This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File:                     9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier:          VkqWRFWIZosW+hwLGvNYKgNlpSjmoKcW5Ry+J2xHLzo=
Subject key identifier:   14:72:59:18:EE:68:87:ED:FF:36:0D:40:86:34:12:1E:EA:26:DC:6C
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer:       /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial:       019C420FB31564D9433552868FF17F68F85A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number:          0CF2
Signing time:             Mon 09 Feb 2026 11:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:50 +0000
Files and hashes:         1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: 76xxWIwM6VpmsyYZMqDkOLGc7X7ZVXSrOGsyIRvru2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:b3:15:64:d9:43:35:52:86:8f:f1:7f:68:f8:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
        Validity
            Not Before: Feb  9 11:00:50 2026 GMT
            Not After : Feb 10 11:00:50 2026 GMT
        Subject: CN=14725918ee6887edff360d408634121eea26dc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:ff:5c:43:f4:72:90:7a:1a:a1:12:18:84:
                    4c:7e:2a:a8:fb:6f:fc:ec:3b:49:b2:37:93:a1:2f:
                    76:f5:61:77:29:e3:ac:c6:4a:f4:af:98:fe:28:20:
                    f0:56:76:91:1d:44:d1:96:67:7e:06:b2:db:7b:3d:
                    b1:84:9e:72:b1:ce:ac:67:29:18:87:1d:24:62:96:
                    fa:bf:9e:c3:98:e2:53:fd:3a:2f:4a:12:38:13:10:
                    a0:76:55:29:fc:9f:c3:e4:5d:10:97:d1:24:be:5c:
                    d2:9f:cd:91:9a:31:8a:25:b7:50:7f:5c:f1:1d:c3:
                    3a:ef:03:cf:b1:a0:0d:a7:9a:55:a0:23:46:f6:26:
                    83:2c:25:49:f3:52:f4:ec:ed:31:c3:1a:43:56:39:
                    da:3e:47:a0:49:3e:63:49:2e:cc:14:8c:2e:d2:a7:
                    82:9d:f3:11:63:b1:5c:46:35:2e:72:ee:41:94:00:
                    24:d3:68:e4:fb:a3:f1:d7:dc:e6:c8:61:b0:36:03:
                    47:d1:ab:01:a5:d3:95:3a:87:43:33:16:ec:70:bc:
                    00:70:bd:62:6d:c2:93:61:a5:7f:76:b9:e5:d4:13:
                    1e:8b:35:32:51:7e:a4:35:7b:fe:4a:ad:cf:20:a5:
                    ee:6b:7b:01:a2:3d:e2:f9:c4:07:f1:de:c9:14:86:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:72:59:18:EE:68:87:ED:FF:36:0D:40:86:34:12:1E:EA:26:DC:6C
            X509v3 Authority Key Identifier:
                keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:08:6e:66:22:ae:ad:6f:2c:eb:47:f7:69:8c:19:57:c5:99:
         bb:d7:e2:22:0b:a1:06:bd:4c:94:21:19:0f:c1:17:10:a9:81:
         9a:7d:f5:60:b0:c1:20:02:d4:80:32:68:48:61:8a:b2:e8:3f:
         ff:39:50:e4:f0:ba:06:a7:06:57:d0:04:5a:0b:3e:55:2d:df:
         10:6b:16:3f:f7:b6:03:32:b2:01:b7:ed:fc:58:9a:96:e3:9e:
         a7:56:0d:1b:ab:c1:cd:92:da:e3:69:93:74:99:78:86:56:08:
         9c:19:23:e6:ab:38:42:87:b1:22:6a:b4:82:3b:97:12:f6:f6:
         b5:1e:3d:35:88:d6:93:08:e1:3c:2b:c1:a1:3a:bd:65:dc:02:
         16:df:8b:37:e0:7b:96:5f:c4:0a:e9:fb:ff:07:8a:5a:d3:8f:
         70:2d:70:01:b6:81:7e:38:57:53:56:65:f0:1a:c5:6c:f4:ff:
         f6:18:30:c5:f4:4f:78:ec:7e:a8:c8:c1:0a:6a:32:d5:56:29:
         fd:ea:83:24:3d:ff:76:85:f1:3f:66:00:7c:dc:3c:ab:e8:d5:
         21:54:6e:e3:5f:69:b9:e4:2e:16:6b:eb:f4:43:dd:a5:bc:13:
         52:fc:8f:08:c6:e1:90:b2:13:22:24:45:da:bf:c8:ee:80:21:
         c6:9c:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:54 2026 by rpki-client