This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File:                     Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier:          6N3IUN/KUPmGKwlNxZUIIcm2dQRTQfJagqJFpMZZOxE=
Subject key identifier:   67:FF:5B:E0:0E:3F:1A:65:CC:C5:80:0B:7E:C6:B1:A6:D5:03:67:37
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer:       /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial:       019C44350C62AC2E0DEE0E8F33433487C2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number:          0660
Signing time:             Mon 09 Feb 2026 21:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:53 +0000
Files and hashes:         1: BReOo98IY0bkc4Zd1ThUM5GPXeI.roa (hash: UddnfSjHvfzz7O5p2bOPPSYGFo2s16YIBkdTNHh1wSw=)
                          2: E2fwjMX7q6ipgL4_me8vcu5Mdtw.asa (hash: RcZqouMArE4Yz4qB4/AtaCjFA/VWKl6qqyfw3lzeynU=)
                          3: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: YnpTuzbXiZeXQTJ95KK58JHtdV4XxeFm0Na1I07EeSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:35:0c:62:ac:2e:0d:ee:0e:8f:33:43:34:87:c2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
        Validity
            Not Before: Feb  9 21:00:53 2026 GMT
            Not After : Feb 10 21:00:53 2026 GMT
        Subject: CN=67ff5be00e3f1a65ccc5800b7ec6b1a6d5036737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:52:3d:54:21:16:78:e8:12:f4:46:0c:63:
                    31:73:00:10:c2:15:e7:83:ff:0d:6f:0d:31:f7:e5:
                    a7:ba:dc:41:2a:ef:98:3f:b3:83:03:55:b3:38:1b:
                    3a:2d:a7:88:c6:91:42:85:6b:bd:5c:71:02:35:40:
                    62:1d:cc:d0:78:90:93:07:83:33:c9:08:c4:ba:e8:
                    eb:57:7b:03:b8:fc:31:9b:2e:16:25:49:64:b7:b9:
                    10:51:9b:1f:dd:8d:43:77:1f:ad:9c:30:7e:95:0d:
                    82:3c:e2:34:78:c7:ad:51:b2:ce:9a:20:cd:52:4a:
                    21:fd:9b:73:d1:4d:09:71:73:92:c9:80:95:f6:bb:
                    54:99:ab:5d:aa:da:92:b8:a7:d2:dd:38:08:5e:fc:
                    5d:5c:9a:c5:61:6b:09:67:4b:03:07:2c:f2:8a:4a:
                    b4:05:81:83:5b:eb:02:7f:8c:0e:1c:26:7c:ba:a0:
                    d6:82:61:9b:2f:31:97:8d:74:73:b3:b4:0a:79:ec:
                    0e:64:fd:c3:6b:a6:44:80:d5:f2:34:01:fb:40:93:
                    ad:c8:37:36:35:f4:ea:c1:7f:7d:cc:e9:38:75:51:
                    75:d9:eb:87:67:bf:e1:b9:f3:50:3f:18:e6:19:53:
                    b7:28:37:b3:69:c0:1e:5d:98:e7:da:72:6a:03:ab:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FF:5B:E0:0E:3F:1A:65:CC:C5:80:0B:7E:C6:B1:A6:D5:03:67:37
            X509v3 Authority Key Identifier:
                keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:64:49:87:48:df:c6:8a:74:df:70:d5:eb:69:aa:e4:09:fe:
         77:80:cf:cc:b0:45:d1:23:e1:a9:32:df:47:4d:fa:5a:a0:b1:
         a3:3e:f1:53:b2:82:10:4f:2b:ae:2f:fe:93:d3:a9:95:00:3a:
         29:32:83:d5:cc:8f:83:79:b7:0d:1d:64:1f:29:5c:7b:3f:71:
         cb:6d:7f:bc:b5:58:a8:55:65:eb:3a:13:68:35:f3:a1:7e:f3:
         a5:6b:db:30:3e:35:78:84:18:fe:ae:18:23:f3:24:fb:79:1f:
         2e:79:89:dd:92:e2:02:c5:0c:e7:74:f4:c2:f7:c4:59:c4:53:
         89:4c:13:d0:e6:e0:58:54:9a:e1:ac:54:4b:dd:bc:cc:22:a1:
         d5:12:9d:36:34:15:30:ba:b7:9e:9f:73:9a:27:63:f9:8c:71:
         0f:d3:61:98:19:97:23:f5:c9:98:5d:4c:79:1e:61:25:3b:e9:
         32:5a:2f:24:9f:06:de:f0:73:f4:4f:44:6e:5e:04:65:a1:14:
         f7:8c:bd:9a:4b:92:94:14:63:d4:a0:3c:ec:ab:5f:f1:da:22:
         be:9d:a0:4b:c2:86:ec:73:ad:ea:5e:7a:e0:e3:62:4e:9f:aa:
         6f:da:f7:04:48:41:40:c7:e9:58:36:a9:24:7b:83:d4:3c:5b:
         84:62:48:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:37:00 2026 by rpki-client