This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
File:                     v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft (raw, json)
Hash identifier:          xxdA2QC1Rx8pWfZ66Gd3vV5V0RR2/uqISvF9IkUZzKA=
Subject key identifier:   3F:3E:CF:81:E3:03:32:D6:6D:E8:31:87:29:24:DD:31:6B:98:97:0A
Authority key identifier: BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C
Certificate issuer:       /CN=bfd070b0c9add92972fefc566c112d93717c4d6c
Certificate serial:       019C42EB9991486509AA8BA3850BCCAEFBC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
Manifest number:          1816
Signing time:             Mon 09 Feb 2026 15:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:02 +0000
Files and hashes:         1: hB5AbDSqiH4rz8B8k5IdA1nRfA0.roa (hash: tVKpwayqN7JLwz8QolMBhYOxzzJLIK1oL+xvKaEZs9o=)
                          2: v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl (hash: BJVTIQdBY25Z1Z1NJV+HiPyMLymRPffSTa4xMXcC24Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:99:91:48:65:09:aa:8b:a3:85:0b:cc:ae:fb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd070b0c9add92972fefc566c112d93717c4d6c
        Validity
            Not Before: Feb  9 15:01:02 2026 GMT
            Not After : Feb 10 15:01:02 2026 GMT
        Subject: CN=3f3ecf81e30332d66de831872924dd316b98970a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:fe:df:68:21:c7:9c:29:a1:9c:2f:dc:0d:
                    80:d4:a0:8d:0c:68:8d:b2:b2:c3:a6:9c:d4:1a:d5:
                    a4:ad:37:54:6b:9c:49:7b:9a:67:58:be:e3:cb:8e:
                    c2:6a:0d:46:03:2d:0d:17:00:2e:25:6f:f5:26:47:
                    9d:68:2d:42:11:1d:db:c4:9a:1d:1a:91:ef:34:b0:
                    4c:2b:ec:3c:78:b0:14:bc:fa:7d:25:ce:bc:cd:13:
                    dc:af:19:38:93:f7:f9:43:e0:9a:d6:e2:4e:79:5a:
                    ed:16:79:7f:43:a4:fa:b3:8a:1d:19:7a:9a:2b:c3:
                    24:ef:16:e4:58:42:90:8e:67:00:9b:31:18:3e:9a:
                    63:0c:c8:18:55:fb:62:b3:5d:2f:be:88:5c:62:d2:
                    38:db:ab:2c:30:01:ab:ff:c7:f4:b0:45:17:65:f3:
                    aa:bf:ea:64:88:05:b7:3a:12:9a:2d:ad:89:9f:2a:
                    51:63:c0:74:c8:e0:08:cf:b5:30:8b:ae:19:36:de:
                    71:17:a9:3d:ec:e8:aa:2a:8a:da:db:93:6d:c2:2d:
                    75:f9:3f:c6:ab:6f:e6:7a:94:91:f6:a0:c0:f4:c0:
                    41:07:74:2a:f0:18:43:c4:c1:3b:9c:fc:92:56:89:
                    34:45:d4:ac:55:22:43:ba:3f:8d:9c:19:7a:ea:64:
                    85:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3E:CF:81:E3:03:32:D6:6D:E8:31:87:29:24:DD:31:6B:98:97:0A
            X509v3 Authority Key Identifier:
                keyid:BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c5:37:df:ea:c0:3c:9f:71:f7:8a:81:bb:a2:f5:8f:7f:7b:
         96:65:ff:ee:a3:91:e4:e1:67:c5:17:85:f3:ed:7a:f5:9d:a2:
         9d:f5:61:15:fa:07:f5:61:ec:1b:d1:33:fc:d5:44:d4:5b:7b:
         b9:ae:ef:7f:a0:5c:e6:5a:97:3c:d8:f1:cd:e9:36:e4:81:bf:
         b3:3b:2c:8d:ec:0d:cd:be:3c:7f:51:1c:ab:c7:43:f1:e6:2b:
         65:2f:c1:0e:14:34:29:31:47:39:e7:54:41:f2:18:88:73:a6:
         99:58:dc:25:ea:dd:61:51:71:17:a4:2e:63:96:19:62:5f:0b:
         d1:f0:8a:b1:84:cc:c6:ae:1f:fd:e0:7d:6a:24:4b:bf:26:96:
         8e:52:7c:7d:87:8f:4b:5a:e8:0e:2f:49:00:cc:5b:ed:88:5b:
         cf:26:09:66:cc:ce:a6:04:83:05:5f:db:45:30:0e:3d:27:5d:
         30:ad:7a:0d:9e:95:e0:36:04:e2:3a:d6:ca:e6:17:39:eb:74:
         4e:9f:b4:33:2e:54:55:61:c8:23:d5:9f:0f:41:f6:c9:a2:5a:
         50:fe:fa:5c:11:32:d2:ae:f8:4f:03:30:ce:3b:af:9c:50:10:
         59:c0:bd:ff:0a:3f:b3:44:a7:94:b9:ba:e1:3d:01:42:37:77:
         61:03:9d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:58 2026 by rpki-client