This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
File:                     9g8GwTqb9lKcSmvQ3uBVggVgz78.mft (raw, json)
Hash identifier:          aWEWUe+3hyvRKd/40tBljx7fUw4cQdOh9wH0RBB6Y5E=
Subject key identifier:   13:C4:40:C5:43:C0:60:DE:1A:F2:FA:39:E8:93:D9:80:DA:26:0A:22
Authority key identifier: F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF
Certificate issuer:       /CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf
Certificate serial:       019C41342D7EEF6702D0C7827E5D293D33E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
Manifest number:          02E8
Signing time:             Mon 09 Feb 2026 07:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 07:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 07:01:04 +0000
Files and hashes:         1: 9g8GwTqb9lKcSmvQ3uBVggVgz78.crl (hash: 2EAB/raGgGNPXZvVVyOOylg3pw1WYml0odwDY//c43A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:2d:7e:ef:67:02:d0:c7:82:7e:5d:29:3d:33:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf
        Validity
            Not Before: Feb  9 07:01:04 2026 GMT
            Not After : Feb 10 07:01:04 2026 GMT
        Subject: CN=13c440c543c060de1af2fa39e893d980da260a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:15:54:5a:a3:a2:4c:5d:28:bc:71:9b:a3:1b:
                    93:60:a9:41:99:ae:23:1d:cc:6e:d4:3b:2f:f7:ed:
                    ab:06:03:f2:95:40:99:58:ff:51:ab:53:4d:52:8b:
                    9c:cd:14:7e:ba:b4:f4:ec:a3:25:1c:11:1c:9b:29:
                    f8:ca:7f:ac:37:89:33:3f:3c:24:16:9e:b3:a7:ff:
                    33:47:26:bf:8a:8f:51:a3:04:9e:61:fb:9d:86:ad:
                    67:f5:66:7f:de:bc:73:fa:e3:64:d6:23:f7:8a:bc:
                    9f:e3:8a:86:5f:5f:4d:77:3d:54:ab:9b:73:94:9a:
                    05:39:e1:97:2d:88:1d:bb:b4:50:8a:a7:80:7a:44:
                    65:95:94:83:50:d7:6f:90:c7:5a:56:b3:a7:84:58:
                    61:10:1b:b1:82:d9:28:c9:8b:c0:c9:6b:e8:9a:73:
                    08:41:a7:c9:c6:fe:e6:27:51:4e:32:fa:2e:51:4c:
                    35:fa:dc:31:1f:52:fe:12:a6:4c:8f:5e:44:05:a5:
                    9c:74:c9:00:d2:d9:63:b7:a5:7f:5b:2e:ef:46:e2:
                    bf:dc:bb:8c:ba:d1:ba:29:24:9c:08:63:8b:36:87:
                    80:63:15:0b:54:31:0f:d8:b4:bd:2a:75:9e:39:25:
                    4f:47:80:2e:7c:42:53:a6:65:e1:04:18:a1:93:f5:
                    40:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C4:40:C5:43:C0:60:DE:1A:F2:FA:39:E8:93:D9:80:DA:26:0A:22
            X509v3 Authority Key Identifier:
                keyid:F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4f:a6:69:30:54:94:e5:3d:47:0a:6a:94:89:b0:1c:38:48:
         46:28:19:3d:1f:df:60:0d:9b:1f:07:97:a7:8f:e6:dc:6d:3c:
         85:8e:43:1d:15:97:c9:e2:20:1c:40:b1:e7:71:f6:b4:31:1c:
         d8:2a:5f:4a:57:5f:a3:a1:5c:b4:44:bd:3e:de:0a:1a:b6:20:
         de:6a:e2:d0:aa:56:7e:7d:3f:b0:9f:fd:ba:4f:d2:34:cc:4d:
         0a:5b:dd:3e:13:f8:22:14:be:41:b6:00:04:c2:bf:d7:91:4b:
         9f:76:81:39:8f:dc:51:7e:bb:8b:5f:67:32:e2:05:d4:9c:d6:
         11:d4:11:2a:ce:d8:95:8f:93:82:4d:02:52:59:04:c3:c3:42:
         57:75:31:54:2d:7a:2b:a6:8f:55:c1:6f:77:8d:2e:c3:e8:9d:
         fe:dc:22:6d:62:cb:53:e8:a6:e9:50:e1:7a:09:47:f0:93:10:
         86:9a:2f:cb:fa:99:ce:a0:d6:a9:5f:66:69:a8:d1:64:fc:df:
         76:c4:36:de:36:9c:df:20:e5:c1:5d:24:b3:db:20:31:0f:4a:
         72:2a:66:b9:a5:ca:de:31:19:8d:1d:f1:41:9c:77:ab:ab:49:
         fb:ae:83:70:6a:e2:1e:3f:08:c3:33:7c:dc:3f:7a:d3:c0:ec:
         b6:03:33:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:17 2026 by rpki-client