This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
File:                     _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft (raw, json)
Hash identifier:          TKLUN0ECsPH89Ltb/nIoFj5/rZgcUVEG4TmT+IgeeX0=
Subject key identifier:   B8:4B:DE:FC:05:F3:87:CB:8C:F7:D6:51:18:D1:92:DE:2E:AE:5D:60
Authority key identifier: FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
Certificate issuer:       /CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Certificate serial:       019C43224B67AAB413C735562B69C0606CFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
Manifest number:          02C4
Signing time:             Mon 09 Feb 2026 16:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:46 +0000
Files and hashes:         1: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl (hash: YOYfp1OO1F5JEW/2HALjyZAvrdyBRiYsF3P6FNsQqtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:4b:67:aa:b4:13:c7:35:56:2b:69:c0:60:6c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
        Validity
            Not Before: Feb  9 16:00:46 2026 GMT
            Not After : Feb 10 16:00:46 2026 GMT
        Subject: CN=b84bdefc05f387cb8cf7d65118d192de2eae5d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e5:fa:4c:1f:ba:65:d5:e5:89:a8:36:f4:82:
                    a6:09:16:81:78:18:a9:a7:f9:7b:02:42:87:73:25:
                    3f:85:f5:13:25:f7:c2:2f:f6:be:f4:a6:e2:23:67:
                    4d:01:9b:d2:26:2d:5c:b6:0f:17:f7:f6:61:61:7e:
                    ca:d5:8d:a0:7a:94:66:ca:18:3b:a9:ee:0b:e0:d7:
                    c5:d4:d8:b9:9a:6b:9d:3b:ab:f2:44:ab:da:7a:35:
                    a1:ec:7e:b4:85:3b:ed:53:64:68:8f:c2:ff:bd:e4:
                    73:f1:9e:8d:5b:94:03:0b:f6:ed:98:d2:3a:6c:0d:
                    09:e4:ad:3a:e3:8a:e8:99:65:d5:85:c9:42:5a:23:
                    b5:16:79:6e:f8:02:93:04:e6:cb:af:76:6d:72:12:
                    97:0e:9f:95:0b:a3:fd:aa:fb:de:54:e5:13:eb:32:
                    f9:f7:c1:b0:f1:ed:31:dd:21:b0:35:e6:6c:8d:90:
                    a7:5e:88:83:d9:d3:f3:d2:77:8f:bc:57:68:f3:fa:
                    e9:96:5d:53:cd:be:5f:85:dc:48:6c:18:a2:83:b2:
                    e9:86:70:e8:c8:1a:77:81:ae:68:d7:1b:f3:56:f5:
                    37:11:a6:06:c2:13:0e:49:a5:b1:4a:2e:08:93:e9:
                    b1:81:1f:4e:61:fa:e3:64:16:62:34:2d:55:21:d0:
                    32:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4B:DE:FC:05:F3:87:CB:8C:F7:D6:51:18:D1:92:DE:2E:AE:5D:60
            X509v3 Authority Key Identifier:
                keyid:FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9c:e7:dd:d8:8b:97:22:9a:83:48:ef:ee:c7:8c:0e:bc:5a:
         7a:f3:4a:44:1e:36:4a:7a:68:e7:18:72:16:f4:95:95:43:3e:
         6b:1a:b3:89:be:a9:d9:1e:d3:7b:bd:a8:98:eb:2d:fd:f3:d3:
         16:0a:a5:21:4b:08:72:fd:2f:c0:a9:cb:5d:64:46:b7:8f:53:
         ba:c9:0f:ba:e1:7c:3f:6a:20:8c:d9:8b:77:8b:a6:27:1c:22:
         b7:5c:a9:c9:32:60:4e:93:dc:f8:24:24:92:1d:20:12:51:02:
         3f:98:a9:46:dc:72:e4:a2:91:cb:8d:22:b9:4f:81:1c:e0:20:
         30:79:a6:a2:fa:d9:a7:1d:70:14:7e:1a:ad:67:79:3c:4a:4f:
         cb:02:3f:b3:fe:e3:5b:6b:23:40:ff:71:00:1b:85:d8:eb:6e:
         91:b2:2e:ac:ca:a5:ed:3f:eb:1a:bc:c8:87:f5:6d:41:66:60:
         58:1a:4e:49:ca:e2:63:3a:3e:97:a8:60:bc:77:48:06:e0:be:
         dc:cc:57:92:2b:00:05:73:7b:3c:3a:d8:b7:b1:4a:05:1c:cf:
         b9:36:b6:f4:fe:ee:66:21:dc:b7:af:5f:bc:c8:f8:a1:5d:0e:
         91:13:a6:ef:08:a2:e4:33:ef:ef:60:91:ff:dd:25:b0:50:08:
         f1:32:f6:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIktnqrQTxzVWK2nAYGz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZDczOTlmODc0NzBjM2VhNGU0ZGZkNjk3YTk4YWUyYmQw
MjZmOWMwHhcNMjYwMjA5MTYwMDQ2WhcNMjYwMjEwMTYwMDQ2WjAzMTEwLwYDVQQD
EyhiODRiZGVmYzA1ZjM4N2NiOGNmN2Q2NTExOGQxOTJkZTJlYWU1ZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeX6TB+6ZdXliag29IKmCRaBeBip
p/l7AkKHcyU/hfUTJffCL/a+9KbiI2dNAZvSJi1ctg8X9/ZhYX7K1Y2gepRmyhg7
qe4L4NfF1Ni5mmudO6vyRKvaejWh7H60hTvtU2Roj8L/veRz8Z6NW5QDC/btmNI6
bA0J5K0644romWXVhclCWiO1Fnlu+AKTBObLr3ZtchKXDp+VC6P9qvveVOUT6zL5
98Gw8e0x3SGwNeZsjZCnXoiD2dPz0nePvFdo8/rpll1Tzb5fhdxIbBiig7LphnDo
yBp3ga5o1xvzVvU3EaYGwhMOSaWxSi4Ik+mxgR9OYfrjZBZiNC1VIdAyrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhL3vwF84fLjPfWURjRkt4url1gMB8GA1UdIwQY
MBaAFPzXOZ+HRww+pOTf1pepiuK9Am+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05jNW40ZEhERDZrNU5fV2w2bUs0cjBDYjV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82ZTg4MTYtNTUyYi00OTk2LTlmYzQt
ZGU5MGU5ZTNjYzMyLzEvX05jNW40ZEhERDZrNU5fV2w2bUs0cjBDYjV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82ZTg4MTYtNTUyYi00OTk2LTlmYzQtZGU5MGU5ZTNjYzMy
LzEvX05jNW40ZEhERDZrNU5fV2w2bUs0cjBDYjV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJzn3diL
lyKag0jv7seMDrxaevNKRB42Snpo5xhyFvSVlUM+axqzib6p2R7Te72omOst/fPT
FgqlIUsIcv0vwKnLXWRGt49TuskPuuF8P2ogjNmLd4umJxwit1ypyTJgTpPc+CQk
kh0gElECP5ipRtxy5KKRy40iuU+BHOAgMHmmovrZpx1wFH4arWd5PEpPywI/s/7j
W2sjQP9xABuF2OtukbIurMql7T/rGrzIh/VtQWZgWBpOScriYzo+l6hgvHdIBuC+
3MxXkisABXN7PDrYt7FKBRzPuTa29P7uZiHct69fvMj4oV0OkROm7wii5DPv72CR
/90lsFAI8TL22g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:35 2026 by rpki-client