This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File:                     nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier:          Qp4bITu7oWSvnl3qKAIHhlqUied0drteHEkhGIEmk8o=
Subject key identifier:   D7:AD:1E:4B:D1:0D:A6:1E:C4:F5:14:12:2A:DD:79:A2:8D:1A:A9:14
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer:       /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial:       019C432293393A731BD0E4339FD126B126BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number:          090E
Signing time:             Mon 09 Feb 2026 16:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:05 +0000
Files and hashes:         1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: cEUQcmF9HWv1u3DvJIHe/eEPRXI8PmFtlYzDMiiSwR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:93:39:3a:73:1b:d0:e4:33:9f:d1:26:b1:26:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
        Validity
            Not Before: Feb  9 16:01:05 2026 GMT
            Not After : Feb 10 16:01:05 2026 GMT
        Subject: CN=d7ad1e4bd10da61ec4f514122add79a28d1aa914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:d1:a2:82:70:4e:5a:2d:2d:29:4d:e5:2c:
                    58:17:5f:8f:5d:04:4b:51:16:ca:04:d1:48:36:6f:
                    82:a7:a3:28:23:c9:ec:c7:ed:dc:6f:6d:92:2c:31:
                    1c:f8:dc:65:a6:73:7d:66:26:3e:be:9c:8e:18:4f:
                    b7:21:f8:1a:c4:de:9a:9d:1d:58:11:a7:5a:de:eb:
                    51:00:12:3b:f1:fd:6d:0a:b2:a0:7e:86:69:19:ff:
                    95:c5:85:ca:46:c7:47:af:ee:8b:3b:98:4c:15:2d:
                    30:72:7e:de:a8:a5:70:02:cb:53:74:c5:5f:89:f7:
                    3d:b0:6d:a1:7d:81:f3:4c:17:23:1c:fb:81:35:ba:
                    03:a4:da:e6:e5:d0:db:1c:de:0a:11:4b:ba:f2:1d:
                    ba:99:04:92:8d:b7:21:b3:bf:86:ae:48:46:0e:84:
                    8e:83:e9:a8:fd:2f:98:1e:06:0d:45:1b:08:a4:fd:
                    ff:ab:f9:26:52:fa:a0:d2:08:d6:a5:d3:98:6a:19:
                    a7:ce:6c:02:23:34:02:7e:78:ae:a8:ec:a4:2b:0c:
                    06:cd:21:3d:16:88:3c:7c:60:75:d0:0f:dc:37:be:
                    28:0b:f0:68:43:03:6a:fb:5a:e5:e4:de:21:ff:06:
                    6f:82:09:7a:37:db:84:03:92:ee:a0:bf:8d:f5:c1:
                    33:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AD:1E:4B:D1:0D:A6:1E:C4:F5:14:12:2A:DD:79:A2:8D:1A:A9:14
            X509v3 Authority Key Identifier:
                keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:58:ec:d8:e3:5f:ba:fe:9e:3d:20:38:55:61:66:e9:37:5a:
         b7:75:77:fe:a3:49:a1:b0:ec:d1:ae:59:ce:17:bf:8d:cf:f9:
         93:e4:e9:12:59:c5:fc:17:0b:5f:e7:d3:51:5f:89:b6:69:5e:
         93:7b:f7:be:76:6b:b8:41:e9:d3:34:3e:8e:c9:99:b5:75:dc:
         cf:6c:2f:92:fe:b2:1c:4e:2e:9a:87:2e:c5:b4:e7:73:64:85:
         04:09:5d:f5:08:20:61:f5:95:25:ab:18:f3:4f:19:14:43:08:
         bf:c3:f4:f6:47:ab:a2:ee:1d:d4:ab:e3:0a:96:e7:37:ad:cb:
         0b:cd:0c:cf:5c:f6:2a:13:f8:4d:aa:d9:f4:4b:92:fe:19:d0:
         84:03:d2:8a:91:17:5d:06:06:f5:6a:21:56:53:f6:00:58:53:
         2c:d6:7f:4d:62:d2:6b:1c:e7:6b:98:91:58:9a:f1:08:bf:fc:
         99:11:dd:1e:36:c9:35:13:30:7f:39:c4:98:ce:81:b1:5f:dc:
         21:21:ef:11:48:46:a1:e4:7f:7c:1a:ef:d6:ff:13:3c:da:e6:
         88:7e:0e:45:31:10:58:58:53:c4:b7:01:eb:d9:b3:cc:a2:b8:
         15:10:99:76:8d:67:91:ce:f4:25:43:6d:f0:9c:21:c3:9c:e8:
         45:88:98:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:43:55 2026 by rpki-client