This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File:                     mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier:          bmJH9EYWQloPDUollUqEk4lA5k0b0ttpDLI6KC0HiqA=
Subject key identifier:   7D:3A:3C:07:4C:EC:92:E0:E7:FB:30:CC:D5:61:EE:9B:A5:7A:94:39
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer:       /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial:       019C4359591CADE4C4F70006A807B5530355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number:          0BDA
Signing time:             Mon 09 Feb 2026 17:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:54 +0000
Files and hashes:         1: KTlXY_GhxQ5VW4pMYqOYscTdOZM.roa (hash: je5ss0aWHni0ph4zaP7Hn858wJvG8bGTjlHPySsmlgw=)
                          2: iaDbFzCGuAlwzl6bRW55-YwI7tA.roa (hash: 6F9zTT+j/4thBUAM1E97eqvGP/DYTAVmPQOGCVMj6V0=)
                          3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: 7iBfH6ekFLiJylwmXhJ+iOK6RJY2mZXrZoLHYxYVsH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:59:1c:ad:e4:c4:f7:00:06:a8:07:b5:53:03:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
        Validity
            Not Before: Feb  9 17:00:54 2026 GMT
            Not After : Feb 10 17:00:54 2026 GMT
        Subject: CN=7d3a3c074cec92e0e7fb30ccd561ee9ba57a9439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:45:b0:a0:9a:7a:0c:46:86:92:67:ba:d9:
                    36:c4:fe:01:b9:e5:2c:74:7f:a5:10:b2:ae:8d:57:
                    07:40:8f:0c:6a:b1:a4:15:8b:bd:19:b9:92:be:7e:
                    1d:1d:58:86:8d:8a:c1:98:54:e3:c5:e7:8e:c8:32:
                    45:4b:1f:31:e3:67:9d:10:67:fc:1b:36:3a:8e:87:
                    15:bd:2b:81:fa:33:b9:9e:d5:46:81:f8:10:47:1a:
                    3c:f1:c3:74:c5:5d:7a:05:ac:79:3d:3c:d4:f2:89:
                    81:de:4b:c9:61:f6:49:2c:9f:ae:b2:f1:95:da:bf:
                    1a:ea:98:08:97:54:51:2c:6a:35:30:bf:56:63:a4:
                    6f:b5:fe:40:9d:18:d0:5c:ba:dd:28:8e:7c:18:d8:
                    63:81:4a:d2:c7:56:d1:22:a7:65:46:7b:74:2c:98:
                    38:89:48:a7:f9:f7:e3:75:13:b6:0f:18:04:c0:8f:
                    07:0c:74:52:a9:14:e5:b9:02:55:75:f2:45:c1:97:
                    8a:36:f6:7f:a7:fe:0a:95:2c:2d:8a:42:88:f4:7f:
                    81:9e:8b:3c:53:3d:4d:f2:7d:6f:73:b9:df:c4:66:
                    69:09:9a:00:03:63:26:d2:fe:a1:95:d5:d0:52:d4:
                    7a:8d:37:46:c4:d8:94:c1:78:fd:86:c6:d0:eb:72:
                    33:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3A:3C:07:4C:EC:92:E0:E7:FB:30:CC:D5:61:EE:9B:A5:7A:94:39
            X509v3 Authority Key Identifier:
                keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:55:ce:67:76:12:c2:52:2c:f8:83:0b:d1:7e:db:6e:c8:55:
         ea:db:1b:8d:c8:7b:1a:54:14:8c:aa:3e:cb:68:ed:0c:c6:3e:
         50:fa:b3:b1:53:9f:c5:96:b9:82:26:26:27:7e:c3:4c:a0:40:
         07:55:94:c9:35:6d:0d:91:1c:50:1c:c7:98:37:81:9b:23:68:
         6b:96:d9:47:ee:7b:d5:f2:26:6f:94:01:9e:94:bf:59:06:21:
         66:c4:3e:3e:ee:2f:83:4a:85:b4:d6:c4:25:7c:4a:ec:49:09:
         e0:5d:87:63:07:04:07:71:69:57:c7:bf:15:8a:b0:fc:8f:35:
         e2:68:04:93:19:65:b8:e8:07:39:3d:35:ef:5f:6f:52:7f:a6:
         4c:fc:2a:30:42:f0:f8:d8:91:9c:77:19:33:14:3b:13:c8:1e:
         31:c5:bd:6b:92:ae:7b:b7:ca:26:0a:ae:4c:30:6a:8d:a0:31:
         d5:26:65:0d:2d:2e:11:a6:2f:10:48:b1:26:79:2e:51:90:35:
         5d:b9:40:86:b0:14:12:76:f8:72:ca:69:51:e6:75:ea:b8:21:
         d4:68:c4:87:a6:a8:c8:7b:59:d5:41:dd:59:98:3d:b4:92:21:
         99:e0:65:16:58:47:68:4c:72:bf:6c:21:10:be:ad:a6:15:76:
         03:12:4b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:40 2026 by rpki-client