This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File:                     9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier:          diehCcKO79KzoInxAQeXsmPp4wWtGMUUV3zKu03Zh8A=
Subject key identifier:   A5:66:02:EF:A9:65:F0:27:3E:B4:AC:61:00:52:5C:08:26:48:1A:CA
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer:       /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial:       019BF619B7F1A30F5A3286858DC5F26BE779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number:          0C63
Signing time:             Sun 25 Jan 2026 17:00:39 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:39 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:39 +0000
Files and hashes:         1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: n1A4OmtTsAu/DX2f1rqJDD7v/XuXOfLOZRk74WmLEjU=)
                          2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
                          3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:b7:f1:a3:0f:5a:32:86:85:8d:c5:f2:6b:e7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
        Validity
            Not Before: Jan 25 17:00:39 2026 GMT
            Not After : Jan 26 17:00:39 2026 GMT
        Subject: CN=a56602efa965f0273eb4ac6100525c0826481aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:d3:a2:c4:1e:3f:92:03:7b:98:c3:fd:d0:
                    a1:d1:96:dc:3f:73:e9:f7:53:9d:60:a3:3c:d8:6c:
                    92:cf:8e:b7:2c:66:5a:d6:71:3a:7e:2e:e9:f8:5f:
                    22:47:6f:67:39:ee:c0:93:cc:6c:42:7f:b5:34:b7:
                    e1:4c:5d:be:a4:d7:47:c4:ab:e4:c1:93:e2:1e:04:
                    8d:8c:a1:25:c7:aa:85:96:e1:22:3d:c7:4a:f1:c4:
                    c2:2e:0f:87:22:d4:33:e9:2b:f2:c9:07:a2:38:ef:
                    4e:44:ec:16:a6:82:96:d8:e9:d1:95:9b:66:af:9b:
                    35:b3:91:b1:b4:bd:1b:c7:e4:5e:ee:29:ce:09:b2:
                    f4:2f:18:ec:62:58:17:67:ba:a7:48:06:27:69:e3:
                    1b:ec:e6:08:b4:5e:aa:7e:b9:f5:a7:18:9a:5a:3b:
                    fd:a2:16:a2:28:ac:e3:70:c5:fd:eb:a4:eb:ab:32:
                    c1:3c:96:24:af:56:ae:e7:38:c7:0d:21:f4:a5:f4:
                    65:2b:15:f1:4f:28:e8:6a:22:04:59:6e:bc:83:ee:
                    ec:ed:d7:20:2c:f5:51:5b:d8:f7:fc:44:93:fe:10:
                    53:c8:e1:1f:a5:86:1e:7e:af:9b:1c:93:48:fa:b0:
                    59:92:39:ad:3f:ea:2b:6c:9b:76:a5:8c:d7:d4:8d:
                    8d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:66:02:EF:A9:65:F0:27:3E:B4:AC:61:00:52:5C:08:26:48:1A:CA
            X509v3 Authority Key Identifier:
                keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:13:1e:75:89:5a:68:5f:36:55:9e:3e:d6:b2:26:6d:cf:95:
         92:ad:98:78:dd:d6:e2:00:6d:72:55:3d:75:f7:f8:f5:49:57:
         c0:79:ad:00:2f:c5:70:72:e9:94:36:c5:46:b8:cc:59:cb:9d:
         2e:d1:dd:60:06:64:bb:22:73:9a:a8:a7:ee:bb:81:3e:80:2d:
         0f:d3:ec:62:ac:6b:d3:e3:66:21:38:4b:cd:1c:de:0d:39:0c:
         6a:ed:87:b5:b9:a4:34:78:a0:da:6d:80:90:e9:0e:53:18:1f:
         5d:45:cb:db:4e:1a:c6:73:ef:82:68:1f:fc:71:db:a6:b8:1f:
         19:10:2e:15:c3:c8:49:41:a2:8f:30:ac:b0:12:37:4f:47:17:
         f3:81:8d:af:0f:93:1c:16:31:a2:d0:f5:eb:76:a4:88:05:a5:
         88:73:c5:89:23:08:5a:37:dd:6b:ff:fc:ac:4a:dd:a9:2b:aa:
         ed:7d:c3:de:82:22:7f:e3:a1:df:9e:6c:04:36:ff:ff:b0:58:
         f7:64:3a:4c:60:0f:af:21:83:9e:ce:dd:25:10:ff:9d:b4:2c:
         73:0e:1e:23:46:84:8f:f8:70:d6:b7:7f:52:86:54:c8:43:07:
         df:95:20:7a:c7:83:ad:f3:97:fa:ce:e3:31:9e:56:b4:81:45:
         f9:0e:b3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:22:55 2026 by rpki-client