This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
File:                     rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft (raw, json)
Hash identifier:          bAFbvPSUB93Q22h+jERDxOiBTlb0n9iwYCe5YucYuA4=
Subject key identifier:   9F:E8:63:68:2A:1A:5E:51:32:C4:8D:B0:71:8C:25:23:1D:7B:EE:05
Authority key identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
Certificate issuer:       /CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Certificate serial:       019C427D0904721A54BCB2C8F3E83581092F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
Manifest number:          01B9
Signing time:             Mon 09 Feb 2026 13:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:16 +0000
Files and hashes:         1: 69NtXxeSLWDXdtXT_AfelypQXB8.roa (hash: 9gKtg7KDzyNzZzLU7I/BaczkZvgxDpjrp3J+QzLnL1Q=)
                          2: PQRrJSJtnnl2GnrWxpaWr3S7PZ8.roa (hash: /lazpWv9V1FL2+iyQutogNw6pk8iaaxkITCs/3RcC10=)
                          3: rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl (hash: 51RB3WFAtiFPcKvAEgZAhMDHSUMhZlhA6RbegJ6UOa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:09:04:72:1a:54:bc:b2:c8:f3:e8:35:81:09:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
        Validity
            Not Before: Feb  9 13:00:16 2026 GMT
            Not After : Feb 10 13:00:16 2026 GMT
        Subject: CN=9fe863682a1a5e5132c48db0718c25231d7bee05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:b3:9e:6f:78:87:c8:47:55:ee:51:f9:78:
                    21:01:de:c6:e9:8b:b5:0c:19:bf:58:97:fc:47:c7:
                    6d:2a:de:cf:81:9f:8e:b0:67:2a:5f:e8:98:08:64:
                    61:f8:c7:99:c3:f2:e4:6d:dc:d2:4f:dc:8c:d6:f7:
                    42:fd:b3:ca:90:b3:9e:cd:4d:87:ae:94:c9:50:34:
                    49:ef:ef:d7:a2:23:b4:67:f5:ed:65:52:36:9f:64:
                    4a:b0:ca:23:46:00:25:30:61:a9:50:5a:0b:49:79:
                    74:8d:6f:89:ba:9a:50:0a:d6:22:2d:99:81:fa:d5:
                    ab:82:4e:9b:4f:5f:1b:cc:87:08:53:ad:66:34:fe:
                    b9:81:26:41:8b:62:14:bc:67:aa:c2:ec:8d:f0:5c:
                    a3:f2:de:48:7f:62:f3:8c:67:bc:75:a0:cc:35:fb:
                    ae:d0:e9:96:bd:47:5d:67:d3:07:66:4c:40:89:5f:
                    1c:5a:91:80:04:8b:ff:2b:d8:ee:0c:ba:16:5d:1a:
                    e9:c5:ab:62:a9:a2:cc:89:b0:bb:f5:bb:d7:7c:21:
                    91:9f:df:e8:1e:08:96:96:15:3f:75:36:b2:0b:d5:
                    82:b5:b3:c7:6f:79:09:b0:56:48:81:02:f5:46:59:
                    f5:d0:95:f5:5b:2d:9c:9b:95:7f:6f:7b:be:ae:56:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E8:63:68:2A:1A:5E:51:32:C4:8D:B0:71:8C:25:23:1D:7B:EE:05
            X509v3 Authority Key Identifier:
                keyid:AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:26:f5:59:92:65:fa:ec:e3:41:8e:12:c5:c6:38:da:c1:a8:
         98:7e:35:e5:e7:24:9b:25:22:5b:1f:e6:60:18:37:52:84:03:
         b1:b8:55:c1:13:84:a0:ff:c6:3c:3a:7a:d3:3e:9e:1a:2c:1a:
         50:44:cc:3c:15:a5:8e:d7:f9:cb:7d:10:9c:c8:ec:c3:d8:aa:
         2c:b9:36:2e:38:0e:ec:26:5e:4d:4a:cb:7f:86:81:8f:f8:a1:
         e8:88:69:50:bb:70:33:f8:62:36:40:c7:d2:58:81:c0:47:f1:
         db:e7:e2:37:71:b8:d3:ff:fd:3b:c3:d9:a4:80:8f:78:eb:5b:
         53:bd:18:90:27:e7:12:21:e9:64:bf:bd:ca:a6:fb:e9:ba:42:
         55:5e:f0:b2:32:fe:5a:b0:d2:b1:75:98:8e:26:96:db:9d:cf:
         f2:91:5c:d2:47:1a:34:7d:ef:81:3f:03:30:19:c1:88:45:45:
         38:69:c2:82:f6:79:7f:5c:f7:f0:af:d5:3e:b4:fc:86:a1:13:
         8d:99:7d:52:2f:ba:28:aa:01:ca:90:d9:71:78:34:41:f7:96:
         33:70:27:16:4a:47:85:43:31:2c:fa:8a:7d:74:96:ca:f5:98:
         f3:85:b4:d5:5e:ee:d4:05:aa:a6:2e:4b:2c:91:11:7a:d8:0f:
         64:89:2f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:40 2026 by rpki-client