This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File:                     nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier:          H2dF18AsMdPDwBjzzf8rUYXiIm5Hwzzv8hP+S4SRGYI=
Subject key identifier:   BE:6A:CD:66:78:B4:D5:64:0A:89:2D:9C:8E:19:A6:7A:57:8D:B9:07
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer:       /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial:       019C427E10CD00B175B39F56ACC118B39027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number:          1591
Signing time:             Mon 09 Feb 2026 13:01:23 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:23 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:23 +0000
Files and hashes:         1: 7CJ50Z4jSScacH7m-JbxhQfRAT8.roa (hash: DeZQIphwpcBhptFjXao8KHzyokPEFqwFhAKphJ/giEM=)
                          2: JOjsmVlflGoiSPZ3EdXzNHqwPxQ.roa (hash: x1TQNb6OLI+ULwCdM0E8bCboywBE0qslaF9HtDCN484=)
                          3: YWzwe319rfYXpYuP3IvXqCx8tZo.roa (hash: 1w3/nvkpGpApD4pL14BdnheXsuPZSDSH4dgaXoYHNHo=)
                          4: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: mCXjk0paK5BBgBSbTG8aOflLiJv8xjVJXdUU4BhBSSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:10:cd:00:b1:75:b3:9f:56:ac:c1:18:b3:90:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
        Validity
            Not Before: Feb  9 13:01:23 2026 GMT
            Not After : Feb 10 13:01:23 2026 GMT
        Subject: CN=be6acd6678b4d5640a892d9c8e19a67a578db907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:09:d2:45:96:25:e1:5f:2f:6d:fb:49:fc:0e:
                    ca:79:64:f7:81:09:69:86:ba:a9:4b:80:45:6a:e2:
                    a9:1c:4a:3a:11:bb:d1:0f:4b:81:15:ab:f0:19:cf:
                    49:35:e5:62:62:41:ef:97:ea:ba:34:de:52:10:bc:
                    c2:5c:e8:fc:30:4e:16:b5:15:ce:3b:5e:ed:bb:d1:
                    59:87:2d:21:73:8a:99:6a:29:1c:c9:5a:34:70:18:
                    54:7d:e9:91:8a:0f:00:c4:92:64:14:da:8c:c0:16:
                    e8:c5:55:fd:99:78:52:1c:5d:bb:86:1e:9b:b2:7b:
                    d2:92:34:ce:42:9d:d4:82:c6:8d:21:03:ba:f4:e4:
                    94:6a:74:0a:41:a0:4e:01:d7:a9:6d:7b:42:f4:42:
                    98:e9:ba:cf:1a:4b:d5:08:cf:e8:d2:6f:91:5f:d1:
                    09:8a:4c:e3:41:c5:ba:b1:e6:12:8d:2d:4e:13:48:
                    58:c0:4f:d3:0b:12:7b:d8:71:3b:b8:40:7c:b5:e9:
                    83:88:15:71:be:49:e5:6b:69:80:e8:a6:77:3f:fc:
                    fd:1e:d7:80:7c:ad:c1:a5:28:76:54:ac:57:06:7b:
                    3c:02:b7:03:3a:a0:0d:2c:c4:87:c2:95:aa:68:3c:
                    22:5d:11:bf:7b:ea:ef:75:6b:01:31:41:09:78:f9:
                    68:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6A:CD:66:78:B4:D5:64:0A:89:2D:9C:8E:19:A6:7A:57:8D:B9:07
            X509v3 Authority Key Identifier:
                keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:38:41:f4:25:b2:7a:49:be:ef:9f:b6:52:79:52:a6:bb:da:
         6c:de:67:09:66:64:e2:a1:fc:fb:69:c9:ca:00:20:8e:30:cb:
         cd:f4:47:2f:68:a6:57:92:d3:31:cd:41:6a:a2:83:ac:b0:45:
         6b:49:af:40:fd:ff:ed:fd:5f:99:d3:ef:9e:a3:42:e5:d2:d9:
         0b:68:4f:75:2d:0b:1b:f4:e6:aa:52:c4:eb:50:62:69:86:5a:
         20:29:36:f1:75:7f:ea:cd:ec:af:32:e0:59:14:b8:f1:6f:f0:
         d0:61:7c:27:ba:01:c5:00:cb:be:d7:58:74:a9:83:69:cb:fe:
         7f:44:a4:27:46:66:c5:a7:d9:42:e1:a9:ce:bd:d9:cb:35:94:
         41:57:ee:c4:95:42:de:39:b6:f7:51:ec:b7:d0:f0:7d:ab:ee:
         b8:f8:0a:bd:ee:9e:e1:d5:56:97:8c:30:8d:fe:86:83:ce:27:
         f5:0a:46:84:dd:0f:8d:46:61:6c:c8:05:3e:bd:c0:b1:5e:48:
         3d:ac:ff:a6:ea:bb:f5:72:6d:16:e0:2c:57:e3:55:b2:90:61:
         d1:6a:85:81:29:9d:6b:1b:7b:e5:ee:dc:ed:77:86:df:76:20:
         b1:00:1c:ef:01:31:30:0f:6d:7e:e9:3e:23:65:cc:7e:33:99:
         20:65:55:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:19 2026 by rpki-client