This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
File:                     I9hEjFy5A5jkwoXOycD0dmrJMd8.mft (raw, json)
Hash identifier:          2bGC7nOe6eWY1sF1JGG/O+FOB2I2DjmHhCcU3YI+rKc=
Subject key identifier:   93:EC:B7:F2:A6:E1:A2:01:C5:77:B0:91:72:F2:59:88:1F:6C:62:D7
Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
Certificate issuer:       /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Certificate serial:       019C4246C9F74C3CA3FAE443849BA4BFB3E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 12:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 12:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 12:01:01 +0000
Files and hashes:         1: 8TcJH-qO38Nnc49nDFhjl3i6q20.roa (hash: HYqFnkRnK7UVCZ7277kZ3SagdWM8Y+qSNG/b1PHhvmw=)
                          2: I9hEjFy5A5jkwoXOycD0dmrJMd8.crl (hash: Ps+xNaq7xYmsEIEsiFqtny/Bal7pGn8yAI3bQKbK7UI=)
                          3: XcluKI5GK94xvt-2VsfsH9YAxas.roa (hash: aMUQPT04n27GjqpL1CyIzBfeTJro8TREHvy5Fo/qxZs=)
                          4: ppVBATzjCDPLKHQd3o4jFf9lhxY.roa (hash: 4QaAZx/54RVk/xsTNzwOX4eDHF+9k00rM5X1Yd0pNtY=)
                          5: xkK7Kbvhg6ccWQLBKOWEjOj8dIs.roa (hash: hSxWOh+4pOoJgqKHeBLOsvvNqhI/bRq5ZNPWvaG7HYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:c9:f7:4c:3c:a3:fa:e4:43:84:9b:a4:bf:b3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
        Validity
            Not Before: Feb  9 12:01:01 2026 GMT
            Not After : Feb 10 12:01:01 2026 GMT
        Subject: CN=93ecb7f2a6e1a201c577b09172f259881f6c62d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:31:25:e1:8f:81:f5:42:14:fb:c7:35:c8:8f:
                    b1:b7:17:a3:b6:47:1d:fc:c4:a9:03:10:9f:d0:f0:
                    d9:d5:85:a8:d3:9c:78:9e:8a:d5:7b:e2:a2:b3:b6:
                    3b:20:ab:1d:f8:a0:e3:58:4e:da:e0:2e:c4:43:b8:
                    d3:15:22:d4:cc:ea:e8:3b:ac:d8:dd:c1:55:e5:9d:
                    8c:9f:bb:6a:63:e8:74:e6:f0:d5:94:f0:ab:5c:f0:
                    28:3d:cf:c0:8f:da:de:d8:ea:37:5f:5c:45:6f:3a:
                    f8:b5:f6:a5:f5:79:13:a6:9f:27:45:ab:aa:bb:43:
                    5b:9b:69:8d:2f:8c:e4:9a:fe:a4:62:7d:da:4f:f4:
                    31:ba:e6:9d:71:ef:04:cf:96:60:36:49:26:c6:52:
                    0d:d7:9c:60:c3:8a:af:73:6d:91:d5:14:2f:2c:3b:
                    a1:6f:c1:ff:ce:25:6b:71:70:54:8f:fd:4b:4c:86:
                    ac:66:ae:dd:f5:3a:5a:bf:64:91:c7:ce:89:20:2c:
                    1a:d0:a2:91:d7:3e:0b:ad:74:b2:f2:b9:40:15:68:
                    3a:bf:eb:e6:a2:84:69:4c:ac:81:6a:50:67:83:9a:
                    be:49:15:0f:07:28:55:fe:d0:9b:17:d8:cc:87:cf:
                    ac:25:00:52:ef:3c:83:53:68:c3:00:25:76:86:3f:
                    82:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EC:B7:F2:A6:E1:A2:01:C5:77:B0:91:72:F2:59:88:1F:6C:62:D7
            X509v3 Authority Key Identifier:
                keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:25:cf:be:01:a1:64:4c:d8:31:38:0c:ab:36:3b:4a:bf:b0:
         87:8c:ff:14:61:10:30:4d:a0:ba:a7:9f:2e:98:8c:cf:39:e0:
         c2:b2:02:47:20:98:c6:93:7d:50:bb:16:e9:af:7a:b5:2c:2a:
         29:b6:fe:6a:73:96:c5:85:8e:79:2a:b8:fc:78:5c:64:41:2f:
         01:c8:16:14:67:77:32:f9:67:c2:6d:a1:ac:bc:ae:b0:4c:80:
         18:58:23:92:bc:0a:e6:9f:80:ae:a8:c5:a0:73:94:ef:c8:07:
         34:f0:a9:cd:0d:53:83:97:e3:9e:db:65:a9:75:76:3d:b8:6d:
         81:fd:1c:22:08:ab:f4:b6:5d:f8:05:d6:42:f8:04:9d:52:b2:
         6e:97:56:68:65:f5:8b:7f:84:f8:7b:36:6c:e7:47:0f:97:af:
         e4:6f:02:47:82:3a:d6:84:ee:e9:33:fe:14:1a:67:97:57:7d:
         44:b3:71:df:98:8e:30:4e:32:ea:fe:23:de:9f:99:47:4c:f4:
         a2:7a:3c:5d:53:49:13:1d:e0:0f:2b:52:48:b5:19:fe:f0:ac:
         6b:be:34:93:89:6c:52:4b:18:40:80:99:8a:52:77:98:cb:18:
         ce:95:7a:24:5f:73:13:17:d9:ad:02:6e:4e:ae:ef:3d:0d:34:
         7d:31:d3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:09 2026 by rpki-client