This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File:                     NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier:          CDW0lgXR+RWbzk7c9m85j43fJkTulbAXneBFswhnkd8=
Subject key identifier:   60:4E:DA:FB:F4:09:BF:6F:F6:22:46:91:63:31:3A:C5:F7:74:22:2D
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer:       /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial:       019C46C8895629B97E49848A11D6AC5E248F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number:          036C
Signing time:             Tue 10 Feb 2026 09:01:13 +0000
Manifest this update:     Tue 10 Feb 2026 09:01:13 +0000
Manifest next update:     Wed 11 Feb 2026 09:01:13 +0000
Files and hashes:         1: 2mDBUtF183-0RSLjJBliu1rIQO8.roa (hash: 3lzqCQHb4j0yU8pcFwYiFLfqy0BLZUaM9oBjKILthJw=)
                          2: GfO-2z23flcVZgus0pDd6WLIU1g.roa (hash: 0ETAGcbcy3jcVs9OlDEPeiK922VrJQwu8CgS9xVuEdY=)
                          3: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: h1DWynGW51w4ltD6beBClzrwRmod1RCvpZ9e9YPTxyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 09:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:46:c8:89:56:29:b9:7e:49:84:8a:11:d6:ac:5e:24:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
        Validity
            Not Before: Feb 10 09:01:13 2026 GMT
            Not After : Feb 11 09:01:13 2026 GMT
        Subject: CN=604edafbf409bf6ff622469163313ac5f774222d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:48:06:dd:51:e7:47:5c:d9:af:34:c5:ef:
                    37:5d:da:fc:03:f4:ad:72:e9:a1:0e:c9:90:8d:8a:
                    b0:a8:16:ad:9b:00:bd:f2:56:02:a7:a8:ac:b7:46:
                    df:2e:12:18:a8:49:4d:c0:b8:6c:e6:9a:de:fd:c8:
                    13:25:34:01:e3:f1:b4:1b:0a:db:82:95:36:5c:7a:
                    81:c0:22:95:a2:2c:5d:8f:10:f7:8a:91:12:3f:ff:
                    52:2e:18:38:db:7a:05:22:eb:03:ad:a2:17:2a:8c:
                    07:a5:42:d3:14:44:11:7c:55:d2:3d:85:dc:8e:d0:
                    67:c0:75:cc:cc:7b:f7:99:6d:ab:f2:29:ba:41:26:
                    bf:5e:e0:0f:1a:2a:4b:80:a8:da:65:a9:66:04:b7:
                    fa:cd:ad:b4:6c:9f:1e:e7:35:a8:bf:80:cd:1f:b2:
                    21:a6:47:2a:33:de:27:3c:5b:a6:e6:5d:2b:47:60:
                    5e:81:9f:44:c9:db:2e:f7:31:17:c6:3c:bf:c6:5a:
                    28:6d:d0:19:99:fb:6d:96:a0:ea:0e:41:38:42:37:
                    0a:c6:49:2a:6f:eb:71:2f:51:55:a4:52:67:d8:a9:
                    7e:f6:e6:db:37:54:9d:fe:a5:5f:11:d5:97:ac:b6:
                    54:fc:47:11:25:ed:f8:b0:dd:b3:67:41:93:b5:e6:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4E:DA:FB:F4:09:BF:6F:F6:22:46:91:63:31:3A:C5:F7:74:22:2D
            X509v3 Authority Key Identifier:
                keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ba:a3:ea:2b:3a:90:43:97:b2:2e:47:d5:3d:8f:f7:1c:6e:
         55:46:2c:73:76:5b:e6:45:bc:7e:a8:fa:fe:66:6e:f2:57:b5:
         77:13:52:ac:e7:31:b9:cf:65:96:e1:43:2d:50:0d:db:1d:8d:
         50:51:11:bf:cd:a9:d9:69:12:c1:20:30:e0:e6:9e:47:0a:55:
         c8:dc:00:3b:5e:1d:9d:49:5d:fe:e5:d5:6d:bf:fe:73:b3:89:
         d6:26:9c:54:84:20:bb:ad:71:cf:83:75:52:32:f4:e9:b0:b0:
         db:e9:fe:d1:ee:59:4d:64:53:ab:d6:95:8e:36:bf:7b:73:d1:
         ae:0d:8d:7e:14:70:fd:67:7a:40:04:d5:5e:39:a1:1f:2f:72:
         98:db:6e:0d:a8:95:70:77:18:5c:8b:95:4e:ff:0b:44:20:8d:
         1b:18:29:77:ad:f9:20:b4:6f:fa:ed:9a:ac:33:8c:86:40:21:
         ab:54:46:5d:5a:8e:dd:44:31:56:6c:e1:2f:ca:62:7d:f5:bf:
         19:d9:6f:f5:75:c9:fe:d0:d0:ce:c5:d6:7f:90:7b:0e:a9:c8:
         78:bf:83:58:83:50:c1:32:ad:9d:50:e7:a6:31:dc:be:ad:33:
         9e:c5:78:f1:10:97:65:92:6d:19:28:d2:ef:3e:76:ec:6d:82:
         54:d9:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 13:05:34 2026 by rpki-client