This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
File:                     NNUZJHQCvPvfDs6QIK1kYi6dO64.mft (raw, json)
Hash identifier:          ItI1c0nVHgQg6tqIxvhp7XT3kwcXL0dKbCz7x7ESA7w=
Subject key identifier:   C5:6A:11:57:07:88:1F:01:4E:AD:3A:A8:C7:4F:CD:0B:CD:52:E7:D1
Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
Certificate issuer:       /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Certificate serial:       019C420FB3261D3412A026AB29190FD01963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
Manifest number:          10A2
Signing time:             Mon 09 Feb 2026 11:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:50 +0000
Files and hashes:         1: CuLXTApTY665Qqw5qFqzkskM4Y4.roa (hash: 7Izzut+1ogoYvoMfOGiIDjD5ckHSQdRcpDniAQU0kyc=)
                          2: NNUZJHQCvPvfDs6QIK1kYi6dO64.crl (hash: d2OgQ/QF2qid3puG1Z0EeO/sUUw3teCnlLHvcdUvMWU=)
                          3: cIznhG-7FFlY99slwXQBHSyGArI.roa (hash: 6HAUnj4ChowrLAx0R+vc3a/ycSWndHfVoayw20SNgbQ=)
                          4: f4nPS6ohtqHTChuoe7zsCtGbZk0.roa (hash: sDMFZIqzqP0HnmKISKRvCr3JlZX4SyHrkPjSdRU5xGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:b3:26:1d:34:12:a0:26:ab:29:19:0f:d0:19:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
        Validity
            Not Before: Feb  9 11:00:50 2026 GMT
            Not After : Feb 10 11:00:50 2026 GMT
        Subject: CN=c56a115707881f014ead3aa8c74fcd0bcd52e7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:76:a0:ee:9b:2f:2c:76:79:93:5a:0a:1f:
                    ab:fb:50:1a:38:6f:da:9c:28:01:ef:c3:4c:6f:69:
                    bc:f7:1f:a1:97:a6:e1:a4:11:8e:d1:ce:1e:c1:20:
                    24:f4:fa:48:7b:10:4d:a5:c4:79:73:ea:80:34:df:
                    46:86:2a:01:dd:18:b4:7f:f0:ba:cf:f9:8c:b3:62:
                    f6:90:2b:d9:55:49:76:07:d8:61:1d:5f:1b:ff:f5:
                    96:64:47:a0:97:8f:c7:70:86:56:88:81:fc:4f:f6:
                    83:df:63:56:ea:af:84:78:53:ec:40:70:4a:57:02:
                    ae:c4:7a:fa:e8:97:50:0f:f4:43:b4:e8:64:3c:13:
                    03:ed:be:91:9b:07:89:bd:c0:73:44:90:dd:71:63:
                    11:99:22:0d:ea:b2:79:0d:e3:ea:e1:c7:ee:d4:b1:
                    b2:4b:66:02:dc:a2:b0:22:64:7f:58:95:35:fd:61:
                    01:24:33:23:9c:2d:77:46:fa:da:5b:27:98:da:72:
                    04:ea:13:59:e4:72:ab:52:f0:de:25:dd:77:b1:6c:
                    5d:da:8b:07:d6:2d:65:7c:6f:02:ca:fd:56:fb:b8:
                    cb:f2:9f:5a:06:66:f7:23:f6:06:e7:65:a4:8a:71:
                    5a:9a:f2:a0:05:fe:c0:d0:ed:f0:6b:8e:12:fe:6a:
                    1e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6A:11:57:07:88:1F:01:4E:AD:3A:A8:C7:4F:CD:0B:CD:52:E7:D1
            X509v3 Authority Key Identifier:
                keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e2:d7:fd:07:a7:43:82:c2:50:94:81:e8:f8:89:bc:b6:97:
         61:89:a1:9b:c8:da:f8:81:89:d1:94:2c:7a:47:c6:16:60:b6:
         f9:91:6e:4f:60:4c:00:a1:20:17:d6:f6:d7:c0:26:be:2d:7c:
         a7:e0:d8:81:5c:3f:90:cf:f5:87:5a:64:b8:00:13:af:ab:7c:
         26:c2:05:a0:c4:ff:c4:63:fa:aa:c2:26:dc:75:7a:99:5b:b8:
         b6:62:cf:1a:84:bf:5b:93:6b:8b:d1:f3:02:d3:20:a0:3d:fa:
         cd:71:27:16:21:62:21:bc:6f:4d:41:76:c8:d0:e0:76:43:b1:
         96:d6:da:34:a0:32:61:d7:a3:15:7d:41:27:1c:2b:17:35:ad:
         e5:5e:8c:0c:ee:ba:1d:e2:90:89:26:ee:16:51:e3:db:f8:37:
         4a:ee:7d:2b:53:16:1a:f8:3f:b4:31:20:e4:21:52:b4:7e:fb:
         02:97:04:cf:e5:e2:9a:d2:c2:68:9b:3c:f5:f4:f7:32:02:e8:
         d7:fb:8f:ca:b2:5d:5f:41:09:dc:bc:34:66:5b:53:8c:f9:17:
         5d:d5:32:f9:03:c0:9b:fc:c6:fc:9d:ad:03:75:18:7a:23:25:
         77:f5:9e:f7:92:56:42:60:bb:be:43:c3:dc:6e:90:75:98:a2:
         07:ac:3f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:01:10 2026 by rpki-client