This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
File:                     rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json)
Hash identifier:          YuF/frlrejjNhVs4/5dPqyKrcl4Tr/3QYPD95Rjh0vY=
Subject key identifier:   9D:3E:DE:0D:BC:1F:2F:6D:72:D5:EF:F8:EB:6F:85:8E:AC:F4:D5:79
Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
Certificate issuer:       /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Certificate serial:       019C42B40BE7E442F1FD9089BE0AB0FE0EE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
Manifest number:          065B
Signing time:             Mon 09 Feb 2026 14:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:21 +0000
Files and hashes:         1: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: JPqVjg84/poa5XuggK49AkXorOIG18g7AGL746RxuL4=)
                          2: vomEUArk8PuYIYbTC4XbIk0d7Gw.roa (hash: zYSw8Jy0jy+EoxtEcsz4ao8v/Mpz2r8TG2Vb6dYscW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:0b:e7:e4:42:f1:fd:90:89:be:0a:b0:fe:0e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
        Validity
            Not Before: Feb  9 14:00:21 2026 GMT
            Not After : Feb 10 14:00:21 2026 GMT
        Subject: CN=9d3ede0dbc1f2f6d72d5eff8eb6f858eacf4d579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:9a:1f:36:03:ba:58:49:99:97:1b:33:bc:80:
                    d3:f7:bd:62:44:93:c6:bf:85:a7:30:3f:c4:5d:d2:
                    73:03:0d:98:af:bd:d2:61:fe:ad:ab:db:67:90:c0:
                    2d:9c:90:35:4d:ad:50:59:e7:94:1d:c8:53:3a:bf:
                    97:b5:cd:ff:04:c3:57:b3:dc:fe:fc:6a:a8:35:4d:
                    a9:17:9e:6d:0f:9e:50:21:a5:3b:32:ec:50:20:0a:
                    b0:f4:94:0c:e6:34:f0:91:a2:03:70:15:4b:e1:6c:
                    7c:93:1e:4b:55:d5:f8:1d:b7:09:67:cb:04:5c:43:
                    1d:b2:2e:07:74:ac:7e:4b:ae:bc:99:6d:67:07:7f:
                    05:19:8d:a2:38:a7:7c:d3:f2:7a:f6:ec:36:bf:1c:
                    9d:91:1c:12:cf:7f:17:a4:92:72:46:1c:2c:a3:32:
                    13:43:b4:de:e2:4c:a7:87:9a:5c:ce:0e:71:24:5e:
                    6f:fe:c2:98:d9:b7:f1:56:4a:6b:d3:38:57:66:6a:
                    44:f8:7b:21:f3:63:3f:e7:3e:78:2f:d6:6c:ad:be:
                    3d:71:ad:04:9e:2a:b4:52:00:ce:11:7b:8e:d1:62:
                    1d:38:eb:fe:d3:40:01:21:97:2f:bb:56:38:ce:f7:
                    e0:94:01:00:5e:97:aa:85:32:18:40:c4:0c:d8:9a:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3E:DE:0D:BC:1F:2F:6D:72:D5:EF:F8:EB:6F:85:8E:AC:F4:D5:79
            X509v3 Authority Key Identifier:
                keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e9:46:c0:1f:26:03:18:fa:e1:b6:db:7c:ab:d1:1a:98:bb:
         ef:84:2a:78:8a:c9:27:b3:8c:63:e0:1b:56:1e:f0:c4:19:9e:
         24:e6:fa:8a:7c:7d:02:a2:38:c2:5a:4b:78:2f:4f:95:87:91:
         51:e5:b2:bb:f3:a1:0c:3e:f9:f5:1d:ee:d1:ea:6c:ae:fc:d8:
         6f:7a:cb:a5:8b:29:9b:fd:d5:9e:0c:e3:54:be:a1:12:16:9c:
         dc:89:9e:7a:2f:e1:3a:c5:3e:ec:24:89:e4:67:ba:91:fa:0c:
         e1:69:2e:a7:2a:98:20:8d:f1:55:62:1f:e1:35:f3:dd:63:50:
         13:22:c9:9b:6f:90:69:98:9e:34:77:7e:1b:5c:75:25:05:ad:
         1a:da:d6:e7:71:0d:e3:66:62:88:97:d4:94:72:4a:c5:8f:84:
         9c:ec:67:62:e5:24:5f:e9:82:18:ea:3b:6f:ef:d0:f0:bf:6e:
         2d:6a:f8:69:db:d9:59:ac:73:25:a1:b9:8e:b4:73:d6:90:dc:
         ff:41:2a:63:d0:79:d9:2d:cc:59:80:4c:11:2b:4a:58:bf:db:
         94:17:18:2e:d2:ca:68:f7:14:b6:dc:ce:f7:ac:b2:f7:06:d3:
         14:11:27:23:6d:a1:4e:8e:71:83:2c:0d:1f:4d:a8:0b:8c:2c:
         f9:dd:a1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:25 2026 by rpki-client