This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
File:                     9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json)
Hash identifier:          XL28yJUO73CJkt7qcG37+O3e/p8KiH5CEO0LjwTuCaA=
Subject key identifier:   57:A1:0D:C0:CA:8A:F8:F6:B3:F7:0C:EB:0E:0B:D1:86:F0:4B:E1:85
Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
Certificate issuer:       /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Certificate serial:       019C40FD374F6EFFA627026F348239251328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
Manifest number:          014A
Signing time:             Mon 09 Feb 2026 06:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:02 +0000
Files and hashes:         1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: gL09t4ACBfykL9TIOb1uXUSbWWKakNV/Ze5P2bMDnJ8=)
                          2: tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa (hash: Ko/+YeSqgQQmx5PHs3jC/GfjdrV44JmmirXuegDNGWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:37:4f:6e:ff:a6:27:02:6f:34:82:39:25:13:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
        Validity
            Not Before: Feb  9 06:01:02 2026 GMT
            Not After : Feb 10 06:01:02 2026 GMT
        Subject: CN=57a10dc0ca8af8f6b3f70ceb0e0bd186f04be185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:f2:ea:c8:dd:f7:1b:49:11:0b:81:94:8a:
                    26:54:32:23:59:d0:0c:1e:0b:41:74:e4:27:bb:f5:
                    2d:89:45:09:ad:75:9a:71:7e:c2:32:7d:c6:c0:5d:
                    8c:22:98:f3:05:43:df:0f:4c:8d:b3:8f:96:45:6e:
                    66:8e:67:64:b0:0a:64:af:d4:9a:4d:1f:91:0c:b1:
                    94:f5:fd:2e:00:69:1d:fa:fe:b2:8d:ef:14:6c:51:
                    f1:f7:57:9e:70:92:a5:32:9e:16:6e:b7:09:8d:e2:
                    b6:86:55:9f:92:cd:6d:9f:2f:e8:96:b2:53:bb:23:
                    cf:df:fe:0c:61:6e:73:34:92:04:96:a7:34:12:97:
                    b8:07:72:a9:5e:95:26:02:8f:c9:96:d6:86:e8:bd:
                    bf:ce:54:2e:38:6c:c4:55:9a:b1:85:fe:46:28:d3:
                    c2:49:f4:35:75:1c:d4:67:f7:44:64:27:d3:d0:1c:
                    d3:c1:5c:9e:73:43:4b:60:8d:67:b0:58:d9:c6:b2:
                    38:4a:87:cf:11:8b:7f:8e:bf:68:0d:c0:e9:b4:ed:
                    10:f5:8a:72:ad:8d:84:37:78:2c:13:f9:72:94:8b:
                    5c:92:8b:f6:a8:90:5d:00:e8:8b:3b:0d:77:b1:2a:
                    27:15:46:86:a8:28:32:eb:a2:50:35:3a:c7:d3:10:
                    79:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A1:0D:C0:CA:8A:F8:F6:B3:F7:0C:EB:0E:0B:D1:86:F0:4B:E1:85
            X509v3 Authority Key Identifier:
                keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:4d:9f:fc:9b:b8:4d:ab:9a:00:4b:5d:b0:91:2d:ce:85:cc:
         be:70:77:03:cc:4f:60:8a:54:43:13:e2:f2:d2:2f:53:89:05:
         72:43:43:54:b5:f8:7f:64:51:60:20:69:d9:e1:6d:bc:8b:80:
         2a:f8:15:eb:c3:dc:b4:33:55:0e:4a:b5:d6:42:3e:c2:35:f5:
         f3:a1:b2:a4:c5:73:05:37:88:42:5c:5a:0e:1b:b1:c0:4c:3e:
         7d:95:5e:bd:6b:ce:a8:5d:48:14:04:ef:55:ad:5d:1f:05:20:
         33:e3:48:03:45:e9:92:61:e1:9d:49:76:72:04:1c:2e:b5:8f:
         ed:0e:45:6b:e4:44:31:29:7f:5f:86:4f:70:9c:81:83:bb:68:
         eb:8e:62:70:18:18:c7:ab:e0:f8:dd:0d:5e:d7:75:e1:b0:75:
         33:ec:70:9b:60:bd:16:8d:b9:be:fd:22:e6:d7:92:91:87:ec:
         70:b9:8c:e0:ac:9f:b9:a0:3e:a2:93:c9:53:0a:f8:c6:bf:77:
         ac:6c:b7:00:e9:89:2d:6d:50:c4:08:22:3c:03:61:a2:ec:35:
         2d:11:f7:de:d2:2c:12:42:4d:6a:3e:91:1e:a0:4c:60:d5:1a:
         00:f3:f2:27:a2:db:c2:d7:8c:43:f5:66:1c:ab:be:95:1d:93:
         cc:f2:23:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:53 2026 by rpki-client