This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File:                     nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier:          EgoslgwtFMim/G2y7I3Kx9Ar2/iPohbONvMTwPK5GIM=
Subject key identifier:   B4:28:70:F7:E5:A0:91:BC:74:DF:5B:B6:CD:61:D5:C9:BC:8D:02:D3
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer:       /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial:       019C420F1E81E93386281C28DAF5A865FF22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number:          0335
Signing time:             Mon 09 Feb 2026 11:00:12 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:12 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:12 +0000
Files and hashes:         1: aEsAz-RDqEznuIbxt7y2qnbw6Wg.roa (hash: MGY1l5IuLzWSoi1tizbmZg/Thwy4jCozOM2pGrkUxNc=)
                          2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: EmF8ScSb7qTH7Ym0wQmlzIwlM5329zUj+chHrXQU3+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:1e:81:e9:33:86:28:1c:28:da:f5:a8:65:ff:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
        Validity
            Not Before: Feb  9 11:00:12 2026 GMT
            Not After : Feb 10 11:00:12 2026 GMT
        Subject: CN=b42870f7e5a091bc74df5bb6cd61d5c9bc8d02d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:7f:a9:48:2e:4e:c2:dc:ba:99:78:59:e0:
                    a1:2c:b5:38:a9:11:0a:4d:5c:49:84:fe:4f:78:ee:
                    a1:54:29:72:42:8d:8f:24:de:20:c4:0d:2e:df:ed:
                    b4:f4:29:c8:4c:cb:b2:a9:ef:5d:ab:ea:15:b4:eb:
                    c1:df:19:f9:65:c1:df:cb:e0:6b:5e:6b:18:36:5a:
                    ac:f4:41:ac:84:ad:02:57:3f:19:95:c7:9a:88:13:
                    8e:8e:d9:e3:16:9c:c7:2d:42:8d:fe:c7:2f:b5:8d:
                    ef:95:0d:1b:ae:4b:bf:8d:2a:20:b8:c7:e5:62:8e:
                    8d:60:48:fb:99:29:3a:dd:c5:df:37:93:20:3c:3a:
                    a6:bb:33:22:d6:22:99:cf:ea:af:11:85:9d:b9:3c:
                    0e:48:90:e0:56:55:78:9e:2a:95:01:81:62:a6:6e:
                    87:d4:f5:90:4b:d5:56:1f:07:98:e6:32:22:ec:a4:
                    cc:9c:6f:59:2d:f0:00:5a:5a:10:c0:4f:c8:01:72:
                    98:9c:0b:86:9b:9b:1a:d7:a1:a4:46:fe:2c:7c:94:
                    8f:83:8b:20:ed:30:d3:2b:74:7f:0c:0e:14:f3:91:
                    69:2e:3e:ff:db:38:11:b4:f2:9f:1d:a4:ec:8b:6c:
                    b5:d2:c1:3c:73:0b:8d:91:fd:14:89:2e:11:e6:e2:
                    f3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:28:70:F7:E5:A0:91:BC:74:DF:5B:B6:CD:61:D5:C9:BC:8D:02:D3
            X509v3 Authority Key Identifier:
                keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a6:f2:f0:e1:fa:7b:c5:7f:9d:cc:cc:9a:d6:c4:62:29:aa:
         8e:d7:f7:b5:ac:c7:99:af:fc:2e:fa:74:8d:14:cd:84:b0:f5:
         57:87:cf:fc:27:56:42:54:02:ab:15:78:22:d8:03:25:ef:74:
         7a:43:72:24:af:83:da:27:14:a8:15:37:1a:39:1b:6d:41:39:
         ca:92:2b:7f:bc:2d:4b:bd:fd:db:35:7b:12:35:20:77:9e:1c:
         8b:ce:28:1a:6c:cd:ad:b3:3b:c7:93:9b:07:9f:41:33:56:1e:
         4b:cd:38:8c:6e:0a:1d:81:3f:ea:0a:61:6a:f6:91:3d:fe:90:
         1e:21:17:ca:fc:25:3e:8d:d4:a5:bb:61:78:b6:01:00:40:73:
         12:c9:c1:f6:1e:f7:4c:a5:bd:5a:e5:49:b2:fa:aa:85:6f:23:
         f1:f8:f1:22:d5:d3:a1:d7:9c:58:6d:05:88:81:18:48:24:94:
         13:07:f4:a6:08:86:1b:bf:88:da:2c:47:cc:30:86:b3:d0:ce:
         55:d0:7c:4c:45:aa:e9:d0:d6:7a:9c:ca:01:f4:2b:01:77:59:
         59:76:ad:a9:8a:0e:a5:7c:6a:3e:2c:ca:60:f7:07:df:31:3d:
         49:4d:35:5d:7a:8a:11:fb:38:eb:a8:5f:3f:e1:f1:ad:b8:a5:
         36:ed:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:21 2026 by rpki-client