:38:82:17:e4:0a:91:77:6b:81:3e:17:9a:
         f5:4b:f8:d2:b7:40:99:80:4f:0f:b5:57:ff:0f:ed:04:ca:02:
         4c:8e:08:23:21:1f:bd:6a:04:ad:de:d2:5c:80:1a:3d:32:b2:
         b4:bb:31:f8:39:45:c6:5f:b8:3e:57:cb:2d:a1:7a:9b:7b:75:
         ec:4e:07:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:57 2026 by rpki-client