This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
File:                     nwM4t9tUQAKUEDl1Fckw60UtdbA.mft (raw, json)
Hash identifier:          q2fqKdruXow4YvDAJCkytL/XraFuTHybEhqB0hdVgV0=
Subject key identifier:   BD:76:67:56:23:B1:37:F0:16:2C:6D:AF:B0:91:3F:A9:24:61:7C:B8
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Certificate issuer:       /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial:       019C42100B51941541B2753E8F85E83EA5E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 11:01:13 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:13 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:13 +0000
Files and hashes:         1: G_PF0dcvSh0twz3bDtykxA8n4vU.roa (hash: BuA1eaUoYFwCSmkQRdg21HY9Ijqx+wmJ9LSjgaoMGKo=)
                          2: nwM4t9tUQAKUEDl1Fckw60UtdbA.crl (hash: AtifYN2XL/DW2y3NtnZt/7LkQnyaCl4bsIG6cCyBlsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:0b:51:94:15:41:b2:75:3e:8f:85:e8:3e:a5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
        Validity
            Not Before: Feb  9 11:01:13 2026 GMT
            Not After : Feb 10 11:01:13 2026 GMT
        Subject: CN=bd76675623b137f0162c6dafb0913fa924617cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:90:6c:bb:b1:e6:84:e0:0a:13:cc:97:30:
                    ed:83:a0:c3:ce:38:bf:62:98:03:c1:3f:5e:98:53:
                    66:af:59:cf:28:f5:90:38:26:56:d1:1d:49:24:a6:
                    15:96:97:59:ae:ff:58:08:2b:b1:5e:38:21:71:c2:
                    00:51:b6:1a:a4:98:b6:98:a5:ee:57:f3:54:af:21:
                    a7:41:11:8c:f2:94:07:ae:3b:ea:84:1e:f6:c2:4b:
                    ff:0d:82:41:21:b6:18:da:70:fc:a4:cd:88:e8:f3:
                    ba:b7:07:e8:57:55:1d:a6:c7:75:76:2f:4b:16:bf:
                    16:27:4c:c4:4b:b3:07:f8:50:45:2a:46:24:ac:0c:
                    ba:5b:c9:9c:c3:db:f7:86:f4:05:f4:6d:35:a8:c7:
                    06:60:57:89:25:80:7c:e9:40:ba:d0:50:64:d2:e6:
                    d1:ca:f0:b5:b2:de:0c:83:cc:20:16:4d:a6:a8:44:
                    87:b0:10:74:e3:87:27:25:9b:0b:de:90:64:c2:4b:
                    f6:c5:8b:30:b2:b4:c2:09:b2:3e:a0:9b:7e:c3:50:
                    81:00:ae:79:69:f5:1f:b9:dd:6a:f0:8e:eb:c4:3b:
                    a8:a1:f3:f0:42:d2:67:36:81:85:31:d0:bd:a6:03:
                    7a:09:35:a1:93:c7:54:bd:19:be:e9:3b:e3:c8:0f:
                    d6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:76:67:56:23:B1:37:F0:16:2C:6D:AF:B0:91:3F:A9:24:61:7C:B8
            X509v3 Authority Key Identifier:
                keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:30:97:41:04:ea:e7:b0:4c:0f:6d:12:5b:78:3d:b2:40:54:
         b8:22:2a:f6:38:6f:f1:8d:ad:95:df:f3:76:fb:3c:3a:77:c1:
         9a:3e:7a:78:d8:ac:9f:2e:e2:fa:35:eb:b6:76:e6:44:45:10:
         a0:7c:ed:00:18:97:76:27:ec:1b:6d:4e:db:d1:01:11:15:1d:
         4b:48:22:16:75:22:37:fa:a7:fa:c4:bd:1f:be:45:5b:7d:44:
         3a:85:f9:e3:8f:47:a3:eb:13:a4:27:f7:5a:41:2b:7a:76:2d:
         a5:8e:4f:24:fe:cc:13:3d:31:3d:d0:2a:72:a3:2c:f0:00:c6:
         e7:3c:bf:42:37:8a:1f:cc:ff:55:1d:d1:6d:10:e0:35:e4:d7:
         ac:0d:4a:62:06:59:fb:d6:a9:e3:b2:f8:22:62:67:6a:b1:42:
         a5:eb:f5:f5:fe:81:23:95:9b:58:74:6c:9c:7b:d0:1e:61:3a:
         6d:ce:1d:42:c4:6d:e3:dd:a0:a6:66:21:d8:38:ca:a6:23:64:
         62:f3:e9:a8:3d:20:43:bb:fd:42:2b:4a:ee:83:c4:ca:12:77:
         1a:f1:cc:80:cc:c5:0c:de:77:ac:5c:85:12:cb:f6:7a:f8:e7:
         ee:3d:a2:d9:3b:27:26:44:5e:c7:71:df:0e:91:6a:f6:68:81:
         bd:ff:51:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:51 2026 by rpki-client