This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
File:                     09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json)
Hash identifier:          dVmgwZWw2m9rTon9IRKn9R1Zd8nGxHQ1y7IVsq+IOs8=
Subject key identifier:   3E:39:17:E1:63:75:A3:D7:96:78:6C:AF:3B:D7:2D:39:05:70:E4:38
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Certificate issuer:       /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial:       019C329D161DF2DB2CF9BFF8444B5E3A0E6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
Manifest number:          1810
Signing time:             Fri 06 Feb 2026 11:01:21 +0000
Manifest this update:     Fri 06 Feb 2026 11:01:21 +0000
Manifest next update:     Sat 07 Feb 2026 11:01:21 +0000
Files and hashes:         1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: Nx9whLCSspW8zW2EsJkxXlH5w/LdvRDZpTmZ0XS4ZxU=)
                          2: 8cM6v3_NRAZ3FP_fGe0mwmajY0k.roa (hash: UZQldaFo6xwnQkumeQ30d5+3aDGt7jMCik6EMuRJupg=)
                          3: AA4leRD0fxCP27pMiyTWgt1l_rg.roa (hash: 7SvYjkQmEnHNW0Fizpa0BEm4+FNoAcLpGmBVskPF0pY=)
                          4: AnJCTd7AgRSldDmx71BvWIQlsjc.roa (hash: VFBhkSbr4RUTAOsdzP+CuaTF7y4EenVQsmWrwQQVwpM=)
                          5: D9vysDJ6akM7Z66wywlmqWF3jxM.roa (hash: +6sSHR1vJhbnSV1+bNKy86Yi96WvoRkEvwudcBXDAQg=)
                          6: ES-7aSo6ovYXFf1ggrOgufF4HXU.roa (hash: oBAEPOe3qVf8emRhcuSX1FU4S9ycxaYKQRzrtaIuUZQ=)
                          7: dBEozjZ87taP7CwFVSXV3w6pkxQ.roa (hash: Q0IadO2WrRqgDE01zeYb4r27Fa+c+ppGgdLscaUKNKk=)
                          8: kLGlFczsrbvI1LLNYABL3V31uw4.roa (hash: PyJOpPlpidMPg9tlr0wrxczB6f3WILsayIOfBgsOza4=)
                          9: lIxr1Y2g6tW4Go6HwrrCY4g1GhU.roa (hash: qocUAMn7M/1zyYPDlsc7BcT51RuGObx2kW5wM3NnVyE=)
                          10: rDXd_OZlN4Uiv52rfRn8xHDUy80.roa (hash: 91Ja2DiUDudi8VvOpGDDJuXajBkTzaFVadsjPhZfAy8=)
                          11: xVvAeAbjAnywjqQvLFjnqGabFzo.roa (hash: MHe3EjYa15PyEjrwN5cSdo1Ogd8ywELYCfO8/S46e2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Feb 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:32:9d:16:1d:f2:db:2c:f9:bf:f8:44:4b:5e:3a:0e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
        Validity
            Not Before: Feb  6 11:01:21 2026 GMT
            Not After : Feb  7 11:01:21 2026 GMT
        Subject: CN=3e3917e16375a3d796786caf3bd72d390570e438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:93:18:77:87:3b:88:59:19:d0:dd:43:dc:33:
                    b2:03:ca:aa:d3:0a:5a:b4:b0:87:d7:5b:ea:56:96:
                    1c:5d:3d:a7:1a:56:01:a9:5f:f1:0a:4a:8b:64:c9:
                    68:c9:3b:32:90:3d:1b:fa:e5:9d:93:77:25:c6:3b:
                    fe:3a:77:1b:b0:8d:9d:3f:4c:f9:bb:29:23:32:4c:
                    49:bb:2f:b8:59:b9:c2:9a:ef:dd:78:d3:bb:db:74:
                    f8:7e:e8:71:74:31:48:76:ae:87:53:a5:8b:6c:f5:
                    a5:c5:a8:18:b6:89:1b:9f:e8:03:3a:c3:c2:ad:9f:
                    e8:98:e5:a5:69:57:b4:9c:32:03:fd:9e:7b:23:68:
                    2f:d1:b4:23:69:24:82:4d:f3:64:ac:dc:76:e8:f5:
                    6e:f9:84:f7:37:c0:15:34:c5:ba:ea:7c:08:9b:c1:
                    8d:43:33:55:d7:a2:c2:ef:73:52:17:82:99:08:f4:
                    87:c0:ca:56:5c:ed:c8:5d:cc:01:00:a4:2f:70:75:
                    18:3a:23:35:64:37:8d:a1:09:a3:f3:56:08:e5:1f:
                    84:b9:81:4b:1d:c4:b5:5b:01:d8:f0:00:f3:63:68:
                    d2:b5:34:2c:ba:7f:26:61:4c:88:9a:53:8a:0e:f4:
                    b4:6d:70:c1:e7:e0:ab:cd:6a:5c:67:da:a4:0a:bc:
                    d5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:39:17:E1:63:75:A3:D7:96:78:6C:AF:3B:D7:2D:39:05:70:E4:38
            X509v3 Authority Key Identifier:
                keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a8:68:92:f6:3f:0c:c1:c1:17:a3:f3:52:6d:c8:3c:29:a4:
         88:13:b8:6f:39:4a:6c:ca:0b:a1:28:1f:d4:6d:eb:71:bc:00:
         c7:b1:17:8a:0f:74:43:62:65:2f:6d:5a:a8:ed:0f:67:ad:7e:
         fd:6a:68:c7:dd:e7:fe:df:d2:cf:7b:e9:ce:d1:90:2f:fb:08:
         df:97:ed:d0:5b:77:1c:e1:56:99:a1:8d:e7:1f:ee:b5:de:69:
         4f:a8:78:cf:fc:14:43:e7:d8:5e:e3:55:e1:27:bc:11:5c:d6:
         5e:b7:5d:34:9e:de:ee:74:0a:ad:1b:66:d4:db:8c:c3:48:1a:
         2d:f2:00:2d:34:34:35:5d:b1:da:ae:eb:46:0f:9c:fe:e6:43:
         41:eb:38:86:c1:bf:3a:b3:5f:d2:93:17:ff:dc:fb:d3:e1:da:
         7a:c9:1b:a8:c7:83:5e:bc:61:8e:8b:9c:91:8f:c7:a7:a2:12:
         d2:da:92:28:a7:aa:41:32:f4:90:27:32:6e:04:05:3a:e4:3f:
         3d:bd:c3:ed:f8:91:ef:48:82:9d:08:19:24:7e:3b:9c:df:85:
         87:de:8a:5d:00:49:fe:13:4c:34:19:a7:53:99:8f:6d:e6:86:
         40:ed:41:66:25:2e:4a:8a:9a:74:be:25:a5:eb:ef:5f:5e:61:
         ec:d5:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 18:42:44 2026 by rpki-client