This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
File:                     p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft (raw, json)
Hash identifier:          vgRZKWgUDr0SS36s17i/yS97zGxxlNWFIsBHAt7KxC8=
Subject key identifier:   C6:15:52:46:0B:B5:E5:29:86:C9:65:B6:29:7B:34:2E:C9:C8:71:8D
Authority key identifier: A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD
Certificate issuer:       /CN=a7ef66cb7cc350345852be9bdd75455782afe4dd
Certificate serial:       019C424635248001B27EA3AE9F9238CA5489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
Manifest number:          092B
Signing time:             Mon 09 Feb 2026 12:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:23 +0000
Files and hashes:         1: jy4XFgCzljZWpXE-riML9DaXkts.roa (hash: hfp/T5AOfMF/LamC2Ys8fXDrV6Q6STrraxrMeK+mRx8=)
                          2: p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl (hash: iDQe6e1fUDe4kELPYJs1qGjx7mnrsVoP0IDZ/Qsln9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:35:24:80:01:b2:7e:a3:ae:9f:92:38:ca:54:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ef66cb7cc350345852be9bdd75455782afe4dd
        Validity
            Not Before: Feb  9 12:00:23 2026 GMT
            Not After : Feb 10 12:00:23 2026 GMT
        Subject: CN=c61552460bb5e52986c965b6297b342ec9c8718d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a4:61:0d:69:38:8d:7a:8c:a2:2c:f9:c0:4f:
                    82:e8:61:b1:8a:56:f9:fa:ba:eb:da:6c:86:27:5c:
                    5f:f1:e1:15:fd:5d:76:0c:13:b0:57:62:6c:45:23:
                    68:09:d0:97:25:4e:1b:7f:65:10:f4:2a:35:f0:8e:
                    ab:40:43:5c:89:b9:62:04:f4:9a:9c:89:f5:7b:d0:
                    79:4a:99:c8:72:c8:e7:ef:9a:e6:d5:73:e5:96:7c:
                    1f:72:7b:25:4d:60:d3:b6:ac:64:62:85:0a:2b:dd:
                    5e:22:ba:2b:97:2e:fd:ed:d2:8f:18:84:e2:bc:64:
                    7f:ba:3d:68:bf:ec:a2:33:d1:b2:99:c3:5f:44:b1:
                    c0:69:17:fb:f8:ca:ba:42:4f:d3:0d:89:d7:34:34:
                    8f:b7:9f:0e:48:a2:b5:66:30:01:83:03:f6:57:9d:
                    c5:f4:c8:ca:4c:4f:f1:c2:3f:88:5e:89:5d:d8:d9:
                    fc:1d:f5:56:2d:b9:06:30:e5:7a:2e:d1:2c:a7:ea:
                    2c:46:73:c7:92:d9:cb:bb:de:a5:22:d3:cc:46:6c:
                    ba:15:a0:b5:a7:93:05:96:cc:f1:50:54:a0:71:7b:
                    a4:95:7f:52:6d:8b:fa:3f:18:10:ae:2f:be:38:b7:
                    b8:cb:0b:f9:c2:34:0e:22:ec:e3:a7:5f:f9:ce:0d:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:15:52:46:0B:B5:E5:29:86:C9:65:B6:29:7B:34:2E:C9:C8:71:8D
            X509v3 Authority Key Identifier:
                keyid:A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:23:d2:41:6f:df:a3:91:10:e5:06:3f:fe:dd:f7:eb:01:
         b0:2b:6a:ec:fb:7c:d8:29:e2:5e:9f:31:90:ea:c1:7c:94:88:
         d5:fc:57:4a:40:29:45:94:43:ab:e2:91:93:a7:5e:26:c9:3e:
         84:31:e7:e4:27:c1:d7:dc:30:1a:8f:50:08:9e:f4:6e:4d:b1:
         cd:60:bd:a8:f3:26:45:b3:8b:62:1a:90:6b:17:5f:95:27:2d:
         65:6e:7b:6c:ee:4b:b5:50:ca:4d:61:29:c0:62:ba:5a:b7:60:
         aa:d7:3a:4a:96:54:04:f8:b0:1b:02:2a:9d:d8:a9:e9:bb:b2:
         ea:30:58:b4:5d:7f:28:e6:46:0a:07:c2:0b:32:12:e6:fa:bf:
         66:07:16:f1:40:e3:84:e7:1a:61:86:13:aa:6d:1a:d6:ce:eb:
         17:b8:6a:8d:47:0c:79:40:5e:1b:b3:3f:30:d0:39:7f:46:90:
         6c:44:76:2e:53:61:07:29:a4:03:b8:06:4c:e1:9f:54:06:02:
         7f:d2:5e:f1:32:0b:07:bc:58:a0:e9:98:57:59:ac:72:2c:f2:
         75:41:a9:cd:57:b4:aa:7a:17:04:84:55:ee:3a:a5:a8:7f:f1:
         62:95:83:00:7d:20:37:57:a1:5c:f8:0e:8a:62:ae:36:cc:f3:
         ed:ad:09:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRjUkgAGyfqOun5I4ylSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZWY2NmNiN2NjMzUwMzQ1ODUyYmU5YmRkNzU0NTU3ODJh
ZmU0ZGQwHhcNMjYwMjA5MTIwMDIzWhcNMjYwMjEwMTIwMDIzWjAzMTEwLwYDVQQD
EyhjNjE1NTI0NjBiYjVlNTI5ODZjOTY1YjYyOTdiMzQyZWM5Yzg3MThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aRhDWk4jXqMoiz5wE+C6GGxilb5
+rrr2myGJ1xf8eEV/V12DBOwV2JsRSNoCdCXJU4bf2UQ9Co18I6rQENcibliBPSa
nIn1e9B5SpnIcsjn75rm1XPllnwfcnslTWDTtqxkYoUKK91eIrorly797dKPGITi
vGR/uj1ov+yiM9GymcNfRLHAaRf7+Mq6Qk/TDYnXNDSPt58OSKK1ZjABgwP2V53F
9MjKTE/xwj+IXold2Nn8HfVWLbkGMOV6LtEsp+osRnPHktnLu96lItPMRmy6FaC1
p5MFlszxUFSgcXuklX9SbYv6PxgQri++OLe4ywv5wjQOIuzjp1/5zg2l+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYVUkYLteUphslltil7NC7JyHGNMB8GA1UdIwQY
MBaAFKfvZst8w1A0WFK+m911RVeCr+TdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC05bXkzekRVRFJZVXI2YjNYVkZWNEt2NU4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kZWFjOGEtODAxMy00YzhjLWI0NzEt
OWU1NzNlNzEwOTU4LzEvcC05bXkzekRVRFJZVXI2YjNYVkZWNEt2NU4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kZWFjOGEtODAxMy00YzhjLWI0NzEtOWU1NzNlNzEwOTU4
LzEvcC05bXkzekRVRFJZVXI2YjNYVkZWNEt2NU4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZoj0kFv
36OREOUGP/7d9+sBsCtq7Pt82CniXp8xkOrBfJSI1fxXSkApRZRDq+KRk6deJsk+
hDHn5CfB19wwGo9QCJ70bk2xzWC9qPMmRbOLYhqQaxdflSctZW57bO5LtVDKTWEp
wGK6Wrdgqtc6SpZUBPiwGwIqndip6buy6jBYtF1/KOZGCgfCCzIS5vq/ZgcW8UDj
hOcaYYYTqm0a1s7rF7hqjUcMeUBeG7M/MNA5f0aQbER2LlNhBymkA7gGTOGfVAYC
f9Je8TILB7xYoOmYV1mscizydUGpzVe0qnoXBIRV7jqlqH/xYpWDAH0gN1ehXPgO
imKuNszz7a0JyQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:32 2026 by rpki-client