This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File:                     mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier:          AxojG9TusFOzZNVcE4BcwoK+gp+DjG93Cp9zGPdVVIQ=
Subject key identifier:   3D:FC:93:12:96:E0:9B:DF:DF:2C:D6:B1:B0:BE:97:FA:C4:0A:7E:69
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer:       /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial:       019C42EB6C8270B56AD92EA8788FF9D3E9BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number:          120B
Signing time:             Mon 09 Feb 2026 15:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:50 +0000
Files and hashes:         1: jlRHoOU7VBuZG0NtlGgpYUcQg1w.roa (hash: a/dGRje2qaYpZSj1y2Z3z/E4zsUb68R588aViHKfTm8=)
                          2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: CzzVW0elf4rVR/qQjeuMkGVzeo2A/FW53MP8g1kcCKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:6c:82:70:b5:6a:d9:2e:a8:78:8f:f9:d3:e9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
        Validity
            Not Before: Feb  9 15:00:50 2026 GMT
            Not After : Feb 10 15:00:50 2026 GMT
        Subject: CN=3dfc931296e09bdfdf2cd6b1b0be97fac40a7e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:39:e4:c2:f9:59:02:74:1a:06:27:da:e0:59:
                    57:d1:15:9c:06:63:86:c8:e1:77:0e:06:5c:55:d7:
                    34:65:5f:84:1f:d4:45:41:55:d3:57:e9:22:07:e9:
                    d9:99:00:c1:e1:85:6e:80:a1:f7:cc:aa:c4:d6:05:
                    46:96:ee:33:2a:bb:5d:4d:bd:dc:b1:2a:de:f3:bd:
                    2b:44:51:30:93:1d:f5:83:da:2f:57:49:61:4d:c6:
                    76:dc:fb:ba:36:fa:43:28:01:01:23:7c:b4:96:82:
                    94:4e:bc:61:9a:3e:61:6e:2b:a3:ea:7a:e8:68:8e:
                    b3:ea:96:4a:2e:68:29:79:9f:c6:a9:bd:e3:dd:d2:
                    3e:7f:87:ad:7d:ab:70:d8:7e:bd:f9:b3:28:67:29:
                    1c:79:ac:60:07:de:21:da:e2:c9:01:28:0d:fd:14:
                    08:bf:f9:70:00:67:68:37:da:88:9f:ba:b0:92:ab:
                    a0:5a:77:95:98:70:40:46:c5:06:7d:27:a9:83:6d:
                    c8:d0:e1:92:46:2b:b1:45:eb:fd:35:8a:6a:be:92:
                    80:37:ac:8c:fe:51:28:1c:ee:4b:e6:e3:5f:48:ec:
                    76:9b:50:d6:ea:df:0c:73:4d:0b:8e:e4:73:18:63:
                    01:a0:b1:62:4d:99:31:3e:5b:11:ce:9a:ae:ac:7f:
                    b4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FC:93:12:96:E0:9B:DF:DF:2C:D6:B1:B0:BE:97:FA:C4:0A:7E:69
            X509v3 Authority Key Identifier:
                keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:27:87:07:a5:65:e5:9b:c9:49:23:d0:5c:b5:6e:5f:09:92:
         04:83:17:51:9c:41:fd:99:b6:3c:10:d0:ab:e7:9a:62:0c:8e:
         19:6d:f7:46:68:27:4e:57:83:c6:97:8b:62:b5:43:2c:e4:8f:
         24:ab:4e:1e:f8:ba:6d:e9:28:f3:53:4f:92:60:24:2b:f3:83:
         9e:51:a8:00:05:4a:53:99:82:91:3b:a8:52:02:2b:88:23:42:
         74:cc:f7:c5:97:d1:09:23:8d:c9:82:3b:02:0f:81:26:b0:08:
         3e:7c:e4:de:4d:ff:70:92:0c:06:c8:1e:df:20:77:93:1f:65:
         38:37:02:39:f0:e4:39:b8:ab:e4:fe:69:73:52:df:41:98:8b:
         09:0c:9a:1a:68:26:af:be:db:48:f8:21:19:b6:1d:d7:32:9b:
         2c:c2:27:7e:83:a4:1c:b7:79:8e:16:df:90:b4:f5:1a:56:9a:
         41:10:11:2f:08:41:fc:65:36:03:86:49:0f:e0:59:bd:22:22:
         51:ff:76:cd:56:49:19:0e:ff:05:38:7c:2c:78:d6:aa:22:24:
         6e:9d:9e:9a:ea:1a:bf:6d:cd:6a:e0:d9:fc:7c:54:93:b7:06:
         33:e6:3d:65:46:81:75:c4:fe:12:18:2e:3f:b1:e7:1a:c1:15:
         b3:cc:ee:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:42 2026 by rpki-client