This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
File:                     nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json)
Hash identifier:          NkC6Z8CW9lQ3vv+pI98JHVBJbXRldD4RkTr9D81b/Ag=
Subject key identifier:   96:23:72:68:AC:F6:85:ED:5B:3E:22:54:D8:6E:A8:E5:D0:00:79:FD
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Certificate issuer:       /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial:       019C424623122B6B3F842E9F96D29CCBFC4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
Manifest number:          0EE4
Signing time:             Mon 09 Feb 2026 12:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:18 +0000
Files and hashes:         1: dMfKUJHSuWnseGbTE-GdRIw07W4.roa (hash: y2qy1o8S5/XUqYwrCQSN4S8pMHsU2FgYcmzRMM/ZUGk=)
                          2: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: cP5Lt5HqhMbBMey8vHsn9qUELqKudJfzdZS03Yg2oO4=)
                          3: xVq8myRToHEzG4XtrfoYm_ql4tU.roa (hash: qD4DTGCUvT4xhgt8cQf/IqQZzJ2Q7J0szRvgCLAXSVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:23:12:2b:6b:3f:84:2e:9f:96:d2:9c:cb:fc:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
        Validity
            Not Before: Feb  9 12:00:18 2026 GMT
            Not After : Feb 10 12:00:18 2026 GMT
        Subject: CN=96237268acf685ed5b3e2254d86ea8e5d00079fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:b6:44:e7:43:34:27:33:64:c8:06:69:97:
                    53:22:d3:32:73:8f:d7:c9:a1:23:2d:8e:91:8a:8c:
                    c2:a3:e8:bc:d8:47:44:f0:6c:51:76:df:91:53:78:
                    42:10:e5:a9:76:35:11:12:43:1c:f2:51:2d:96:59:
                    c4:5e:66:d0:89:0a:b7:c0:42:e6:81:fe:88:3a:31:
                    0b:2d:5d:05:10:8b:1c:75:5a:1b:0e:1b:eb:b7:02:
                    59:7b:7b:cf:7a:cc:cd:10:49:10:96:86:08:8f:23:
                    b0:fc:8f:55:00:ca:8f:1f:ee:e8:dd:03:ce:f9:88:
                    c5:a7:70:a7:a0:98:68:60:80:46:24:4f:08:b6:b3:
                    a0:05:b3:a5:85:07:54:40:cc:6a:ee:2e:48:e5:b7:
                    46:a8:ea:e0:3a:1a:0d:b3:cb:a2:46:10:69:50:e5:
                    a7:29:3e:fb:10:e5:cb:33:ea:c7:14:ec:ba:ba:05:
                    5c:91:d9:9d:a7:4a:e4:8e:b8:7c:a6:96:f4:bb:04:
                    95:73:48:2b:75:89:df:8f:5c:fa:3e:e2:81:45:5b:
                    56:24:76:33:bd:b9:a8:7a:70:b9:a4:c6:a0:13:d9:
                    13:81:f7:3b:e9:c3:aa:28:e0:49:7c:c5:cd:4d:3d:
                    69:e3:71:d9:d9:77:0f:7c:72:20:51:a4:ab:23:39:
                    3e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:23:72:68:AC:F6:85:ED:5B:3E:22:54:D8:6E:A8:E5:D0:00:79:FD
            X509v3 Authority Key Identifier:
                keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:30:77:c1:0f:b5:99:9e:1e:92:7f:7a:55:f9:1f:18:ad:1b:
         d9:96:10:93:4a:fa:4e:09:e0:87:f3:0e:aa:c2:74:0d:9a:11:
         ff:31:64:3b:70:f4:70:a7:8d:fa:e7:67:48:98:08:44:9d:ef:
         9c:37:dd:4b:52:36:60:fb:be:d6:2d:cd:b3:d4:90:b7:0e:b6:
         da:d4:bb:cc:7e:61:53:44:e5:9c:a0:e8:0f:10:f0:8f:bc:11:
         ef:90:b2:5c:d2:cb:50:76:29:fe:82:7c:40:09:fa:e3:54:f0:
         b5:f7:cb:5e:c4:74:f3:1c:0c:1b:8e:79:e0:60:7c:29:77:41:
         c7:36:fe:1b:29:d9:ed:da:e9:ed:c6:12:10:8f:60:8b:a9:02:
         70:92:e0:68:cc:d9:42:fb:36:be:b5:e0:dd:27:75:89:d0:69:
         a5:f1:d7:8c:12:d8:e6:51:39:ed:f5:bb:a2:11:75:63:b4:00:
         4d:f9:56:d7:c3:4e:3d:95:03:36:fb:63:2c:f4:c6:25:e2:b4:
         24:9c:06:1a:02:95:80:4e:10:ee:ea:42:5e:49:f3:db:71:bb:
         64:98:75:5e:bb:b8:82:16:8a:3b:5d:7e:8d:30:02:76:34:eb:
         cd:4a:fc:3d:85:1f:77:e7:e9:d6:d0:32:77:34:00:2e:75:72:
         48:02:e6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:34 2026 by rpki-client