This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File:                     09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier:          mCJGHygdaPtN8iFEuzsOlRnL/KMx5o3AAJstFwG+AFQ=
Subject key identifier:   D6:06:DC:9D:66:29:8F:21:FC:BF:82:2D:37:80:E2:BA:1F:0E:1B:15
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer:       /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial:       019C420FE43196FA40B44D41C1C0469C416F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number:          0920
Signing time:             Mon 09 Feb 2026 11:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:03 +0000
Files and hashes:         1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: Lz12eCnjwiUhCstO7ZTbMkp/sVyzP8ctTI9C4rwSW5I=)
                          2: 66weAc2jQR4cpqZJijFd1sf301w.roa (hash: QzlH+p0PV5zvwqJmhfFaYurkNZtY37Urkhr+A3Txvmc=)
                          3: FOIGx5-VXjOve-N7mfII03ytFD0.roa (hash: e4g2C3HACEw66dXSjAJV8WZd57r1VCKWLBncQ7FYwig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:e4:31:96:fa:40:b4:4d:41:c1:c0:46:9c:41:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
        Validity
            Not Before: Feb  9 11:01:03 2026 GMT
            Not After : Feb 10 11:01:03 2026 GMT
        Subject: CN=d606dc9d66298f21fcbf822d3780e2ba1f0e1b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:76:a6:39:72:dd:0d:1e:52:b7:b7:cc:43:3e:
                    0b:c0:18:d0:8c:0e:c1:7f:3d:72:c7:f5:48:bf:9e:
                    b4:33:7e:84:4a:67:e9:d7:4d:42:d8:fc:c8:be:54:
                    03:c3:ef:99:32:9c:27:3a:1e:5a:db:74:5d:10:92:
                    13:b1:62:cb:dd:6d:e0:a5:64:95:12:4d:a0:67:59:
                    10:49:83:f7:55:7e:d2:85:39:33:af:d3:4b:2b:85:
                    c4:c7:76:85:89:6d:e8:92:5b:b3:ef:0e:f3:9f:3d:
                    ae:84:20:b1:02:88:9e:86:9f:25:fa:b4:68:c2:ee:
                    7c:df:f1:61:ca:2a:f3:6b:cf:3e:89:9f:15:38:05:
                    80:16:ed:f2:96:d0:4c:db:77:98:99:c3:25:04:56:
                    23:ff:b7:15:fe:09:ef:fe:d3:95:de:b3:03:65:c5:
                    37:81:e3:30:7b:96:fd:ed:11:74:88:f2:bc:7c:a8:
                    9b:53:ae:fe:8d:09:a2:9b:f1:88:b5:59:d8:dd:0e:
                    e3:27:bd:3e:2d:6b:16:fe:62:e1:b5:7c:bd:05:d8:
                    0c:87:35:af:21:3d:5b:92:24:b1:0c:fd:52:e1:e8:
                    0a:94:aa:16:6a:63:95:ef:18:4f:24:1c:bd:77:9e:
                    dc:aa:61:e4:a7:47:73:6a:01:52:e3:3c:2e:37:aa:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:06:DC:9D:66:29:8F:21:FC:BF:82:2D:37:80:E2:BA:1F:0E:1B:15
            X509v3 Authority Key Identifier:
                keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:9e:ff:06:a2:f2:63:29:17:7b:79:06:4c:d3:6f:1a:6d:1b:
         33:66:8f:ad:c7:a4:9c:84:56:ba:cf:20:42:ca:bb:3b:1c:a7:
         30:0c:e6:7d:a7:54:f9:b4:5f:e1:6f:85:93:72:8f:be:73:f6:
         bf:90:74:f9:09:03:28:ad:39:06:ef:0d:c7:30:5a:59:d6:ec:
         f8:77:71:dc:9e:48:b7:ad:b6:3f:69:32:4d:41:51:28:3f:3d:
         74:66:87:b2:4a:4a:84:1f:d2:c2:61:f8:a9:95:62:93:0e:56:
         f7:c9:cd:c8:2f:9f:a1:af:1f:96:e5:eb:65:bd:c4:4e:18:a5:
         a0:9c:e4:48:59:1e:93:3f:4b:ac:8b:be:3c:68:31:a8:f7:a5:
         5f:52:5f:5d:51:7d:f5:3a:14:4d:87:c6:3c:d6:39:7d:dd:e1:
         86:cc:02:bf:52:fb:4a:ac:22:01:d7:7a:84:08:5d:8d:24:17:
         0b:91:cf:46:d9:41:36:70:74:17:bd:56:a2:85:8c:4a:87:d3:
         c5:4c:bd:5f:0b:1e:4f:84:0f:d0:35:68:a7:12:9b:49:e7:ae:
         70:59:0f:d8:fd:bc:e2:d8:18:72:a8:d1:21:a0:7a:cb:92:13:
         f8:30:ea:7e:d8:9b:d8:91:20:7a:f6:b9:1b:98:2a:2b:3a:46:
         13:90:72:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:18 2026 by rpki-client