This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File:                     B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier:          Xq6vLDrn6mNU0WPWixYdyHFxMujXrotIEGtdAtuGgCM=
Subject key identifier:   1F:9B:6F:78:1C:00:5D:81:9D:CF:65:F2:CF:D2:13:B3:0D:3C:38:09
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer:       /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial:       019C40FCB21E5AC3C95D6A32AA3A6B905685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number:          16E6
Signing time:             Mon 09 Feb 2026 06:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:28 +0000
Files and hashes:         1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: Y6iI4z2+IuHyWEFqhxb8sugXvVx9oYY6olgbnh2S/Rs=)
                          2: QRYnwPzgKp-9B5SCFgwsSF3VtLI.roa (hash: g+/BMJPy7LXVieQvJddQ3qFl3eA3wSZtRhRO6IBuRQ0=)
                          3: ad8VziUyy5y7esWKDnVVM5dOvOs.roa (hash: BarUJX1J5UzrikBZata2TwtD1kQ45xC8YMxlVyw4wMU=)
                          4: mqgpdMuqiVglKY9miPJxo9C0iTQ.roa (hash: cS8JqXqtjXcEL0kXghoZe2Txkm/P1kISxoeWzSy0MNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:b2:1e:5a:c3:c9:5d:6a:32:aa:3a:6b:90:56:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
        Validity
            Not Before: Feb  9 06:00:28 2026 GMT
            Not After : Feb 10 06:00:28 2026 GMT
        Subject: CN=1f9b6f781c005d819dcf65f2cfd213b30d3c3809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:dc:6d:d3:5d:bc:97:99:ac:31:68:49:94:
                    91:ca:ff:36:a3:9a:78:5a:79:2e:52:ef:4f:88:7b:
                    52:05:05:ee:75:3e:17:4c:d2:72:50:e7:a9:f3:10:
                    d6:6e:89:5e:ac:df:07:5d:8a:b5:46:81:28:2f:c9:
                    b8:7f:0b:2b:cb:14:f0:16:33:73:db:08:17:c0:2d:
                    9b:2e:1d:be:ab:d9:32:f6:c3:21:0e:64:ec:ab:64:
                    37:1d:b0:8f:46:98:fe:36:54:de:a6:eb:18:5b:46:
                    c8:b7:68:7e:33:28:d0:d5:b6:68:27:a5:cc:3d:b0:
                    e5:2c:5b:17:c1:b6:73:0c:3f:25:f9:44:b9:85:dc:
                    77:7b:fa:37:b1:8e:9c:b8:2a:a1:cb:cc:44:1c:ca:
                    50:f3:44:ba:92:7d:d1:ca:54:30:e1:be:6c:59:8c:
                    19:23:c8:9b:64:21:a8:f0:d0:27:93:96:62:fc:2f:
                    66:1f:48:6d:ca:24:30:95:46:5f:89:e6:64:54:98:
                    1e:fb:ef:53:1f:5a:54:69:62:91:62:1f:08:54:b6:
                    37:9c:20:1d:e6:65:a0:a8:80:2e:e0:1d:9b:29:3a:
                    00:4f:80:61:37:0b:5b:25:c2:13:0b:03:2a:98:a9:
                    9e:f6:c4:25:5c:17:a3:5d:7d:84:43:19:7c:ba:d5:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9B:6F:78:1C:00:5D:81:9D:CF:65:F2:CF:D2:13:B3:0D:3C:38:09
            X509v3 Authority Key Identifier:
                keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9c:bd:a2:a5:00:ee:6b:3a:d7:a6:34:a5:2a:19:c3:aa:c5:
         19:74:41:64:8b:14:de:70:8c:38:21:fb:68:c2:90:d5:3c:5c:
         dc:da:73:c9:95:d0:57:5c:ec:00:79:c6:9f:97:34:b2:95:04:
         dd:c0:1b:74:ef:b0:36:43:aa:a5:99:28:e2:62:a8:87:be:4f:
         e6:b3:ae:d5:2c:5e:b9:dd:9c:b0:b9:f7:04:01:97:5b:72:79:
         4e:5d:b4:6c:0c:3a:02:61:d6:6b:c7:99:ca:c1:8e:3e:90:58:
         13:85:34:81:84:5d:dc:95:e6:65:ae:bf:3e:d7:a5:c1:a8:1a:
         2d:02:c8:c3:8a:d7:05:6f:7e:75:f1:06:fb:b1:dd:cf:0b:53:
         30:c6:ae:81:9f:1b:bd:21:74:79:5f:72:58:bc:96:f4:07:36:
         d1:53:6a:dc:76:26:10:0f:ef:6c:92:e5:22:5a:45:81:c4:48:
         c6:c4:0b:e3:70:cb:10:de:a5:56:a5:5b:00:1d:33:ae:96:74:
         ab:89:64:7c:25:12:a6:f4:77:7e:9e:95:b8:35:e6:16:aa:4c:
         4b:f4:04:de:db:49:24:28:15:9c:42:a8:10:75:90:fd:ff:11:
         88:d5:e0:93:84:13:e9:5d:38:2b:11:4f:4c:4b:66:fd:84:88:
         77:d7:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:41 2026 by rpki-client