This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File:                     N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier:          mkiaKN/IWp28PMZVv4ksq6kk81RaCQ1wY5+J6Ldt2vY=
Subject key identifier:   DC:FE:AA:BB:67:EF:41:7B:2B:73:6F:80:4D:79:4D:DA:86:00:84:C4
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer:       /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial:       019C427D9A3679A5CB8CB25117871A97A61A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number:          07D0
Signing time:             Mon 09 Feb 2026 13:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:53 +0000
Files and hashes:         1: MwkMvskaQKovGIGmNj_lfd4XdPQ.roa (hash: gLPPmCzBA8LuL7uxWhDAFr4CxN8OOAgFXJiuqMmefYs=)
                          2: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: 42qTtyx9WkCJqIHLgE5EinonxBlf2XeDfqF/5onFlFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:9a:36:79:a5:cb:8c:b2:51:17:87:1a:97:a6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
        Validity
            Not Before: Feb  9 13:00:53 2026 GMT
            Not After : Feb 10 13:00:53 2026 GMT
        Subject: CN=dcfeaabb67ef417b2b736f804d794dda860084c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:14:c8:a3:a0:0b:e8:81:b6:2e:2e:fd:dc:d0:
                    49:62:5a:83:34:ff:d3:cc:3d:fb:ee:a7:6b:d1:b9:
                    69:5a:f6:80:e1:4b:fc:91:3e:d5:c0:4b:88:bd:f6:
                    0d:64:63:dd:69:17:d7:11:97:50:63:5a:0c:b5:2d:
                    03:ee:87:44:f6:b7:19:1c:ce:2b:f8:e2:5c:c1:28:
                    22:6b:e3:1a:7c:94:c1:07:28:ec:1d:be:9d:4a:9b:
                    dd:82:d7:06:56:6e:16:08:a1:c7:9e:bd:b0:c5:76:
                    e7:38:05:78:00:c2:4b:83:cf:f7:1a:d9:e0:b8:64:
                    dc:f5:69:d4:43:8b:d6:8e:94:58:15:4c:cc:e5:61:
                    cc:5a:5d:18:7b:97:27:d2:d4:eb:4d:60:b5:d9:86:
                    2d:46:19:1a:d6:dc:b1:d2:83:f1:44:53:38:47:e1:
                    aa:b5:95:a9:f2:d1:7e:de:2f:d0:a5:b9:db:68:af:
                    66:7f:da:37:c9:43:40:a8:7a:52:a2:be:15:01:17:
                    99:16:ee:ef:e1:56:74:89:09:22:62:22:ec:56:26:
                    0e:de:7a:f7:87:37:d2:f4:34:c5:a5:9a:d5:31:84:
                    30:70:b9:bf:b4:55:ad:a5:2a:2d:19:23:b4:94:d1:
                    c1:3f:61:3c:57:28:4c:c1:32:ab:4b:b0:22:d2:0e:
                    7b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FE:AA:BB:67:EF:41:7B:2B:73:6F:80:4D:79:4D:DA:86:00:84:C4
            X509v3 Authority Key Identifier:
                keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:20:88:38:59:82:36:aa:d8:53:6c:4b:c8:81:90:ee:45:5a:
         24:48:63:25:67:a0:92:c8:6a:5e:20:1c:e5:08:fb:13:46:97:
         a5:93:3c:9f:18:fb:9d:19:8e:a2:52:a7:fa:08:3b:6d:ef:6c:
         b3:94:d4:6a:63:51:96:82:10:b8:04:35:39:7d:5d:59:d6:48:
         14:9c:21:32:00:1b:45:a7:39:44:33:80:60:e0:3d:5f:52:5a:
         20:97:b5:f7:b8:f2:1a:1e:51:14:e1:22:cf:e5:ad:a2:37:7a:
         8d:2c:7d:5f:1d:3c:8e:45:84:f3:89:e9:1a:a2:0c:48:9a:9c:
         21:e6:6c:25:c7:d8:a6:37:28:3d:94:b8:1b:fa:a5:9f:16:d1:
         52:6e:44:d7:9e:fa:3a:57:6d:ee:c7:aa:77:ef:99:92:e9:c0:
         d3:21:bb:87:00:6c:c6:42:aa:7f:fe:2a:15:3f:7e:5e:93:9a:
         40:50:9e:de:ee:db:34:bc:7e:14:07:48:0b:8b:71:8a:97:f1:
         5f:58:44:f0:6a:3d:79:74:bf:91:f8:cf:6a:b7:7b:5d:74:7a:
         b5:3b:7a:7f:77:9d:44:09:4a:3f:c0:4a:ee:53:6e:cb:a1:91:
         07:34:ce:5a:08:44:22:a1:25:3f:fe:b4:9a:ba:91:49:c2:9d:
         ed:81:cf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:58 2026 by rpki-client