This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File:                     mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier:          aYzZJQ2wOW3F7KzmaQIrpmfJRSlyjCnsC6OTsDlgUHY=
Subject key identifier:   77:2C:38:F5:39:51:A0:24:4C:46:2F:D5:00:0C:80:08:86:83:25:98
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer:       /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial:       019C44349C4F25412072CCAAE914D7E90BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 21:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:24 +0000
Files and hashes:         1: G9j4sjTeWzLExGQLke1RPswI0EU.roa (hash: Hiz7NVerTeUMvhHieLj4YdPxQvNl9jDBd3ik+M6E8jI=)
                          2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: r9OJZEsHbGAJ0kl1EiZ1lBwaMjc7EKLVFs38hmrPR5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:9c:4f:25:41:20:72:cc:aa:e9:14:d7:e9:0b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
        Validity
            Not Before: Feb  9 21:00:24 2026 GMT
            Not After : Feb 10 21:00:24 2026 GMT
        Subject: CN=772c38f53951a0244c462fd5000c800886832598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:52:1e:67:50:90:14:31:19:a8:ba:c9:29:02:
                    9c:9c:60:f6:e3:05:f2:ab:ca:d1:3a:39:96:97:54:
                    54:10:89:e9:9c:4c:c5:b1:9f:5c:ce:a9:01:31:ad:
                    4f:ef:dc:c4:4b:14:90:b0:2b:0b:42:c7:f9:f7:09:
                    aa:21:96:f1:1c:f4:2f:7a:9b:1d:cb:65:7e:5f:19:
                    80:af:68:b3:5f:66:6c:0c:fd:5d:dd:98:16:4a:de:
                    8a:fd:43:b2:f8:1b:43:04:e5:3f:88:42:de:98:1b:
                    9c:9b:94:87:a0:8b:21:ef:fd:ae:3c:8f:7f:fb:8f:
                    fb:a3:f4:82:2b:26:29:99:58:91:d8:43:1e:1d:da:
                    a6:88:c0:b1:f1:db:b0:bd:a6:4c:23:95:20:fc:ac:
                    bc:02:69:37:5c:a2:4c:4b:a6:f8:74:7e:c3:ca:68:
                    98:56:6e:ba:25:4a:3a:98:7f:72:bc:45:87:47:f4:
                    b3:5e:72:4e:fc:99:c2:0f:8e:f1:e5:a9:b0:f6:19:
                    70:3c:2f:1e:e3:68:83:ec:6a:57:87:62:89:76:96:
                    f3:c9:a5:9b:c0:75:82:90:b6:db:c8:90:db:59:c5:
                    77:19:2c:af:7f:28:22:28:5b:57:96:d6:8c:cf:f3:
                    72:2a:78:6d:86:51:8c:49:36:b8:50:e5:b4:7a:67:
                    05:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2C:38:F5:39:51:A0:24:4C:46:2F:D5:00:0C:80:08:86:83:25:98
            X509v3 Authority Key Identifier:
                keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:1d:ee:49:e7:0b:51:28:64:60:69:6d:5d:a2:0c:53:b4:d3:
         6f:24:b9:61:73:b5:44:b8:b2:93:19:17:1b:74:bd:c0:e2:b4:
         fc:3d:e5:d2:f8:50:32:84:ea:b9:2d:cd:92:62:8e:43:ba:77:
         e7:99:24:ad:96:cc:46:90:9f:36:34:27:66:17:7f:c4:b2:2a:
         32:6d:7d:03:ed:10:07:6f:e9:bb:89:92:4e:27:97:d0:5a:12:
         61:cd:b0:8a:08:f8:6f:c3:33:21:94:ae:d0:f7:51:40:5f:1f:
         45:3f:6a:ef:4b:f6:7d:04:01:ea:52:56:d6:4f:9b:6b:8e:c5:
         3d:f6:ed:0c:55:63:b0:0a:45:cc:93:4e:ea:dc:e0:1a:03:c3:
         d6:84:2e:56:65:90:66:58:10:e1:bf:f9:ef:b0:14:73:da:85:
         0c:0e:e3:5b:94:01:33:62:09:ea:d5:02:c3:9a:e6:62:e8:07:
         0a:93:6a:38:76:60:3c:73:4b:4e:33:f1:49:ac:85:36:67:da:
         8f:15:62:66:66:e7:cb:cd:49:7e:b7:ea:0e:74:5e:d1:48:08:
         e3:15:a6:30:0d:a2:03:67:da:1f:05:f8:16:f3:56:1b:13:52:
         3a:d3:b3:6e:e5:60:94:cf:18:a8:56:64:b1:1b:8f:6e:10:c9:
         86:7c:0e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:30 2026 by rpki-client