This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File:                     9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier:          0Zv+cUk3IH8TUKoReqep+d7n1A8kLDXY89gfIO3LOE4=
Subject key identifier:   FC:A8:1D:C4:61:77:88:2C:34:B0:3C:B2:EA:4C:47:8E:B6:CF:88:39
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer:       /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial:       019C43C6FBC6BA6C5B0376BC1C45EADB2EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 19:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:39 +0000
Files and hashes:         1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: a4xFaNPApAYwpGqLIsAqu0HJuOUpoelnURHTcytJwN4=)
                          2: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (hash: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:fb:c6:ba:6c:5b:03:76:bc:1c:45:ea:db:2e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
        Validity
            Not Before: Feb  9 19:00:39 2026 GMT
            Not After : Feb 10 19:00:39 2026 GMT
        Subject: CN=fca81dc46177882c34b03cb2ea4c478eb6cf8839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:62:01:c0:03:15:ef:8c:de:17:52:63:52:f5:
                    90:26:5f:70:9a:f8:6d:e8:48:b7:19:4b:e6:6e:6b:
                    61:b4:02:02:42:f5:f7:6e:30:e8:7c:74:e5:d5:18:
                    d3:57:e4:72:93:db:42:f7:37:50:3a:9a:01:e2:26:
                    ca:04:08:e5:77:8b:af:09:35:fa:56:32:7b:18:e5:
                    cf:a1:45:85:cf:3b:62:97:de:90:c9:91:ae:fa:17:
                    e6:78:d7:e1:dd:2b:70:84:7b:64:30:d8:d3:65:80:
                    f7:b6:0a:65:ce:e7:2a:39:e0:24:f4:ce:90:b5:30:
                    b4:a2:9d:f6:3f:b9:0f:50:5c:9e:94:23:cc:4a:d1:
                    2a:3b:36:4d:3c:9b:46:e1:b9:c8:75:fa:f4:ff:0a:
                    bb:42:70:01:f2:75:c4:95:2c:04:8a:6f:72:18:44:
                    16:89:7b:ff:2f:20:24:3e:1b:94:ef:e3:0e:c4:ee:
                    80:31:70:9d:0b:71:ca:ad:e1:14:7b:72:0c:cc:f0:
                    c7:20:0e:11:6f:db:65:56:05:3b:40:4a:16:e1:31:
                    11:ef:fb:48:aa:9a:6b:47:b5:7c:da:11:39:8f:53:
                    c5:8a:11:06:12:c3:9d:bc:f3:96:51:7a:cd:33:5b:
                    54:36:9c:3a:f0:48:60:bc:8b:58:0a:1c:1d:4a:7d:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A8:1D:C4:61:77:88:2C:34:B0:3C:B2:EA:4C:47:8E:B6:CF:88:39
            X509v3 Authority Key Identifier:
                keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:50:b2:64:86:4e:4c:37:07:87:12:15:37:64:ce:c3:1f:5e:
         64:fb:4a:a4:b5:0d:46:ce:65:f2:1e:3d:0e:e0:2d:81:14:3d:
         d3:dc:dd:7b:df:7d:fd:d5:2b:54:af:b7:09:61:d7:85:8d:a7:
         80:ea:c5:4a:04:b7:d2:6c:8c:2f:63:59:99:e9:04:08:d4:b4:
         f9:8a:ac:8b:27:8f:9c:db:56:82:c3:7c:7e:95:d3:49:78:52:
         98:63:7f:f8:8c:54:61:66:9a:cd:38:02:6c:e2:45:d5:62:3b:
         8f:5a:70:8d:73:30:de:ca:57:3e:f3:5f:4f:df:94:fc:d2:29:
         3f:bc:fd:c5:bd:aa:dc:73:5f:47:46:0a:d9:9d:ce:25:be:9b:
         f0:5d:a4:b9:5a:0b:9e:63:c8:ae:32:c4:7c:61:9e:3e:e7:88:
         76:f1:14:7e:6e:20:be:4f:90:f3:75:38:c8:83:75:e6:5b:17:
         1f:87:8f:63:4b:56:14:40:f8:ba:22:24:ec:8a:9a:7d:01:ea:
         09:c9:fd:88:00:dd:a1:35:da:6c:e1:97:1f:4f:d0:f4:3c:0f:
         7a:c5:3b:0f:61:6a:2f:68:be:d7:4f:a1:88:e1:fa:33:47:c3:
         57:18:8a:27:bc:de:e2:1b:1b:44:5c:26:58:2c:96:25:a1:89:
         32:77:d8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:05 2026 by rpki-client