This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File:                     09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier:          G+lwkeczHwNYF/8m08rU+5FtBK4y7DlLGjgSIAogGT0=
Subject key identifier:   8B:74:60:5C:F3:7D:87:9D:90:8D:3A:B6:8F:91:1C:54:0C:5B:E8:0E
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer:       /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial:       019BF6BE7F997CB9419693411084824D183C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number:          08F9
Signing time:             Sun 25 Jan 2026 20:00:38 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:38 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:38 +0000
Files and hashes:         1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: g86WJEJRlP/JzsntYRz+OCkTt6yfrBkOOJ82GcjXU6E=)
                          2: 66weAc2jQR4cpqZJijFd1sf301w.roa (hash: QzlH+p0PV5zvwqJmhfFaYurkNZtY37Urkhr+A3Txvmc=)
                          3: FOIGx5-VXjOve-N7mfII03ytFD0.roa (hash: e4g2C3HACEw66dXSjAJV8WZd57r1VCKWLBncQ7FYwig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:7f:99:7c:b9:41:96:93:41:10:84:82:4d:18:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
        Validity
            Not Before: Jan 25 20:00:38 2026 GMT
            Not After : Jan 26 20:00:38 2026 GMT
        Subject: CN=8b74605cf37d879d908d3ab68f911c540c5be80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:0b:48:b2:87:39:0b:49:99:0a:b1:f0:72:
                    b1:12:c4:91:03:41:58:4f:79:fc:60:aa:00:26:9a:
                    fa:65:12:16:61:ae:9d:5f:a3:2b:cd:5c:9c:87:1f:
                    f9:6a:6e:77:9f:8e:58:d8:8f:ba:3b:83:00:3d:a8:
                    70:47:d8:07:e9:67:3e:f5:0e:08:19:69:46:8e:62:
                    d0:3c:dd:38:09:f5:94:10:74:fe:e6:6c:5a:3a:35:
                    82:8c:46:ab:39:29:93:c0:de:92:34:5e:75:de:35:
                    19:c7:8e:5f:b5:00:38:f4:71:a5:4f:fc:6c:4e:19:
                    c7:cc:a3:0c:1e:10:50:9f:b6:7e:14:f2:b4:a3:b6:
                    a3:51:5c:36:a7:30:a4:dd:66:0c:7c:d7:df:59:d2:
                    1b:83:a5:61:53:fc:28:4f:ff:b0:d9:c8:0c:44:3b:
                    54:f7:ce:8d:7d:b9:7c:42:f2:c7:97:0a:99:7d:1c:
                    85:39:05:65:eb:2f:69:0f:9a:ee:d3:b3:ed:ce:50:
                    58:c6:22:80:95:0a:ce:a0:30:f8:bf:e2:9d:c9:ac:
                    7b:5f:7c:c0:0d:de:3b:a6:48:34:99:fb:77:23:5b:
                    17:11:cd:a6:da:89:58:f9:4a:db:9b:cd:6c:f4:09:
                    d2:d6:a1:e5:88:f1:6f:65:6d:73:7e:4b:ef:50:e9:
                    9a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:74:60:5C:F3:7D:87:9D:90:8D:3A:B6:8F:91:1C:54:0C:5B:E8:0E
            X509v3 Authority Key Identifier:
                keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b4:e9:d9:3a:de:bc:d9:38:cc:56:5e:86:9b:60:e6:c8:8a:
         97:f2:d8:b5:5e:52:c2:69:f9:ea:ff:96:68:4d:4e:11:62:38:
         be:92:77:6c:db:1b:83:9e:76:f4:9c:1a:b3:08:a6:7f:24:ae:
         a0:2e:f9:99:b0:2b:72:52:07:8d:4c:24:33:f1:46:95:9d:bf:
         3a:dc:89:3e:91:3b:fb:0d:93:4b:6e:39:3a:29:42:10:fc:d6:
         48:28:09:1c:b3:e4:e2:24:8c:2a:46:2f:fb:d8:34:86:20:ef:
         4d:51:e0:92:d0:26:47:f1:7f:8c:75:88:fc:8b:1a:c5:10:ea:
         ae:31:f7:b6:fc:11:05:5d:4d:b7:59:e6:2d:46:0b:47:2b:fa:
         dd:cd:f7:71:ff:38:fa:15:ef:3a:46:dc:f7:60:a9:7c:c0:bf:
         62:59:ad:18:c3:28:c8:24:6d:b9:a2:bc:a3:c1:04:29:fb:1b:
         48:19:7a:75:02:f3:ea:b9:e3:cf:72:73:7c:c6:0f:05:82:93:
         fe:3d:a2:ab:c5:54:34:56:d2:e1:55:4f:bf:ce:9b:7c:b9:91:
         45:e8:15:c4:83:28:2d:70:79:e5:91:ae:37:18:9e:ba:a0:6d:
         44:1a:14:7e:0c:fe:00:4b:75:fd:a1:f7:99:a7:e2:59:a3:fe:
         b0:93:04:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:05 2026 by rpki-client