This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
File:                     noBwLuah3L864lehmUFfWbgzjqQ.mft (raw, json)
Hash identifier:          TTc3bXanzgPatnj9N1IQXh/KmcvmQ7MWeqB/8hEhMP8=
Subject key identifier:   48:7E:3D:27:A3:DA:7E:F5:5F:DD:D6:18:EF:E2:3A:D4:CC:53:10:06
Authority key identifier: 9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
Certificate issuer:       /CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Certificate serial:       019C427E25FE58AC652A01435100C8CC4686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 13:01:29 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:29 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:29 +0000
Files and hashes:         1: 7RZneK1-WhczwVXQZA7asvVmG0o.roa (hash: FToOU7r9z4r8w9cG4+WQTnBdMEmKBFJWnIOgnLoJvLs=)
                          2: noBwLuah3L864lehmUFfWbgzjqQ.crl (hash: brWXlNB8dmFLL3zqctCGAfPZiCjs76ITkWnPEGuF/JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:25:fe:58:ac:65:2a:01:43:51:00:c8:cc:46:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
        Validity
            Not Before: Feb  9 13:01:29 2026 GMT
            Not After : Feb 10 13:01:29 2026 GMT
        Subject: CN=487e3d27a3da7ef55fddd618efe23ad4cc531006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:14:1e:45:34:6a:b2:07:02:cd:da:12:ae:7b:
                    2e:bf:7b:11:da:46:0b:42:a7:42:65:52:1c:94:68:
                    78:e3:f2:3d:83:9b:8a:51:89:16:fd:51:76:25:80:
                    7b:20:56:a7:f0:cf:f8:75:9e:73:c7:6d:28:48:e9:
                    78:fa:f6:bb:24:2f:b1:88:62:1b:fa:72:1c:3b:7e:
                    1b:d6:95:ec:b4:37:ef:41:a1:07:ee:05:e8:5e:e0:
                    38:cf:f8:3f:5e:53:e0:43:e3:05:17:cb:b4:98:fb:
                    7a:bd:34:60:df:30:6a:ee:bf:57:66:33:67:c4:0f:
                    e8:0a:7c:a4:b5:82:35:07:81:cc:d2:5e:d1:85:4a:
                    e9:30:dd:4f:97:a4:99:df:14:80:62:3e:db:f9:7e:
                    00:48:11:e3:b3:0e:1c:e8:87:e7:53:c7:ce:b7:76:
                    7d:81:71:d4:66:26:8a:1d:20:e4:1e:d9:f4:09:fe:
                    e7:e7:78:4d:62:e7:19:4a:97:c7:d4:66:3a:b9:8c:
                    cc:d9:6b:50:42:0a:2d:da:e1:ce:75:29:17:0f:c6:
                    1a:57:21:61:ea:4a:9b:bc:18:20:2b:29:8f:86:9d:
                    2c:e2:99:2c:2a:53:2e:a8:ba:45:fa:40:2a:07:63:
                    4e:55:71:42:b0:7b:8d:70:9e:71:b0:5c:7d:5d:22:
                    fd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7E:3D:27:A3:DA:7E:F5:5F:DD:D6:18:EF:E2:3A:D4:CC:53:10:06
            X509v3 Authority Key Identifier:
                keyid:9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:13:e2:28:eb:9b:10:91:e9:87:bc:60:ab:65:47:0a:d4:
         35:f1:8d:67:5d:3e:d0:b3:ee:f9:88:8a:0c:69:3e:c0:15:b3:
         37:d1:56:81:b6:c1:17:ff:b8:5d:26:e6:f4:56:07:87:b4:24:
         f3:e8:7b:dc:56:5d:7e:3f:12:6e:54:89:32:c6:cc:bb:eb:38:
         ae:b0:24:96:6c:92:d9:9c:0a:d6:39:d8:71:36:67:e7:7b:39:
         91:6d:54:3c:1c:fa:41:b7:39:a0:95:ca:29:ec:07:93:25:86:
         9c:02:4d:3f:ab:af:fe:41:3a:f9:6c:59:a8:ee:f9:5c:0d:58:
         17:f5:5a:0c:46:37:ec:a1:b1:84:f0:17:65:a0:9c:97:1c:14:
         68:c4:0d:aa:67:86:3f:aa:67:8d:10:62:dd:47:5d:98:6a:fd:
         e1:41:14:9e:38:d1:fb:07:a1:f2:e3:52:72:11:21:94:f3:66:
         8a:60:10:78:63:01:94:48:cd:63:de:0e:07:ea:9a:25:de:1a:
         fb:88:40:e3:3c:ce:c2:71:d0:23:26:93:dc:30:67:36:66:97:
         29:20:1c:5a:f4:8a:c7:7e:e4:ee:07:cc:f2:4a:7a:44:fc:ff:
         54:e1:60:bb:e4:9b:f1:b6:0f:ce:f3:67:13:1d:42:34:fd:fb:
         63:11:e3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:54 2026 by rpki-client