This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File:                     g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier:          bMk6qud5dAVbF45ZUenw2mJTZxUZ9M5/STJCgEbEufQ=
Subject key identifier:   B0:59:63:C3:8C:37:E1:0C:82:70:AF:FD:4E:29:3D:2D:FB:B7:7F:FB
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer:       /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial:       019C42466FDFAB15A13E0309AF6F91913425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number:          0CFD
Signing time:             Mon 09 Feb 2026 12:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:38 +0000
Files and hashes:         1: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: +/Ih1zVI9FVQRKfiY6VMLF24SVpzfxa+VYo41XV/g10=)
                          2: m2ZF-74RUnpYCSRQzi58JGlu94U.roa (hash: rCyhTyXzRp0exhx6DF5SAa1YSYaN0bDG8IRLr2ntpnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:6f:df:ab:15:a1:3e:03:09:af:6f:91:91:34:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
        Validity
            Not Before: Feb  9 12:00:38 2026 GMT
            Not After : Feb 10 12:00:38 2026 GMT
        Subject: CN=b05963c38c37e10c8270affd4e293d2dfbb77ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:25:59:5e:b3:88:05:d7:9a:f8:ed:9d:70:b1:
                    21:73:13:b5:a4:fa:2d:c3:a1:0e:4f:e3:37:bd:b4:
                    d7:19:f6:aa:20:63:5f:b3:31:85:01:95:bc:69:50:
                    a5:e8:56:40:b2:75:da:d9:72:7d:03:81:84:13:aa:
                    f7:fd:fc:25:89:61:0c:e4:83:05:bf:a1:fa:2d:75:
                    a5:f8:35:5a:b0:ec:9f:fa:b8:96:63:a6:5d:31:7e:
                    e9:f8:55:07:40:f0:0c:eb:d1:e6:79:aa:e0:a5:9f:
                    4f:4f:de:78:5a:e4:a4:e3:76:ee:b7:22:f3:da:74:
                    6b:d4:44:7f:b1:d1:9a:31:e6:94:ad:a5:71:4a:54:
                    2d:ea:b0:63:6a:5f:78:cc:eb:be:3e:31:2c:70:74:
                    d0:48:48:34:7b:16:75:04:36:8c:59:ec:cf:e9:3a:
                    95:4f:b6:ee:56:06:c1:ce:7d:8a:68:6d:08:ee:fb:
                    a3:b0:e1:aa:48:e2:96:52:d5:2f:03:15:a8:0a:bf:
                    71:bd:d0:f6:ce:19:88:67:b8:51:d2:3a:15:7b:bc:
                    a7:8d:97:89:35:70:cf:4a:ff:56:58:3c:8a:3d:0c:
                    c2:e9:0c:05:1d:11:f0:d2:a7:54:f4:09:82:03:dc:
                    e8:10:dc:31:12:95:65:a3:e8:6a:5d:d3:97:90:bb:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:59:63:C3:8C:37:E1:0C:82:70:AF:FD:4E:29:3D:2D:FB:B7:7F:FB
            X509v3 Authority Key Identifier:
                keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ba:2d:b4:90:dc:fa:3e:77:94:bc:32:e4:d0:37:67:ca:5f:
         58:8f:67:04:79:8f:de:36:19:a5:fa:4b:e4:43:51:9d:6c:16:
         e4:45:d7:d5:ad:73:30:5c:67:80:a1:58:79:c7:6a:9d:a8:0c:
         68:a6:59:2e:8f:de:c7:2f:4a:60:13:f6:3b:c8:fe:1b:1a:f7:
         a7:03:08:76:1a:fd:16:2b:d0:7f:1e:50:29:bc:8f:9d:af:6b:
         44:82:77:36:e7:69:cc:cd:eb:fe:91:bb:e5:93:cd:57:3a:0a:
         c5:93:df:f9:d0:a7:64:dd:ea:57:5a:f5:19:64:5a:1d:c5:36:
         91:46:96:23:99:23:c7:fd:92:38:93:50:b4:51:d1:c0:9b:dd:
         1a:04:68:50:81:64:12:81:cd:c1:60:50:2e:06:3c:46:18:bc:
         f1:34:17:82:da:9c:68:d1:83:35:a8:4c:e8:e1:0b:96:67:f6:
         1e:2a:85:d3:b8:64:cf:90:c4:86:3f:68:0a:d1:b2:96:4e:71:
         e4:72:0d:3d:10:97:72:07:5a:91:34:76:b9:90:c2:08:ac:c5:
         3c:4f:e3:a7:a5:77:8e:c5:9c:ba:80:74:49:c6:65:33:f7:b9:
         76:35:92:91:6f:b2:9c:0c:ee:40:a3:8c:59:ff:6f:0a:aa:21:
         87:eb:5c:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRm/fqxWhPgMJr2+RkTQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZDM2ZWNiYWY1NWU0NjRlMDBiMzk4N2RhNTI2NGI2YWYy
ZGNmODgwHhcNMjYwMjA5MTIwMDM4WhcNMjYwMjEwMTIwMDM4WjAzMTEwLwYDVQQD
EyhiMDU5NjNjMzhjMzdlMTBjODI3MGFmZmQ0ZTI5M2QyZGZiYjc3ZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CVZXrOIBdea+O2dcLEhcxO1pPot
w6EOT+M3vbTXGfaqIGNfszGFAZW8aVCl6FZAsnXa2XJ9A4GEE6r3/fwliWEM5IMF
v6H6LXWl+DVasOyf+riWY6ZdMX7p+FUHQPAM69HmeargpZ9PT954WuSk43butyLz
2nRr1ER/sdGaMeaUraVxSlQt6rBjal94zOu+PjEscHTQSEg0exZ1BDaMWezP6TqV
T7buVgbBzn2KaG0I7vujsOGqSOKWUtUvAxWoCr9xvdD2zhmIZ7hR0joVe7ynjZeJ
NXDPSv9WWDyKPQzC6QwFHRHw0qdU9AmCA9zoENwxEpVlo+hqXdOXkLtFGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBZY8OMN+EMgnCv/U4pPS37t3/7MB8GA1UdIwQY
MBaAFIPTbsuvVeRk4As5h9pSZLavLc+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAt
OTY1MzFkMTYzMzFiLzEvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAtOTY1MzFkMTYzMzFi
LzEvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAProttJDc
+j53lLwy5NA3Z8pfWI9nBHmP3jYZpfpL5ENRnWwW5EXX1a1zMFxngKFYecdqnagM
aKZZLo/exy9KYBP2O8j+Gxr3pwMIdhr9FivQfx5QKbyPna9rRIJ3NudpzM3r/pG7
5ZPNVzoKxZPf+dCnZN3qV1r1GWRaHcU2kUaWI5kjx/2SOJNQtFHRwJvdGgRoUIFk
EoHNwWBQLgY8Rhi88TQXgtqcaNGDNahM6OELlmf2HiqF07hkz5DEhj9oCtGylk5x
5HINPRCXcgdakTR2uZDCCKzFPE/jp6V3jsWcuoB0ScZlM/e5djWSkW+ynAzuQKOM
Wf9vCqohh+tcDg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:37 2026 by rpki-client