This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File:                     nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier:          H3cx/gdA7BGZBjVdkKK0JrYRonpQV53Wd/XfENDekgI=
Subject key identifier:   04:34:88:44:FA:1A:78:96:AA:97:76:F7:69:04:3A:67:9C:35:DF:BC
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer:       /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial:       019C28F4D36E2861E05058029BCBA760ABA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number:          0267
Signing time:             Wed 04 Feb 2026 14:00:59 +0000
Manifest this update:     Wed 04 Feb 2026 14:00:59 +0000
Manifest next update:     Thu 05 Feb 2026 14:00:59 +0000
Files and hashes:         1: PaBVWTqfTN6gd6Z8D19CR2fYk7c.roa (hash: m2T9S9EKZbJSGv+M7mLflkfyJDI4Kx/hV8vptZ6M+ps=)
                          2: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: Sk7EJdEv3MXS2jXtDJBU4GXWRNbmcSFXJ/0pvCwOUTE=)
                          3: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (hash: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:28:f4:d3:6e:28:61:e0:50:58:02:9b:cb:a7:60:ab:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
        Validity
            Not Before: Feb  4 14:00:59 2026 GMT
            Not After : Feb  5 14:00:59 2026 GMT
        Subject: CN=04348844fa1a7896aa9776f769043a679c35dfbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:13:d0:51:46:40:ec:17:95:8e:ab:a3:7a:81:
                    f5:9b:c7:bd:ce:5d:4f:df:5a:68:41:55:be:98:43:
                    f0:01:5a:81:3f:0c:9c:1d:db:54:22:f4:1e:f5:a5:
                    5a:2e:d2:73:22:1d:b4:06:a6:94:9c:ee:75:30:bd:
                    a9:35:ab:a0:14:29:4c:8b:ef:c2:4d:76:25:68:f2:
                    ef:3f:94:1d:56:9a:6a:26:a6:72:81:98:6a:e7:89:
                    48:1d:ff:a1:b7:4b:dc:90:6e:f1:4a:a6:e1:d8:2d:
                    0c:70:90:99:6d:fb:fe:d2:0a:39:35:73:68:4b:88:
                    06:21:4e:ee:c5:7f:32:d3:10:01:07:57:25:b1:3e:
                    6a:4e:8e:c5:a6:39:79:87:9d:9f:64:f6:82:bf:75:
                    16:ae:8f:24:b4:83:0a:85:18:7f:db:39:7b:2b:0f:
                    c7:b3:ea:93:18:e8:3c:54:17:7d:29:74:8e:41:e5:
                    5b:55:17:1b:ff:44:82:f8:0d:e5:21:eb:78:9e:11:
                    52:89:48:5a:d2:9a:04:13:59:97:f6:e3:e0:69:eb:
                    5a:21:50:d5:a4:a3:96:6a:58:91:65:2c:c9:8a:32:
                    9a:14:7c:4a:17:1a:1e:88:fb:6d:7f:07:63:fc:7b:
                    db:50:cf:dc:c9:ac:6e:2b:e8:c0:a3:b7:3d:b8:4a:
                    e6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:34:88:44:FA:1A:78:96:AA:97:76:F7:69:04:3A:67:9C:35:DF:BC
            X509v3 Authority Key Identifier:
                keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b9:d1:ec:48:51:e5:dc:18:b7:28:03:d1:9c:17:1b:c6:5c:
         73:d5:32:64:06:2e:a0:87:39:e9:19:83:d6:5e:da:53:eb:9f:
         cb:8f:6f:f8:18:a8:f2:b6:19:06:14:1c:2c:5e:d1:14:f6:b1:
         a5:1d:ba:31:3f:9e:17:9d:9d:3c:a0:5f:f0:aa:af:b9:95:7d:
         70:6f:56:c2:30:42:33:90:33:96:b0:1a:1e:08:ec:53:98:d3:
         79:41:f1:8c:cb:ca:80:a3:6f:b9:74:d5:3f:4c:dd:2c:9b:65:
         54:0a:e0:24:94:38:aa:3b:fe:88:f2:75:04:0a:ae:e5:e8:d2:
         01:4c:e4:ae:77:f1:9b:99:0a:0e:06:f4:a2:79:3b:6a:23:f0:
         c2:71:a7:c8:5d:3e:2c:f3:05:ec:c5:85:21:f1:8f:3b:81:a9:
         a8:58:28:33:12:25:48:ef:8a:f5:dc:83:d0:8c:9f:0d:73:1c:
         17:20:29:c9:f2:f3:6c:07:f2:9b:b1:29:a4:ea:de:58:fb:f1:
         16:cf:85:c2:db:9a:c0:b5:d8:4d:90:9c:09:0b:ad:81:fc:c9:
         46:54:28:84:55:a1:50:f9:a9:8e:4a:9c:00:6b:66:ca:43:7f:
         bf:17:a1:5c:a1:77:93:a4:52:55:e4:18:af:86:eb:69:0c:d5:
         5a:d3:e1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 22:09:32 2026 by rpki-client