This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
File:                     nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json)
Hash identifier:          xKpyJI+FqKskuldLrt5FgXb7zA7Np37H/mdo+uHh6y4=
Subject key identifier:   06:E4:FF:62:1A:45:F5:FE:C2:78:7F:06:F1:8C:76:86:EE:54:B0:98
Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
Certificate issuer:       /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Certificate serial:       019C42B441586A4CA4C1D498005D841B83C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
Manifest number:          110F
Signing time:             Mon 09 Feb 2026 14:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:35 +0000
Files and hashes:         1: 9UL_7FkS2vsJIq4mulwmPO12qgU.roa (hash: PMgAFWeEqNxOYIt76P9bkFAoNa2Je/9TmNXR3UwPjvg=)
                          2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: 3piV6NkOWwaofDnHjaU8O020xfs0AYPyrQZnw2rdVEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:41:58:6a:4c:a4:c1:d4:98:00:5d:84:1b:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
        Validity
            Not Before: Feb  9 14:00:35 2026 GMT
            Not After : Feb 10 14:00:35 2026 GMT
        Subject: CN=06e4ff621a45f5fec2787f06f18c7686ee54b098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1f:a8:5e:e7:f5:89:01:24:85:12:37:29:7f:
                    c6:a6:39:bf:b9:eb:d1:4e:f1:9c:7d:1f:7d:76:83:
                    54:fa:62:db:9a:e3:87:27:02:cc:22:66:c7:f1:be:
                    92:68:ce:e7:26:f5:89:26:b0:11:2d:67:49:ac:42:
                    ef:8f:df:43:55:88:95:d0:c8:f8:ca:20:c6:10:6a:
                    f6:4a:13:2f:ca:33:37:3f:15:76:c1:3a:87:d4:32:
                    42:cf:b3:e4:eb:cf:0c:7f:00:83:ac:bc:25:d0:fb:
                    77:7a:48:62:3c:94:f9:96:26:8f:81:a3:bc:c0:12:
                    2f:4a:05:39:00:10:38:c6:43:22:ea:76:e5:47:59:
                    b8:d6:b1:bc:a6:2f:87:c8:2c:be:4e:17:32:ef:9b:
                    a9:ac:6a:9a:21:0f:c3:b4:50:36:3f:01:24:2e:b8:
                    69:80:a6:ba:91:f3:b6:00:cc:6b:4e:12:44:a3:98:
                    9d:c9:06:ca:2f:69:7c:3b:1c:d5:d1:44:b2:f9:6f:
                    2a:45:44:8f:42:a2:55:3c:6c:c2:72:71:02:21:a2:
                    9b:d2:67:95:56:e7:f5:c0:4a:67:50:b3:db:99:6c:
                    18:59:3a:e5:98:9c:ec:25:c2:ea:dd:63:f7:e6:ca:
                    0c:c5:8c:f8:bc:81:7b:49:f2:3b:0c:e4:fb:82:b3:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E4:FF:62:1A:45:F5:FE:C2:78:7F:06:F1:8C:76:86:EE:54:B0:98
            X509v3 Authority Key Identifier:
                keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f3:61:e9:1e:a5:da:ba:2a:fa:63:9b:67:e4:ba:c7:4f:d3:
         d5:9b:c8:a7:12:bc:05:33:b8:04:5b:90:8f:58:0a:c6:44:2e:
         81:e0:b3:49:60:24:cd:0e:c5:ce:1e:87:a3:34:89:b4:e7:e4:
         8e:75:80:01:be:45:6e:a7:92:25:78:30:9f:9c:f2:85:54:61:
         73:e9:29:d0:c0:0d:48:a2:53:b3:28:48:16:8a:67:da:4d:ff:
         82:ae:5e:55:54:fa:2b:47:ff:4d:bf:8b:4d:2c:9b:c5:90:37:
         0e:0b:96:ad:46:08:b6:3c:85:90:0f:cd:6e:53:04:2e:f2:43:
         34:02:bd:ba:fb:37:93:0c:bd:5a:1b:d8:1c:de:57:6a:83:64:
         e3:1d:2a:38:ea:68:ad:ac:9a:cc:6e:00:d5:76:a4:03:52:3a:
         27:db:d4:45:06:34:a5:4e:a1:49:46:f1:04:52:d5:85:e3:f3:
         3d:93:f0:12:4f:23:5a:b8:27:37:40:c5:e6:52:32:c4:03:1c:
         69:e9:fc:3a:10:1a:4a:8d:bd:10:07:cd:50:e8:5f:c3:86:53:
         75:1d:05:4d:09:22:09:2d:9f:c2:e1:8c:82:7b:19:2c:e1:02:
         14:ba:c7:ee:cf:bf:53:10:19:34:63:58:42:5d:79:15:38:35:
         be:95:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:05 2026 by rpki-client