This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
File:                     9r15bwtjNc_hKKXPm5fudoCC7Y0.mft (raw, json)
Hash identifier:          QRJtHb7l5lk/XaQ+BFa5NGDmKyzN+Flyzha2zGfm5Rs=
Subject key identifier:   E3:CA:C7:EC:CC:D6:A0:87:32:23:BE:55:C1:16:0B:BB:F1:66:23:5E
Authority key identifier: F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
Certificate issuer:       /CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Certificate serial:       019C4434D72498A66F6A1EF85F37D5D3A9F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
Manifest number:          0309
Signing time:             Mon 09 Feb 2026 21:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:39 +0000
Files and hashes:         1: 9r15bwtjNc_hKKXPm5fudoCC7Y0.crl (hash: bPseB6cEGpP6zjsEAdM4Aj2AY7JIX7H8GmWzwrmRcUI=)
                          2: lGujuiPQvSmFHQAKi24Db9fPtPs.roa (hash: yXgFWbLf2xOQ/uIv3drvR9A3/BacWeZUxwc8Zd5w1cI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:d7:24:98:a6:6f:6a:1e:f8:5f:37:d5:d3:a9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
        Validity
            Not Before: Feb  9 21:00:39 2026 GMT
            Not After : Feb 10 21:00:39 2026 GMT
        Subject: CN=e3cac7ecccd6a0873223be55c1160bbbf166235e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:b5:7e:4b:27:7e:0a:6d:65:7f:fc:da:8f:
                    b4:f5:0d:54:62:8e:cf:ad:4d:d7:36:ad:64:f4:79:
                    46:ba:5f:f4:ce:8a:1f:fa:67:9d:5c:b2:f8:e2:ca:
                    87:ef:7f:67:a2:72:c3:80:d0:9f:22:7b:7b:05:6a:
                    3f:eb:71:b1:f1:3d:98:4b:d7:32:ad:5f:09:13:2f:
                    1f:98:c8:36:72:50:f3:b6:16:14:0a:1c:1c:3a:20:
                    96:43:19:a1:7e:6b:b3:d2:e6:07:03:c3:b9:2b:c7:
                    c6:bc:29:37:47:ff:b6:c4:9d:6b:77:b7:f4:4d:b1:
                    01:d3:56:aa:6d:76:52:62:97:b1:b8:f5:00:b6:a7:
                    6a:e9:11:82:e3:9d:f0:d8:93:d8:e7:d2:ad:7d:6b:
                    60:d9:88:ea:a4:78:03:39:fa:6a:b5:52:79:77:03:
                    71:c5:ea:9f:ec:db:e3:a3:48:86:7f:43:19:99:cb:
                    03:c6:03:e0:30:33:4a:30:ce:08:b6:34:47:3b:b0:
                    10:41:bc:6b:c7:29:4a:90:0f:45:ef:08:6a:1a:4f:
                    f8:2e:d9:41:a6:44:1c:49:2a:0f:9f:e6:52:e9:09:
                    ca:31:9d:be:cf:49:8b:e1:7c:39:95:b8:3e:3a:30:
                    fb:33:4b:9b:c2:18:72:c7:de:d2:05:4f:a3:1a:26:
                    e9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CA:C7:EC:CC:D6:A0:87:32:23:BE:55:C1:16:0B:BB:F1:66:23:5E
            X509v3 Authority Key Identifier:
                keyid:F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6c:c5:84:a0:3c:34:65:55:a8:1e:bc:74:0c:6a:1e:40:8c:
         d4:2a:fa:90:4d:a2:88:dd:77:7d:eb:2b:2e:a3:fa:c8:d3:2a:
         61:ca:c0:b1:7e:c0:02:e6:9b:e1:ae:db:ca:9c:5d:0e:2f:12:
         38:44:f0:74:54:e1:42:c7:88:63:e4:ab:dd:80:cb:d0:13:09:
         30:90:c0:ac:1c:43:95:77:1a:65:c0:80:13:24:89:28:6e:30:
         a6:5a:77:ec:5c:da:78:1b:0c:10:87:91:61:d3:9b:cd:2b:09:
         e7:71:93:22:5a:4a:a8:ea:00:d3:f7:4d:ac:5d:58:ea:3b:07:
         f2:ef:fe:4a:6f:9a:5d:70:b7:13:d6:b8:55:e4:52:cb:32:2c:
         d9:3c:f4:f5:5c:2d:37:18:a8:be:e3:2c:48:73:5f:c7:53:fd:
         ee:07:6a:33:66:2e:1e:b3:1c:ac:98:b6:c5:c5:59:cd:a9:af:
         2b:f2:0c:76:b5:73:30:2f:1d:a7:6a:d4:59:bc:d7:53:eb:24:
         35:25:63:8b:fe:34:e7:5e:a2:c3:37:4c:04:fb:f2:fb:12:63:
         18:2b:44:e5:6b:f2:6f:bb:89:3a:2d:bc:2e:89:e3:f6:3f:c3:
         4c:98:61:6b:4e:10:3a:f6:5e:1c:95:cc:c0:a0:6d:c3:71:3a:
         e4:ef:75:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:56 2026 by rpki-client