This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
File:                     m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft (raw, json)
Hash identifier:          ywy5VZTFQu6RPfjiEBV+gU6Pi7Xuuyv2bvyp0FxGEIs=
Subject key identifier:   70:BC:85:B4:0E:FB:ED:B0:83:A6:42:19:A6:CD:35:29:F8:F7:48:F4
Authority key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
Certificate issuer:       /CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Certificate serial:       019C43226F94D280711D0CBB640555AD8ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 16:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:56 +0000
Files and hashes:         1: ePJZJNhpApp5V_50Q_hot0iS_wU.roa (hash: QR4bO1N17271c13+CycjZX16iUUkNqGxGT5DNiVyLsU=)
                          2: m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl (hash: xcVfcGOR9eciB06i159FfBC9SWSG1+5/lmHGphFcu1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:6f:94:d2:80:71:1d:0c:bb:64:05:55:ad:8a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
        Validity
            Not Before: Feb  9 16:00:56 2026 GMT
            Not After : Feb 10 16:00:56 2026 GMT
        Subject: CN=70bc85b40efbedb083a64219a6cd3529f8f748f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:16:8b:8a:86:37:dc:3d:4b:99:8d:fc:8b:f2:
                    46:5a:1f:8c:8f:0f:93:95:7b:be:7f:45:d0:c3:15:
                    9d:73:74:41:2c:4e:35:73:fe:7e:a9:da:8e:be:bb:
                    4b:82:fa:4d:b5:4a:d7:fb:8b:4c:f7:2e:19:cf:44:
                    b5:6f:ac:44:44:47:ff:46:5f:b6:52:29:fc:3f:e3:
                    3a:66:7c:9b:b5:b0:91:c6:46:42:4f:2a:69:28:53:
                    73:2f:62:68:6c:c2:c9:7e:77:1c:07:da:02:c5:b6:
                    e1:4e:90:3f:1f:55:41:83:2f:ae:14:9b:87:18:fa:
                    c7:5e:39:5d:a3:8c:fa:85:b1:a6:af:01:ed:ac:b8:
                    27:6c:ee:8a:1e:6b:93:74:6c:a0:40:cd:29:23:04:
                    93:46:a6:5a:db:6a:02:d3:27:e3:1d:10:3e:35:33:
                    26:59:73:d2:6b:f4:72:35:10:f8:21:22:4a:0b:99:
                    32:c2:a0:30:df:f8:99:a0:28:45:10:e1:79:d1:9e:
                    8a:46:b6:1f:2d:dd:8a:c8:4c:60:82:f9:0c:c3:cf:
                    d8:bb:f3:b7:e7:64:f5:32:56:e7:be:b6:74:96:57:
                    3c:24:aa:f4:b0:cb:c4:16:14:a9:d6:42:b9:07:65:
                    07:4b:e2:a4:be:8b:3d:5f:c7:35:37:4d:ee:d5:11:
                    71:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BC:85:B4:0E:FB:ED:B0:83:A6:42:19:A6:CD:35:29:F8:F7:48:F4
            X509v3 Authority Key Identifier:
                keyid:9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:89:9f:56:d1:ae:ff:86:d1:60:99:3c:60:47:cc:47:2c:2c:
         f0:a1:a9:f1:7e:cc:c0:d2:2d:ec:f2:84:54:03:68:6b:97:b9:
         4e:09:29:5a:fe:85:f5:df:c0:53:70:ee:c3:4a:17:2e:7e:d4:
         15:33:b8:d9:cd:ed:41:73:be:a5:49:b2:b4:4a:4b:0d:8a:07:
         12:27:55:52:81:92:e4:76:a6:f7:54:c6:a8:6b:27:87:8b:6f:
         00:00:92:2b:78:f3:66:7a:84:96:83:a2:b7:ee:a8:2d:1d:4b:
         41:4c:3d:54:ef:7b:f7:a6:c0:79:8a:a2:b5:8a:6c:70:76:03:
         d0:42:f0:0a:be:9e:c9:6d:0f:06:d4:fd:c9:63:27:de:fe:9d:
         30:80:9a:18:af:af:6e:8b:fa:c1:1e:49:9c:30:e9:2b:08:b7:
         78:2f:61:3e:55:a7:2a:f6:60:22:b1:45:f0:1e:cb:a9:f8:98:
         a2:22:15:40:02:71:2f:93:c4:ad:8f:e1:c5:97:5b:2e:95:10:
         03:9f:88:b7:53:81:5e:06:b3:65:0d:6a:8f:df:65:50:15:61:
         c4:7e:ce:32:19:4d:b4:97:13:4d:15:7d:5b:bc:37:99:1e:d8:
         02:ae:26:61:0b:f4:0a:9b:12:a0:d7:e3:bb:59:ac:33:02:5a:
         6d:2f:54:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:33 2026 by rpki-client