This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
File:                     NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft (raw, json)
Hash identifier:          iCU9MdfRRd9PihB/eSa0NHNFMszKBxPro5FksdPME0Q=
Subject key identifier:   95:1B:2E:93:B5:79:93:74:42:8E:E9:12:14:C8:26:07:32:53:BB:03
Authority key identifier: 36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
Certificate issuer:       /CN=360c5935e51fe706c2447519d9b5f95ae363c186
Certificate serial:       019C420F2A2BCF7879FFDA5CA8FD51FFD915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
Manifest number:          13BD
Signing time:             Mon 09 Feb 2026 11:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:15 +0000
Files and hashes:         1: JEZzvSEhk9Rpppc7_JlZ8YDdHPU.roa (hash: 4z0GMSU1lSLpdGVWcEmJSBzIO5NLCUQwZ5krieoKIEM=)
                          2: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl (hash: 8BNZtXIiSvIZHq49eh+I9pP0iVBEBbOwHPo7viAxoik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:2a:2b:cf:78:79:ff:da:5c:a8:fd:51:ff:d9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360c5935e51fe706c2447519d9b5f95ae363c186
        Validity
            Not Before: Feb  9 11:00:15 2026 GMT
            Not After : Feb 10 11:00:15 2026 GMT
        Subject: CN=951b2e93b5799374428ee91214c826073253bb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:e6:bd:19:c1:40:82:fb:a4:54:ef:f3:e4:
                    e2:15:5b:46:00:ce:28:36:4f:ff:ac:eb:68:25:e0:
                    15:ca:86:5e:18:66:d3:59:1c:b6:bd:30:bd:db:c9:
                    8f:8b:00:26:cc:68:d3:0d:1e:f7:4b:d4:e9:c2:bd:
                    b7:a6:49:df:b3:d5:75:a9:f2:7b:98:e5:37:f8:71:
                    15:db:56:cc:f0:b5:e0:d8:dc:95:eb:60:2a:f5:c0:
                    8e:22:df:bf:8a:03:b3:70:3f:56:84:61:56:ea:c2:
                    68:e5:f7:d5:87:aa:a1:d2:33:64:23:f7:cb:63:6d:
                    8b:dc:a4:57:4f:22:5f:f0:e7:78:5d:1b:d2:8f:33:
                    64:c4:eb:37:73:2e:e2:95:25:a1:6c:52:63:cc:21:
                    27:a6:40:bb:27:6b:3a:2f:09:e1:19:63:41:9e:1d:
                    3b:e6:c8:7f:b1:26:25:3a:5e:97:4e:ac:37:82:b7:
                    3d:c7:43:dc:92:2b:fe:bb:da:c0:59:61:60:7c:e9:
                    e1:6a:3a:aa:fd:27:e5:96:aa:18:18:72:94:49:72:
                    33:ad:39:01:77:dd:ce:d1:fe:48:9c:78:d2:d8:db:
                    b8:3b:04:8f:38:11:00:d3:ec:6f:c7:c0:78:bd:23:
                    d6:ac:c3:d8:ef:b2:98:94:f8:d2:8b:37:ed:7e:7b:
                    6d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1B:2E:93:B5:79:93:74:42:8E:E9:12:14:C8:26:07:32:53:BB:03
            X509v3 Authority Key Identifier:
                keyid:36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3a:40:f5:5a:ff:cf:aa:8c:cc:b3:95:4f:09:48:81:2c:bb:
         77:c4:fc:90:ae:25:b9:27:81:2d:1d:d5:84:d3:b8:72:5f:d8:
         a7:a2:bf:d5:7b:39:57:f7:14:b8:e4:e5:38:c7:c3:ea:ff:fb:
         0d:50:da:da:bf:d3:14:d3:b1:1e:e3:95:b3:09:77:1f:84:d1:
         0b:5d:4c:5b:2f:47:74:70:87:bb:9f:3d:96:d4:10:b2:7e:16:
         96:eb:e6:79:32:99:3e:5e:fa:e8:a5:f0:92:a0:76:ce:86:5f:
         83:06:5b:63:f1:b2:71:76:e6:7c:18:b1:b6:cc:bd:e1:55:6b:
         d1:45:11:92:30:41:41:a2:6f:2e:5f:66:f4:31:a7:f8:25:17:
         c8:42:99:75:f7:0b:39:96:72:8e:6b:86:71:ec:31:f5:5c:49:
         6c:f1:99:c5:45:ec:e9:f5:4f:95:6b:fa:71:67:e7:2c:79:07:
         37:68:6d:de:5b:03:5d:7d:90:18:f2:ed:a4:95:8f:7e:bb:2e:
         1f:3f:50:3a:3a:58:e0:f0:0d:7a:1e:43:2a:ca:a5:a9:56:de:
         20:e5:e7:7d:5d:4a:1d:a3:e3:7b:f3:b4:92:7f:ea:d2:ff:0c:
         97:7c:4a:3d:5e:eb:07:ad:58:a6:9a:27:d5:9e:51:75:e7:4d:
         02:a1:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:16 2026 by rpki-client