This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File:                     NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier:          nM/2K1CIJWS+4TUhFsIhi4tOU1+hopP7hgOAju2ZJe8=
Subject key identifier:   C2:DF:78:76:93:61:AF:62:15:57:3A:53:2B:FC:14:5E:CD:DE:2A:8F
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer:       /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial:       019C4358DBAEB261BDF9534CC37B72880DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 17:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:22 +0000
Files and hashes:         1: LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa (hash: 63IcTifvN7GIBHWbBH7b1IB+sm33d6kXpSsxO8UgQ20=)
                          2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: ZnV4YVss3r0Gb4hZxKlQwi1Vo8DMzl6fWB4oci61rT4=)
                          3: nAYbbcKPFybTolioZUuHNTDXSns.roa (hash: G2BPAGwcm8vlEODkeUJvlJFoh73yV7+X0s3ozIpcRZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:db:ae:b2:61:bd:f9:53:4c:c3:7b:72:88:0d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
        Validity
            Not Before: Feb  9 17:00:22 2026 GMT
            Not After : Feb 10 17:00:22 2026 GMT
        Subject: CN=c2df78769361af6215573a532bfc145ecdde2a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:8e:53:82:c2:3e:8d:72:36:13:93:91:97:
                    31:e8:0e:67:56:3e:be:67:19:38:d9:58:25:0a:4d:
                    13:fd:1c:bb:63:61:25:c4:78:6a:d1:2d:9f:cd:dc:
                    d5:85:5e:6e:5a:03:77:8f:6d:2f:d3:05:8a:83:30:
                    9c:de:5d:6b:9d:64:b1:a4:a8:71:8f:18:eb:b3:7a:
                    72:63:60:f1:df:35:d5:85:ca:0f:65:9f:da:a5:29:
                    2a:32:ff:86:7d:37:e9:ed:cb:e3:17:1a:c7:b3:e9:
                    3c:f4:0f:77:43:3d:57:a7:3b:da:d9:3e:24:aa:70:
                    ad:b7:99:e4:43:7f:04:5d:4c:9a:d8:36:86:52:ea:
                    3f:e5:95:2f:72:63:c0:d7:d0:ec:9f:1b:d1:5a:4c:
                    c1:9a:9f:3a:ec:2c:2c:e0:f6:ac:8b:96:fc:f4:99:
                    f7:85:d1:2b:fe:ee:04:46:0c:1b:bd:39:32:45:30:
                    d1:63:79:4a:57:42:38:b2:43:07:1c:d7:e2:90:c6:
                    5a:91:28:5f:1f:fe:3b:88:3a:47:00:2e:5b:61:0d:
                    96:4a:25:7f:b7:ce:2d:0e:50:e4:2f:4d:49:45:a6:
                    b6:d1:23:50:ad:27:a7:c8:42:54:e4:8b:23:c3:bf:
                    fb:9e:70:a4:74:d8:a3:51:b0:aa:d7:6d:16:32:15:
                    82:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DF:78:76:93:61:AF:62:15:57:3A:53:2B:FC:14:5E:CD:DE:2A:8F
            X509v3 Authority Key Identifier:
                keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:45:e2:55:f4:0e:22:65:39:0c:db:8e:8b:aa:07:f4:58:50:
         4b:d3:3e:e9:dc:6b:c5:82:c8:6f:a0:22:3f:20:44:c1:8b:63:
         a1:9e:25:cf:91:78:77:35:0a:13:76:4d:58:88:18:d2:16:de:
         e2:c6:40:7e:b0:3e:51:42:90:35:5e:e5:ef:48:15:66:11:5a:
         fb:1d:11:66:f2:20:7a:3a:6a:0e:b7:64:08:7c:8c:04:a1:a9:
         ce:6b:49:79:07:77:d4:a6:48:30:cc:a2:66:a3:33:37:93:0f:
         c2:7a:9d:d6:d1:6a:20:d5:3e:e0:dc:c9:e9:f3:45:32:eb:0a:
         8e:c4:e7:11:97:81:10:d2:36:2f:08:ad:dd:65:77:33:e2:a9:
         93:07:8e:d2:f4:ec:4f:f3:6b:92:c3:26:b9:f6:fd:c8:c9:5a:
         1c:59:64:bb:d0:e3:a2:24:a0:97:ca:f6:ce:c7:18:bb:47:b6:
         7f:53:f7:57:7c:1f:8f:a8:c3:4a:fe:c2:a2:ea:a1:e0:94:62:
         61:35:80:5a:ad:dc:c7:56:96:bc:92:26:1a:df:15:47:49:db:
         61:cc:a4:aa:3e:1a:70:9a:13:b9:f7:70:be:cc:93:02:98:cd:
         f4:c9:cb:f6:e4:e8:90:f5:43:0c:57:2c:92:05:7e:dc:47:b3:
         c1:1a:24:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:03:27 2026 by rpki-client