This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft
File:                     NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft (raw, json)
Hash identifier:          JalGugEU+yERP5gaFCXDZntUsbjBhvnovFh5cPpNBw0=
Subject key identifier:   73:FC:49:D7:27:46:9C:C2:90:55:29:40:A6:D7:4E:A8:CD:59:85:36
Authority key identifier: 34:E8:1F:FC:43:EA:8B:BA:DC:98:30:78:A1:9A:AD:54:7A:89:1D:A5
Certificate issuer:       /CN=34e81ffc43ea8bbadc983078a19aad547a891da5
Certificate serial:       019C420FA2B330F2B7CFDE5A8024565907F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NOgf_EPqi7rcmDB4oZqtVHqJHaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft
Manifest number:          0115
Signing time:             Mon 09 Feb 2026 11:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:46 +0000
Files and hashes:         1: NOgf_EPqi7rcmDB4oZqtVHqJHaU.crl (hash: wxbefjA3vEKkoqOX2iGPiFVbLrZ0u0nwAzsXfoaFgeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NOgf_EPqi7rcmDB4oZqtVHqJHaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:a2:b3:30:f2:b7:cf:de:5a:80:24:56:59:07:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e81ffc43ea8bbadc983078a19aad547a891da5
        Validity
            Not Before: Feb  9 11:00:46 2026 GMT
            Not After : Feb 10 11:00:46 2026 GMT
        Subject: CN=73fc49d727469cc290552940a6d74ea8cd598536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:5d:fd:99:ce:e0:8c:0d:4e:9b:b7:db:9f:
                    89:63:a7:14:1e:64:b2:aa:5c:e8:9e:3b:5a:63:47:
                    a2:c1:1d:52:df:61:e6:d9:2f:2f:e5:6e:5b:31:be:
                    42:62:73:bd:1c:57:71:a3:e7:cc:a7:80:9e:5f:bc:
                    1b:e2:c4:75:cf:cc:56:6d:aa:1f:d4:d0:a4:30:39:
                    27:85:b4:52:48:c2:e0:02:39:d1:45:ec:9d:65:09:
                    5d:c6:9f:56:c1:4e:d6:98:bb:a5:92:51:ab:0a:d2:
                    cf:d5:03:e3:79:6f:ae:a6:52:30:10:ab:5a:e8:c1:
                    d3:fd:47:48:35:06:29:df:32:a1:12:ac:1e:a3:86:
                    db:e6:7b:e9:28:0e:6f:1f:8d:23:b8:fc:c7:09:c1:
                    fe:1b:5b:32:fe:4e:84:62:4c:13:69:c3:31:91:34:
                    34:fc:e1:b2:be:89:2c:ed:df:9e:b5:4b:bf:84:77:
                    f7:a6:a9:40:9c:d2:9b:8a:42:72:6b:53:f0:89:a3:
                    7a:c9:bf:d9:d5:5b:e5:76:af:36:3e:33:23:d4:7b:
                    ae:77:b9:ab:21:e1:57:e0:5e:fa:f8:1b:d5:2c:7a:
                    0b:09:aa:33:93:e1:3d:c7:d6:b2:94:f3:79:e7:36:
                    5f:c9:2d:d1:b3:5c:15:5a:8b:47:c2:34:0e:cb:0e:
                    06:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FC:49:D7:27:46:9C:C2:90:55:29:40:A6:D7:4E:A8:CD:59:85:36
            X509v3 Authority Key Identifier:
                keyid:34:E8:1F:FC:43:EA:8B:BA:DC:98:30:78:A1:9A:AD:54:7A:89:1D:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOgf_EPqi7rcmDB4oZqtVHqJHaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e5:78:34:3e:ae:53:e4:a8:ca:1f:8f:b6:90:6f:dc:e9:a9:
         54:1f:bf:66:5f:6e:06:fe:fb:e0:1b:f5:38:b9:9a:e4:be:ca:
         ea:8c:4c:34:82:de:82:43:34:5c:6c:64:63:29:80:61:ab:15:
         8d:71:43:90:3f:1a:74:39:27:2c:c4:1e:7c:7e:15:2d:24:cd:
         81:9d:f0:a2:ea:56:a7:c7:51:0f:86:2c:28:a9:5a:4a:32:42:
         45:66:33:2d:f0:be:0a:d3:a5:a2:3a:e1:f1:53:01:03:48:f5:
         e0:b3:31:06:26:a7:fa:c7:f9:1f:56:9e:38:3d:21:0f:2e:b6:
         cb:73:cf:90:54:0d:27:3d:34:b4:48:18:f1:9f:a1:93:e3:ef:
         97:bf:8c:8f:9d:70:97:c5:10:44:0e:de:95:b4:39:e6:9a:76:
         4c:75:a3:96:e8:e3:84:d1:05:8b:f6:4c:91:ba:ea:7f:34:18:
         58:38:78:a6:b5:82:1a:f1:96:70:30:ce:4c:4d:2f:4e:34:cc:
         65:45:b3:21:b3:aa:08:78:cb:7f:03:d3:6a:4f:08:db:09:ec:
         55:9e:55:ef:f3:fa:49:5e:0e:e0:26:58:88:63:13:b1:6b:33:
         2d:d2:fd:e6:91:a4:e8:7e:8b:19:a8:ae:83:66:43:76:02:32:
         6f:6e:10:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:09 2026 by rpki-client