This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File:                     x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier:          2PlvOKtUzJvMxOUGtVqAtSD4AWaf654Euph4OEywjOc=
Subject key identifier:   EB:6B:92:F1:D8:C8:B4:63:B5:80:C8:B1:69:E6:E8:6D:F2:6A:AB:1A
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer:       /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial:       019C43FE7669D8133D3C2554A337AC30FA8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 20:01:15 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:15 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:15 +0000
Files and hashes:         1: iLa7f2S3_d-gftGTw6gty0-Uiak.roa (hash: rM0PahqNF2zfpsbMJjY2LhMIvSX7eg/hz/KEUHOLLAA=)
                          2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: Lby6QtLsYilrZ1Mq2j/M3rzZoapHOKezFiPBc71+hXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:76:69:d8:13:3d:3c:25:54:a3:37:ac:30:fa:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
        Validity
            Not Before: Feb  9 20:01:15 2026 GMT
            Not After : Feb 10 20:01:15 2026 GMT
        Subject: CN=eb6b92f1d8c8b463b580c8b169e6e86df26aab1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:a7:49:48:64:da:29:71:ab:c6:36:06:3c:
                    a4:9e:c6:e1:c1:38:74:bb:cf:99:ab:cc:22:65:63:
                    56:e8:63:e5:b8:21:dd:4a:b7:e9:e7:06:b0:76:87:
                    74:f3:8b:b3:67:00:17:f9:fd:e6:78:fb:8a:6b:2c:
                    93:4e:13:52:16:9f:77:50:dc:60:7d:2c:e7:bd:b2:
                    ae:24:7c:a3:cf:52:6a:17:98:ab:61:72:c1:46:12:
                    fe:1f:8e:84:93:b1:64:1d:64:7a:90:25:ba:05:a3:
                    d2:7b:dd:90:ff:c6:32:a2:42:fa:59:7e:5e:93:60:
                    36:dd:28:83:6c:5a:0b:e5:79:52:56:01:b1:27:5c:
                    00:67:9a:04:20:7a:2f:3f:c8:60:ed:ce:88:8c:16:
                    76:10:2a:55:d6:7a:24:26:82:8c:50:77:b0:48:dc:
                    59:86:cb:b2:da:d7:20:2f:d1:2d:f7:3e:2d:f9:0a:
                    a6:31:16:c6:7f:8c:23:5a:91:f3:9a:1d:74:e4:52:
                    50:95:96:9c:8b:ff:ad:18:f7:33:3b:5f:1f:d2:7f:
                    18:09:3c:c0:84:d2:eb:30:bb:fb:00:b4:e3:61:69:
                    4a:63:de:79:44:31:0f:65:85:a8:07:a7:76:e2:88:
                    c0:53:36:52:b2:54:99:02:10:d5:ae:29:98:6d:78:
                    74:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6B:92:F1:D8:C8:B4:63:B5:80:C8:B1:69:E6:E8:6D:F2:6A:AB:1A
            X509v3 Authority Key Identifier:
                keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:83:66:e1:a1:01:91:b9:f3:59:bc:69:e4:bb:69:99:ed:c1:
         24:2b:e9:47:32:7a:04:57:5b:81:a1:c4:ec:cd:8f:e7:ee:9c:
         4f:42:de:83:31:13:68:30:b3:99:ef:2b:2b:42:53:d7:23:7f:
         27:b2:d5:df:ad:22:0f:ab:db:cd:f1:58:0e:31:68:22:4b:d4:
         00:a1:7e:ab:33:cb:89:62:ab:50:cf:ce:9f:61:ca:bc:b2:ed:
         65:65:98:51:dc:b5:f2:59:71:2c:8e:39:b9:79:54:ab:15:fb:
         22:f1:0b:05:e8:27:03:31:2a:45:2b:26:db:b4:90:f7:b5:5e:
         31:11:dd:72:ee:03:69:0b:09:b1:db:59:d3:d6:c0:30:a9:bb:
         cd:79:8f:fb:ce:13:e5:73:f6:2b:b8:a4:55:ee:77:db:47:53:
         6a:d1:ba:0c:7e:95:6a:dc:29:b1:77:fb:db:35:70:ba:6a:b3:
         de:1a:49:f3:d1:0b:41:6a:8b:d7:da:8a:22:e8:4f:6d:a6:27:
         1b:bf:d8:d3:1e:98:cb:76:2c:fd:a9:68:d7:02:0b:bb:6d:be:
         be:0e:68:5f:fe:e4:2f:e5:d8:a7:b7:86:dc:2a:65:29:15:0f:
         30:33:4c:d4:13:6e:87:6e:5b:ad:0c:2e:b1:ee:48:59:50:fb:
         73:3f:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:46 2026 by rpki-client