This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
File:                     mpTE6sr0BAocMO0e3qjjAAcxtqo.mft (raw, json)
Hash identifier:          mg3gZ0xr6JKwkT1RVIUmoOmzLz440l24VyCWxX3T9F0=
Subject key identifier:   1B:6F:5B:66:5D:A6:13:0E:41:77:E1:19:A0:FA:76:E8:B9:FC:13:DB
Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
Certificate issuer:       /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Certificate serial:       019C42EB30C3BD37EC8DD438537AF41E8DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
Manifest number:          06C5
Signing time:             Mon 09 Feb 2026 15:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:35 +0000
Files and hashes:         1: kUsI4SRxxZP0gd_4YTt-HTTnRSc.roa (hash: fG/gmFQxL44rDJ/8bE+/AVQ5a2QcbRZO0R8IThxbrH8=)
                          2: mpTE6sr0BAocMO0e3qjjAAcxtqo.crl (hash: EbEDJ5RwIyYpUl6Bz3n4YoIC2lE4OCe19C3MjLDD6Ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:30:c3:bd:37:ec:8d:d4:38:53:7a:f4:1e:8d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
        Validity
            Not Before: Feb  9 15:00:35 2026 GMT
            Not After : Feb 10 15:00:35 2026 GMT
        Subject: CN=1b6f5b665da6130e4177e119a0fa76e8b9fc13db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cb:54:30:df:67:c2:ac:56:a7:a1:c7:59:65:
                    8f:e6:2b:61:e6:71:53:51:c1:5c:af:a0:08:54:c5:
                    ca:4b:80:79:a5:7f:86:4e:08:7e:65:57:9e:e4:71:
                    8b:36:65:14:ce:dc:8e:55:3e:3c:4e:dd:14:08:c1:
                    da:5b:6b:4f:06:b5:21:c3:3d:b3:ce:1e:ae:04:9e:
                    e8:f3:08:5d:5a:ad:2d:1d:fe:0b:36:c3:6c:23:11:
                    50:95:36:62:99:2c:fb:0f:e3:4c:47:83:34:71:10:
                    4e:1e:59:84:60:24:ec:ef:ec:df:6a:18:a9:53:1d:
                    4e:4d:87:f4:e9:f5:38:9a:e8:9e:07:5c:e8:c3:94:
                    be:49:c7:fc:29:e5:a9:43:cc:62:bb:fc:95:bf:b3:
                    68:c2:ef:e7:eb:22:c0:ac:81:dc:cc:dd:3b:99:87:
                    e8:f4:87:6a:35:74:53:81:4d:b8:9b:0d:5b:46:00:
                    1b:38:42:d6:80:42:3f:e9:af:cd:47:64:b7:cc:84:
                    21:a9:b3:6e:25:87:6c:2c:e2:68:10:e3:1f:50:4f:
                    b2:84:0a:dd:9c:f7:71:6d:92:1f:c2:6f:16:05:be:
                    10:f0:86:91:33:0b:89:28:ab:4a:16:3b:53:14:3d:
                    12:4b:78:85:7f:3e:cb:8e:9a:44:94:93:b1:8b:c6:
                    93:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6F:5B:66:5D:A6:13:0E:41:77:E1:19:A0:FA:76:E8:B9:FC:13:DB
            X509v3 Authority Key Identifier:
                keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2e:08:fe:ac:c6:b6:55:61:86:6f:58:58:ed:52:69:59:9a:
         44:37:80:f1:d4:97:aa:3b:aa:74:71:6d:db:03:28:ae:78:6f:
         ba:af:4d:4c:64:96:79:f7:95:10:4a:ae:58:ce:c7:d7:ba:81:
         1c:6b:72:4a:84:9e:a8:05:8c:72:6e:16:88:b5:10:aa:f8:8a:
         c6:9d:f0:11:41:27:1f:d7:7f:94:0f:bc:90:f7:20:0e:94:86:
         ce:3b:04:7a:48:28:7b:24:ad:49:e9:f8:9c:a5:3d:26:77:c3:
         51:c1:b1:7d:19:69:31:93:b9:b8:51:0d:50:5f:f4:1f:fe:b2:
         07:a2:cb:ed:aa:87:47:5c:ea:63:58:14:dd:d9:1a:cc:d2:8a:
         37:04:0f:66:c6:16:1e:1e:d7:4b:b5:22:b9:1f:96:82:f9:55:
         b9:cd:bc:56:45:f9:b5:da:78:37:a1:7b:c1:4c:7f:d7:54:54:
         49:cf:23:7e:da:3f:02:60:8e:26:43:b8:33:c4:d2:29:cb:eb:
         a7:19:64:a3:7c:19:17:b9:49:e7:ba:91:cd:5d:cc:69:8e:68:
         61:c2:cd:09:f3:04:f6:6c:bd:63:38:30:71:68:43:25:72:e2:
         ca:d4:ee:d0:ea:8b:ef:03:de:2b:94:6f:40:f0:79:97:1f:4c:
         3e:32:91:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:24 2026 by rpki-client