This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
File:                     Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft (raw, json)
Hash identifier:          FzDrWnKV3Kq5NcO9ro9k+UWgXj7jbE88e/lD0GCczys=
Subject key identifier:   96:69:77:29:A6:FC:CE:B6:4F:05:86:C1:D7:E7:CE:79:E2:C2:BB:AC
Authority key identifier: 36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
Certificate issuer:       /CN=36fedfeccfd00f577cb791f8e43aa659262e93db
Certificate serial:       019C42EB1D942EF26CE43FA927CEFABC3152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
Manifest number:          023E
Signing time:             Mon 09 Feb 2026 15:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:30 +0000
Files and hashes:         1: Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl (hash: 6bw62wnuguonbKoD3xWWMkmSTnLI7LgZoyBT+PYv/1U=)
                          2: iloUVLRqtoal6LUpk2_xa7xOnZg.roa (hash: VBxsjAoKIrvki5mLaeRbqq1p9mC/zepjwgxGu4sJgFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:1d:94:2e:f2:6c:e4:3f:a9:27:ce:fa:bc:31:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fedfeccfd00f577cb791f8e43aa659262e93db
        Validity
            Not Before: Feb  9 15:00:30 2026 GMT
            Not After : Feb 10 15:00:30 2026 GMT
        Subject: CN=96697729a6fcceb64f0586c1d7e7ce79e2c2bbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:de:53:4d:2d:2c:07:22:b6:f1:04:2f:6e:
                    fa:72:04:7d:95:6b:63:63:16:35:19:68:f6:47:89:
                    ad:a8:a8:44:09:27:23:a3:f5:e4:a0:5a:6a:6c:6d:
                    08:63:1f:f1:6b:a1:e7:6c:18:c1:9c:30:3a:5e:7f:
                    0c:0f:9f:ab:b4:37:44:4e:96:95:3b:0d:e2:ed:92:
                    7e:04:ed:25:0a:f5:7d:26:6e:dc:45:6d:1f:90:5b:
                    4e:e3:af:e6:91:3f:c5:27:76:6a:86:7b:c4:cd:cc:
                    ad:b5:20:93:62:07:a5:01:55:bf:21:1b:d3:3c:1e:
                    78:78:2c:44:3a:01:0c:90:c3:47:96:43:14:f8:de:
                    cf:df:98:9b:e7:02:ad:94:75:91:91:fc:1b:60:0c:
                    fd:62:f6:5a:b4:2c:ce:49:ff:7a:a2:2c:42:82:ff:
                    56:0c:c3:96:ea:5b:49:9d:35:56:3f:0f:99:63:b8:
                    68:cd:6c:0c:f9:e9:46:a7:59:b6:f7:8c:44:4a:ed:
                    53:34:d2:af:51:ce:2f:1d:30:3b:9b:c4:14:80:03:
                    e7:cd:e3:fc:c8:84:0e:94:51:61:a9:ed:58:d3:0f:
                    9d:c3:f0:2e:c9:22:70:4d:c2:0c:99:1c:19:ae:95:
                    10:18:22:2d:94:d8:cd:c1:9d:d5:81:ae:37:a4:7a:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:69:77:29:A6:FC:CE:B6:4F:05:86:C1:D7:E7:CE:79:E2:C2:BB:AC
            X509v3 Authority Key Identifier:
                keyid:36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e9:d8:19:e5:89:fa:d6:06:5d:17:18:47:8e:2d:0c:32:80:
         08:bc:32:06:86:b9:58:7f:41:aa:75:d7:98:12:cc:0f:d6:3b:
         c4:9d:92:b8:45:95:f2:b1:8b:08:cc:a8:59:34:67:3c:9d:7f:
         a2:c1:dd:f5:c5:d9:83:10:79:bd:51:3c:cf:2a:77:35:07:42:
         48:e2:30:58:a8:d3:78:e3:b8:ee:a7:0c:84:08:57:cc:ba:90:
         82:53:ea:70:75:be:3d:bf:1b:8a:d8:d8:69:e4:80:b7:1f:e2:
         f8:a2:0f:55:52:ac:46:19:a3:18:10:6b:67:19:b8:f3:d3:53:
         07:d7:f6:5f:76:92:0f:c3:c3:fb:c7:cc:2a:08:f4:b8:66:6c:
         6f:a7:6d:3b:f9:92:3b:29:19:ec:f1:8b:da:49:54:a0:00:d1:
         bc:f8:4e:98:09:2c:1e:d1:4f:99:09:9f:ab:c9:5c:fc:70:a4:
         b0:66:65:c1:aa:5a:10:32:8f:fc:6b:cc:22:91:03:75:cd:d4:
         ff:ca:29:9b:41:3c:17:6c:d9:9d:12:9f:03:8e:8b:b9:89:1b:
         25:2b:2b:85:c6:a8:86:d8:2d:03:fc:ff:4e:73:7e:c0:a3:76:
         8b:7e:4f:a3:4c:30:d9:15:73:eb:a3:ed:35:99:a4:a2:a6:b7:
         67:35:73:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:13 2026 by rpki-client