This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
File:                     9U47eX9Lo36_cYmkwU8FINfPMNc.mft (raw, json)
Hash identifier:          i5G/E4S8QprtUzrYKr8KslTJFvi5/P9Ax/3fHWKQ2hw=
Subject key identifier:   07:14:FB:0A:0E:A0:5F:94:D9:FF:EA:BB:5D:FE:20:A9:6C:00:A4:6F
Authority key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Certificate issuer:       /CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Certificate serial:       019C4358E6E24B491EC086A3CF496D1CD5A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
Manifest number:          0529
Signing time:             Mon 09 Feb 2026 17:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:25 +0000
Files and hashes:         1: 9U47eX9Lo36_cYmkwU8FINfPMNc.crl (hash: MpWcDMkpOBqvUFzFq9ctXrHHKFuArbeK0x3R7cc6ods=)
                          2: ha9gNtI2Det0BHkc3WoBLr_4eN0.roa (hash: 3ZwCki1NyOWEqytxpVSycbqzMVm9+ptmvP6m+BbcDfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:e6:e2:4b:49:1e:c0:86:a3:cf:49:6d:1c:d5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
        Validity
            Not Before: Feb  9 17:00:25 2026 GMT
            Not After : Feb 10 17:00:25 2026 GMT
        Subject: CN=0714fb0a0ea05f94d9ffeabb5dfe20a96c00a46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:24:73:dc:ea:30:23:24:f8:b0:8e:f4:98:
                    db:23:e2:2a:7f:f6:2e:09:b6:c9:d9:08:d0:63:c0:
                    d3:84:aa:8c:35:25:25:f4:88:6e:ce:bc:13:82:a9:
                    72:6b:9e:54:6c:ce:c5:6c:4c:8b:7b:34:16:e3:25:
                    09:86:9e:84:3a:58:c0:f0:0d:6c:cb:a6:a3:cd:ca:
                    b5:bb:cd:27:01:f2:0b:71:bf:e0:a9:fa:d6:a6:1c:
                    9a:6d:b1:4b:e5:9e:1e:6d:d5:a6:af:ba:7d:08:4d:
                    50:0e:e5:56:79:3b:b9:fe:d0:b8:ff:0b:19:bd:29:
                    e6:83:09:e5:cf:6f:fb:07:e7:79:31:e2:55:f9:60:
                    0d:af:4f:1f:77:97:f5:69:85:bf:46:04:35:ba:b2:
                    03:5d:b7:8a:da:a3:57:06:51:33:e9:43:b0:1d:5d:
                    88:ab:89:97:d6:cd:2e:3a:3e:44:22:21:35:2b:3e:
                    17:94:a7:ba:1e:e6:41:b9:3a:83:cb:01:b4:68:28:
                    56:90:0a:da:d4:aa:e0:d3:4c:87:84:80:e0:e7:b0:
                    e0:b8:16:f1:2a:d5:5c:74:29:d3:d9:49:5b:2f:8b:
                    2f:ef:f1:39:89:7e:a3:c0:8e:a1:c0:0f:2b:40:be:
                    af:44:bd:3d:6e:e6:89:74:81:5a:c5:3b:f1:19:6d:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:14:FB:0A:0E:A0:5F:94:D9:FF:EA:BB:5D:FE:20:A9:6C:00:A4:6F
            X509v3 Authority Key Identifier:
                keyid:F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:78:e1:73:df:1f:5e:59:f7:f9:b2:9d:38:d6:19:69:55:c9:
         5c:64:4e:b3:11:4a:e3:f0:67:8f:61:17:40:17:cb:f1:e4:2d:
         d5:3f:f2:6c:7a:9a:85:b0:17:6d:ed:81:d9:8a:14:a7:59:64:
         bc:b1:85:45:af:be:46:1c:56:82:c4:b4:5a:92:e2:f6:a1:c6:
         99:62:1e:7c:7d:04:3b:04:d2:35:68:2e:3a:23:69:a4:f6:9a:
         c4:5c:f1:8f:25:86:99:25:42:46:e5:db:67:54:74:ff:37:a1:
         ca:99:87:73:e7:63:78:9d:c0:22:e6:df:0b:25:4b:43:08:8a:
         9f:a5:9c:0a:44:1d:13:8c:8b:c8:69:99:53:b4:90:51:a3:f2:
         7a:1d:be:a2:78:fd:49:25:4b:45:33:70:37:ad:be:3f:ca:4e:
         80:be:e6:c5:bf:97:6b:84:06:57:10:5c:9c:d3:a1:b3:0a:9a:
         b7:57:67:26:c4:80:d3:33:f1:12:9f:c2:00:14:7e:42:99:91:
         7e:7b:fd:69:05:bf:9c:c0:41:46:e1:5b:99:79:0a:20:4a:d6:
         df:19:46:8e:41:d2:a0:cc:bc:20:78:c8:1a:52:41:93:82:9d:
         2f:b4:7e:e1:9e:bd:91:c4:79:7a:3a:6a:af:c9:f3:9a:1f:63:
         0c:79:11:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:59:26 2026 by rpki-client