This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File:                     bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier:          0sQ2SxeIbIpMd0omg6Jd2gZTv26lJGsVBW52SMLnZOY=
Subject key identifier:   D9:E4:AE:40:D9:72:52:42:9C:BA:8E:62:B9:44:56:DC:15:42:11:86
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer:       /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial:       019C44348FED887B56F055A8DFC43D48D651
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number:          150A
Signing time:             Mon 09 Feb 2026 21:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:21 +0000
Files and hashes:         1: MEIc2bGt5e__2EYZcQgjrWD4duM.roa (hash: 9JsE0ryMFAES2iHyGEPNb9NzGX6vqAC7Vkax56Cn3Do=)
                          2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: 49358WIngW5aFulF56SDWphVR2THRkSrl2qivFYbBAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:8f:ed:88:7b:56:f0:55:a8:df:c4:3d:48:d6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
        Validity
            Not Before: Feb  9 21:00:21 2026 GMT
            Not After : Feb 10 21:00:21 2026 GMT
        Subject: CN=d9e4ae40d97252429cba8e62b94456dc15421186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9e:64:86:0c:23:d4:b2:7a:41:ba:cc:66:4b:
                    19:b1:0b:0f:d7:db:66:0e:17:bc:02:16:ca:66:6a:
                    6d:04:43:05:75:94:3d:fb:1e:70:3d:60:38:c5:46:
                    44:fb:ef:34:9b:cf:f4:6a:f2:4f:b9:4f:34:dc:0d:
                    5b:0d:6f:48:40:a1:17:7d:55:75:45:00:6f:08:47:
                    5b:4e:7d:97:f6:e6:76:a3:df:52:c2:0b:7f:5f:ed:
                    96:f5:c8:a9:5c:29:36:57:ed:e6:48:fc:a6:ce:ee:
                    c6:34:a5:4b:16:cf:5f:25:91:2b:fe:a4:07:ee:7a:
                    cd:0a:8f:5d:dc:c9:ee:ad:50:7e:d6:2e:3c:ef:6f:
                    4b:74:d9:2b:8d:7a:d6:45:f0:61:14:39:0a:10:c6:
                    52:d3:b1:3c:df:a9:11:68:b8:09:ad:aa:bc:fe:c2:
                    26:ed:9e:41:9b:b4:fe:7a:ed:f5:5e:78:7c:a8:88:
                    0b:cc:5a:20:6b:e7:5b:1c:df:79:00:d6:35:7a:38:
                    44:ea:af:97:22:2b:5b:21:4e:52:d7:15:ef:50:a6:
                    3b:91:6e:09:d5:62:f1:17:2d:02:c3:ad:0b:f4:4f:
                    e2:b5:f4:07:07:b9:e8:1c:67:91:df:9b:36:50:0e:
                    14:00:02:59:99:5f:fd:cf:4c:6b:22:e4:31:da:ad:
                    f2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E4:AE:40:D9:72:52:42:9C:BA:8E:62:B9:44:56:DC:15:42:11:86
            X509v3 Authority Key Identifier:
                keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:e5:ca:89:f6:cd:58:c4:e1:51:3d:dd:e8:90:b6:d5:2a:
         e4:21:f8:0f:a0:bd:23:f7:74:4f:3e:cc:bb:75:0c:02:2f:11:
         e6:80:b6:6f:3a:9e:0e:73:83:26:56:b6:25:87:89:e6:26:06:
         f3:da:3b:5e:52:38:84:c3:b6:3b:18:1f:5d:54:fd:35:d5:0d:
         0a:94:ab:79:23:e7:f6:52:dd:a3:80:8b:7f:d5:74:0d:77:c4:
         5c:bf:62:59:10:23:3d:bb:29:ca:5f:cf:98:0b:73:3c:49:83:
         01:39:43:ee:f6:70:0f:43:8d:b9:7e:93:15:23:e3:fc:34:fd:
         de:c6:26:66:10:52:7b:88:92:d4:2b:3e:25:63:60:24:9a:e6:
         62:80:5e:d4:15:46:6e:ae:8c:8d:2c:3e:44:3e:f0:2a:a7:89:
         86:d3:24:f8:af:b5:5f:48:44:7d:9a:03:d2:c3:1b:10:c6:a3:
         67:86:5c:c0:02:e7:fd:a0:85:e8:e4:7d:32:23:b4:bd:d8:05:
         89:51:8a:7d:aa:3e:de:18:a2:97:dc:81:da:e9:79:37:0f:37:
         8a:60:ef:10:40:ae:33:0c:18:40:4b:8e:43:46:71:c0:5d:d7:
         85:32:24:98:a2:d7:fe:a7:18:22:ee:73:08:6a:2f:1c:0b:46:
         04:9e:b9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:05 2026 by rpki-client