This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
File:                     N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft (raw, json)
Hash identifier:          TZ/ZlX5F8CMq09CyagYuXihQwoxhYn0ytCWS+TKXJRM=
Subject key identifier:   F2:34:12:67:CC:7C:63:0E:0D:CD:29:F8:96:3C:55:1B:FB:F8:FA:FF
Authority key identifier: 37:49:30:00:B9:A7:04:53:1D:A1:A1:76:6B:E5:38:27:1E:E0:CC:C9
Certificate issuer:       /CN=37493000b9a704531da1a1766be538271ee0ccc9
Certificate serial:       019C42EB85F32BD9C424BCA6850DD841C660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
Manifest number:          01E3
Signing time:             Mon 09 Feb 2026 15:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:57 +0000
Files and hashes:         1: MNE-ZCwRYPDx0wTkQU5powJS4Nk.roa (hash: JTsGSY9wxU/ufYls0VwQm/PmoFlNeOnfFMb0n8iAQcg=)
                          2: N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl (hash: QQh7/zSkoJ48c1nXIramiIijJXrRh9jssH2KHQM/REk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:85:f3:2b:d9:c4:24:bc:a6:85:0d:d8:41:c6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37493000b9a704531da1a1766be538271ee0ccc9
        Validity
            Not Before: Feb  9 15:00:57 2026 GMT
            Not After : Feb 10 15:00:57 2026 GMT
        Subject: CN=f2341267cc7c630e0dcd29f8963c551bfbf8faff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c3:1c:26:d5:42:9f:dc:5c:21:1f:e1:7f:0e:
                    3a:09:5d:1a:ee:0e:95:7c:68:e2:d2:b6:6b:b6:82:
                    23:22:6a:61:d7:b9:2e:93:ef:75:74:73:a8:a7:f7:
                    44:68:24:e9:38:ce:f7:17:b6:c6:27:9d:c1:10:a4:
                    c3:0f:3f:8e:df:70:9b:35:76:4b:63:38:d7:3f:ad:
                    38:31:1c:01:e1:f1:20:a8:78:ec:81:bf:7d:a3:85:
                    70:9b:fa:2f:10:3f:c9:8c:da:eb:62:d9:c6:3b:17:
                    b1:6d:c5:c5:f3:5f:0b:c4:a8:9a:61:2e:8f:35:ce:
                    07:64:e7:da:3e:16:e4:17:38:b1:e4:87:4d:e6:69:
                    41:fe:87:d6:f7:69:21:d4:18:cf:e1:28:79:e8:0a:
                    ce:05:d0:5d:e2:01:3d:37:ee:b6:88:5f:68:d8:73:
                    c9:27:33:3d:44:ce:79:e2:3e:c7:ad:cd:e5:9a:9c:
                    0d:7e:ca:c8:4e:58:ff:95:f1:23:9c:09:90:01:1f:
                    7d:03:df:27:26:f3:36:f5:8e:56:c9:ed:fb:e6:19:
                    5f:a0:54:7d:5f:8e:c8:e9:d4:38:20:20:7e:0a:4f:
                    2f:2d:40:3e:a4:b0:41:2b:dc:7a:4e:d1:cc:09:ba:
                    5a:a9:00:0e:cb:c4:39:ca:f2:80:ca:2d:7c:f7:c7:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:34:12:67:CC:7C:63:0E:0D:CD:29:F8:96:3C:55:1B:FB:F8:FA:FF
            X509v3 Authority Key Identifier:
                keyid:37:49:30:00:B9:A7:04:53:1D:A1:A1:76:6B:E5:38:27:1E:E0:CC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:bc:92:38:d7:4e:03:70:5b:3e:5e:03:8d:c4:07:d1:22:7e:
         3e:c0:b9:ef:95:5d:6e:c1:57:e2:76:71:a6:e7:9c:b3:68:e5:
         fe:4f:fa:e3:ed:32:b6:50:ee:56:67:ad:5c:61:ea:4a:4a:b1:
         e7:a5:da:1a:ea:70:cb:58:23:cd:90:58:58:20:e4:aa:08:57:
         7d:7c:51:6c:fc:18:fe:fd:9e:79:9b:82:6f:1b:ef:6b:94:73:
         07:51:0b:45:c0:dd:58:73:6c:2f:f2:96:ab:4f:77:95:5f:a1:
         f9:d8:a7:d4:37:a6:83:0b:da:7d:04:63:34:3d:f0:d0:fd:c5:
         a9:77:9b:71:ae:c2:fa:01:84:68:f7:8a:2a:cf:1b:57:bf:e3:
         ea:25:ea:5b:cc:b4:21:b4:1c:57:e4:e6:a3:48:d7:50:6c:c3:
         33:4e:8e:68:e9:e5:4d:44:c8:99:f0:3a:54:d3:13:87:c7:b8:
         e2:01:0e:e5:de:17:96:0e:db:fa:9d:4e:d5:0b:07:9b:7e:7c:
         f2:0a:0f:34:32:ad:b0:2b:38:ce:0d:41:0d:5c:17:1b:44:95:
         d9:30:59:3a:58:3f:06:8e:f9:5a:47:56:a3:45:30:17:31:6f:
         c1:f0:2b:dc:c3:cf:90:b2:1c:68:64:cb:5d:8d:55:e2:4f:e8:
         95:06:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:01 2026 by rpki-client