This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
File:                     k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json)
Hash identifier:          y0TJNj4EvCQJUia440IxrccWIFNXBVOlLMbRFdGdaN4=
Subject key identifier:   49:7F:55:79:E6:5C:E6:33:16:C9:AE:90:69:A3:A7:BF:2A:93:EC:4F
Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
Certificate issuer:       /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Certificate serial:       019C42EB32247F3C66B64A38F97B550B7E87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
Manifest number:          06EE
Signing time:             Mon 09 Feb 2026 15:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:35 +0000
Files and hashes:         1: NtljOaIL1JwpiXLySyyvx4z_K-w.roa (hash: bTyr7ks2Z5N+mkb97LsrPJ8BXJjMNHN+ldTmfDHr8Xw=)
                          2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: W01ocDcOXXndV3q2WREdwZTLMW2KtJxZ8oTczfEGXSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:32:24:7f:3c:66:b6:4a:38:f9:7b:55:0b:7e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
        Validity
            Not Before: Feb  9 15:00:35 2026 GMT
            Not After : Feb 10 15:00:35 2026 GMT
        Subject: CN=497f5579e65ce63316c9ae9069a3a7bf2a93ec4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:92:48:8c:bf:c8:3c:e1:bb:fe:42:c2:c0:8c:
                    e3:a8:ea:d1:37:50:c0:d6:d6:80:c8:ff:5a:9b:66:
                    92:bd:79:e2:b1:12:2c:14:b5:9c:df:d8:de:f0:7c:
                    0a:89:d9:cf:05:07:6a:18:6d:be:c3:b6:4f:64:11:
                    36:36:41:81:41:ec:76:0c:3e:ec:1f:69:c7:29:b0:
                    1a:26:04:f9:52:76:38:31:11:34:b6:50:af:73:1a:
                    d4:e0:68:0d:90:17:0b:e7:09:d7:f2:37:99:09:47:
                    80:76:10:66:83:00:5f:51:ee:2b:e0:41:8b:e6:aa:
                    84:fa:a3:cf:52:17:61:29:bd:a4:b8:75:f3:fb:74:
                    41:99:78:6e:65:18:c9:4a:a1:53:23:1d:09:90:e8:
                    78:0a:65:ce:69:71:51:f4:c0:1e:03:15:89:1e:42:
                    91:93:65:c6:42:13:ab:07:8a:73:59:79:46:d3:24:
                    cc:97:03:e1:86:59:be:1b:cc:82:48:ae:69:29:4b:
                    8d:e5:31:84:66:9e:7d:4c:e0:98:99:1f:dc:c2:ac:
                    9a:db:6a:8f:ce:fc:33:1c:4a:47:89:2a:32:d3:6f:
                    fe:c8:d3:c6:c4:6d:b8:5f:6d:aa:d0:3a:b7:06:6b:
                    19:d2:89:20:9b:ac:14:85:0d:b8:e8:4d:a1:f9:9f:
                    de:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7F:55:79:E6:5C:E6:33:16:C9:AE:90:69:A3:A7:BF:2A:93:EC:4F
            X509v3 Authority Key Identifier:
                keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:47:5f:1c:21:88:e4:c9:12:da:0a:fb:ab:8d:9c:cb:52:c9:
         8d:fc:a5:c4:f1:d2:48:6d:f6:cc:70:f7:34:0c:70:36:e8:9d:
         c9:71:25:66:18:14:4a:ec:41:94:62:2c:9c:98:b5:b6:ec:96:
         80:f5:fd:11:12:f3:63:4a:1d:4c:9d:87:4e:3b:1d:c6:1c:74:
         c7:25:35:20:6e:92:31:8a:98:33:da:8b:e6:eb:c6:1f:7b:eb:
         cc:44:30:67:af:dd:a7:c0:c7:35:40:dc:3a:6e:80:d7:5c:00:
         b1:8e:36:b7:79:d5:be:8e:09:9d:5b:e8:85:7d:a5:bb:d6:87:
         36:5d:05:7b:ba:f8:18:34:11:7e:16:12:e2:f9:28:db:a4:a0:
         5f:5a:eb:d1:d7:f0:1e:4a:46:07:78:d6:8c:09:4f:4c:fa:cc:
         22:cf:71:cf:69:11:73:90:ef:e2:05:3f:f3:a4:4e:0e:b1:1e:
         1c:fe:e5:08:ab:f0:06:de:1e:f2:31:f0:14:d7:ac:ee:e6:62:
         61:a3:81:ae:72:a0:db:f2:be:3f:61:b5:fd:26:78:39:4f:f8:
         c4:84:84:00:cb:a1:dd:58:4c:df:a5:22:6a:dc:59:54:17:5b:
         7f:3c:81:ef:bd:76:d0:62:1f:44:60:2f:b4:c9:56:d3:26:1f:
         91:96:9e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:28 2026 by rpki-client