This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File:                     9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier:          +OZvkVsa8waQv+J67i5D2tXV7yX3RybrTTZJ0KKyEk8=
Subject key identifier:   F6:56:9C:B1:D0:0D:DC:D9:18:C0:BA:F7:98:69:F4:ED:BD:28:B2:B1
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer:       /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial:       019C4358BAB4246F7917EF2968F1F6A831E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 17:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:14 +0000
Files and hashes:         1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: xEfwAAeX2wtf7AERMvkMxsx+vi2XPxT3oAU9Xw+LDXw=)
                          2: FXnznPhn55vYjBoYQttg28E4IK0.roa (hash: Dl0FXZLA3s/7+Hd8tk5PaoTmm8/8008Q5/BvoslwSfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:ba:b4:24:6f:79:17:ef:29:68:f1:f6:a8:31:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
        Validity
            Not Before: Feb  9 17:00:14 2026 GMT
            Not After : Feb 10 17:00:14 2026 GMT
        Subject: CN=f6569cb1d00ddcd918c0baf79869f4edbd28b2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:c7:3b:92:38:2d:22:74:47:65:6d:d8:66:
                    7b:ca:0a:a6:8d:7f:00:43:0d:3e:4e:5e:43:e2:15:
                    f7:c8:3c:ec:85:d4:01:50:84:69:86:1b:10:17:b3:
                    b5:b5:4e:e0:43:24:7a:b8:a8:0a:4e:5f:a4:5f:d5:
                    13:5f:36:ae:cb:c0:20:3e:ba:b3:4f:ec:f4:aa:f1:
                    55:96:b5:23:a6:64:7e:fa:a7:8a:7c:34:86:e5:8d:
                    0f:98:bd:bf:78:7c:05:e2:fe:01:89:09:25:35:9c:
                    9d:d2:ed:30:80:d0:40:8f:1e:e7:4c:0e:72:ac:f3:
                    46:25:b3:13:90:cb:c6:73:52:62:54:d5:5f:6d:fd:
                    e7:51:0c:1c:7a:04:32:85:a7:14:f7:16:e7:a7:71:
                    c0:2d:c4:64:78:87:19:37:43:82:63:d2:d0:d3:d3:
                    be:75:8a:c3:73:f4:df:d4:85:a8:dc:b8:2a:f7:83:
                    41:04:62:64:9f:e3:88:a3:1c:d6:65:65:7a:b3:2b:
                    5c:d2:e6:5e:7a:52:9b:24:04:cc:49:37:5d:66:30:
                    9d:14:77:76:57:4e:c7:62:80:3a:68:89:8e:d4:88:
                    81:ed:a1:75:c2:f3:c2:94:d6:cb:fe:9d:aa:80:f8:
                    60:17:74:53:36:2b:05:97:92:fe:11:28:83:20:4b:
                    5f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:56:9C:B1:D0:0D:DC:D9:18:C0:BA:F7:98:69:F4:ED:BD:28:B2:B1
            X509v3 Authority Key Identifier:
                keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:37:ee:bb:29:88:19:97:09:5c:4c:b1:70:a2:80:0e:ae:7e:
         8b:54:91:9c:f6:80:83:bf:50:5b:b6:49:11:10:b6:88:89:3b:
         8b:43:98:f0:92:e4:65:6b:c8:4c:34:a6:03:e8:be:39:11:08:
         ec:2b:d0:6c:16:13:67:91:21:0c:c3:5f:64:8c:30:74:c5:e3:
         ec:b4:93:9c:7f:85:ff:87:86:b7:a8:07:e1:48:82:2e:d1:e9:
         70:b0:e8:d7:77:09:47:0c:5c:80:de:cf:14:04:81:06:ad:f5:
         39:b6:32:d1:1a:10:d7:d3:30:e1:4f:fd:68:30:e9:b4:2f:cd:
         77:8d:2f:17:43:d1:58:58:a8:3e:65:97:50:42:f5:d3:eb:12:
         66:92:11:2f:a9:45:80:22:f4:bb:84:33:37:da:dc:ca:e6:d3:
         8e:7d:a6:5c:66:52:e4:ed:c2:17:89:64:62:cd:56:31:c8:86:
         76:54:63:a2:0d:3d:0c:67:68:e9:8b:49:e6:68:91:0c:9c:d8:
         d7:a6:b8:8e:dd:2f:2c:3a:2b:b5:22:b8:b8:22:6d:76:ef:79:
         33:ab:3d:34:af:d4:99:27:a7:9c:cc:18:1f:2f:e5:8b:29:86:
         e0:a3:b5:b2:8b:e7:4b:ae:c0:9f:f5:54:b4:14:06:18:46:58:
         34:e4:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:52 2026 by rpki-client