This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
File:                     9rG5O-fUO4bWT4tLljvJFWJfI_I.mft (raw, json)
Hash identifier:          23eM4YYYZyN2o2oX0kEDkEXFsplmZ5xmuy0u4UdrnU0=
Subject key identifier:   75:65:42:69:2B:84:7C:33:5B:E4:EE:E4:AF:76:CB:AC:A4:7D:50:AF
Authority key identifier: F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
Certificate issuer:       /CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Certificate serial:       019C432219888F8EBF80CC0A6B0B9440868F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
Manifest number:          04A1
Signing time:             Mon 09 Feb 2026 16:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:34 +0000
Files and hashes:         1: 9rG5O-fUO4bWT4tLljvJFWJfI_I.crl (hash: 8GB+wW+4IBWloRuzkPYhNji+Yenp7LhSBualaBp9Lso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:19:88:8f:8e:bf:80:cc:0a:6b:0b:94:40:86:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
        Validity
            Not Before: Feb  9 16:00:34 2026 GMT
            Not After : Feb 10 16:00:34 2026 GMT
        Subject: CN=756542692b847c335be4eee4af76cbaca47d50af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:d9:d7:36:72:32:d2:33:0c:4a:83:42:bf:
                    b4:86:73:9a:3e:24:55:ec:dc:17:1f:28:02:2b:40:
                    6b:bb:f3:0b:70:60:a4:41:fd:60:62:85:e7:7e:9f:
                    ac:0a:e5:eb:8f:78:b5:ac:d0:ec:49:9f:25:f7:fe:
                    18:d6:fd:86:f2:c5:69:13:b7:61:b2:9d:f8:90:4d:
                    c1:c8:1f:0b:aa:f5:ea:b5:30:e9:e8:24:f6:4c:13:
                    2b:64:d3:8b:d6:d0:4a:40:9e:a6:a8:1d:2e:d8:16:
                    17:a3:2a:6e:e8:c4:87:59:89:a4:66:55:ca:e3:76:
                    17:ed:34:33:0a:45:b5:24:8f:ed:14:8a:48:2c:ea:
                    11:ec:41:44:e3:04:9c:9b:79:1c:ac:ca:a6:e7:a2:
                    ce:c3:d0:cd:29:81:c5:95:72:eb:a3:65:a8:dc:08:
                    bd:91:20:9c:05:18:91:b5:75:6b:86:15:5e:02:84:
                    9f:dd:da:55:2f:99:c5:b4:76:b5:79:85:ce:28:4f:
                    f4:56:c9:2a:49:43:2e:cb:18:9e:1e:1d:39:9d:59:
                    41:2d:b3:7f:db:91:78:f0:d5:64:80:6d:55:70:c2:
                    10:4f:48:05:3a:75:63:e9:4d:9e:0d:84:d6:81:c5:
                    97:0f:f1:ac:a7:f4:64:9d:0d:7a:d1:38:b9:15:0c:
                    03:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:65:42:69:2B:84:7C:33:5B:E4:EE:E4:AF:76:CB:AC:A4:7D:50:AF
            X509v3 Authority Key Identifier:
                keyid:F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ee:49:4a:3e:48:c9:45:f9:d3:38:8f:a2:bc:d8:aa:47:3f:
         74:31:c7:39:54:bc:56:63:52:fd:4c:c1:49:ec:92:55:61:94:
         21:1c:41:2a:e8:4c:c1:20:6c:86:2f:a6:a5:6e:50:2c:bc:28:
         e0:ee:77:a2:c0:91:0d:05:c0:9a:57:a8:da:b5:7e:fd:79:77:
         a7:9d:d6:81:72:c9:22:11:bc:9a:47:b8:95:b2:89:20:aa:cc:
         cb:af:3d:30:39:25:14:2d:34:a5:60:65:b2:e7:80:8e:cf:33:
         35:03:58:e0:cc:ed:fd:b6:f0:e2:a9:be:aa:e6:64:81:28:dd:
         d0:c8:6b:85:eb:45:79:16:8c:c4:64:e2:59:cf:61:f4:b0:52:
         3e:f3:2b:94:b1:56:a2:7b:33:d7:09:28:22:74:ed:4f:91:8b:
         d6:61:33:22:82:a7:1f:f8:41:1e:8a:f7:69:b6:6e:e5:5b:16:
         ce:1b:b7:9f:86:ad:4a:65:c1:2e:83:3f:dc:36:b5:a9:80:4b:
         35:23:e3:dc:27:30:23:81:a6:06:a8:a5:ce:c8:8d:b0:83:9c:
         7e:70:36:8a:67:65:13:6c:ad:4c:e3:af:82:7e:9f:5c:e2:5d:
         97:29:92:c3:f1:a0:8e:85:60:90:94:31:25:99:01:36:2f:69:
         e8:6a:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:18 2026 by rpki-client