This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
File:                     nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json)
Hash identifier:          kY321LGJuB6kT2mY9sMLDZyLchqWVxsT5hqgjUjyyEQ=
Subject key identifier:   ED:C2:7B:DA:AF:37:D9:F4:89:21:67:48:F5:D3:D0:38:97:74:5B:04
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Certificate issuer:       /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial:       019C4359306D34D5BC02F8D04492C2258BCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 17:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:44 +0000
Files and hashes:         1: QauSGlJ_V7eDjQwLtjrLDM7ifeE.roa (hash: pWnYTWGXtI/oxodZeq42dkklZsoJ2yK1DD9grTXZlOs=)
                          2: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: MNrUYS0s9NZKbjjUTZzS/HAyfbK9tUZe0E5IiIE7SVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:30:6d:34:d5:bc:02:f8:d0:44:92:c2:25:8b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
        Validity
            Not Before: Feb  9 17:00:44 2026 GMT
            Not After : Feb 10 17:00:44 2026 GMT
        Subject: CN=edc27bdaaf37d9f489216748f5d3d03897745b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3d:d4:08:f2:f8:7f:c8:5b:71:1a:33:a5:c5:
                    9b:73:9b:b9:ad:ca:b9:40:d9:09:c8:d5:25:5b:eb:
                    50:c9:22:82:1b:56:4f:bf:05:60:e2:21:ae:dc:4a:
                    9d:b8:e9:c9:be:5c:28:51:77:2d:bd:64:75:2c:8f:
                    7c:7e:76:c8:96:ac:ac:d1:03:04:d6:e5:a8:3b:3e:
                    11:3e:d0:99:6d:d5:13:52:b5:82:09:08:2b:fb:54:
                    90:05:73:18:ff:70:6b:ac:8d:09:16:f9:c3:02:10:
                    b3:c1:64:a8:d3:fc:4b:20:02:84:95:25:d3:2d:8f:
                    9c:6e:d3:35:bc:73:04:28:0b:72:42:8e:8f:4b:66:
                    4e:53:83:df:ab:ce:61:eb:34:39:b4:ac:d7:b9:6e:
                    3f:7c:61:a0:bd:39:75:53:ef:03:ac:50:cf:3e:c0:
                    ce:13:a0:ab:32:72:62:66:17:d4:18:6d:94:87:50:
                    d6:a0:94:7f:76:71:75:86:b8:95:85:28:86:c3:95:
                    5a:8f:fa:75:94:76:64:b8:ac:55:16:eb:29:d1:f4:
                    d6:72:f0:3a:aa:a8:55:02:9d:60:67:06:10:08:71:
                    c1:86:bd:94:10:f7:0a:06:f0:4f:32:69:5d:f7:42:
                    73:37:7d:db:d5:06:1b:4c:f7:12:11:02:b6:20:b2:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C2:7B:DA:AF:37:D9:F4:89:21:67:48:F5:D3:D0:38:97:74:5B:04
            X509v3 Authority Key Identifier:
                keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:aa:0b:07:ea:0d:97:be:46:73:df:a9:9b:f6:09:0a:ec:77:
         9d:d1:dd:45:0b:c6:f7:e5:37:1f:15:5b:e6:04:20:e8:bc:7d:
         06:98:94:2b:ea:a1:45:1a:ce:25:7f:d5:b7:97:b8:2f:48:e9:
         c4:1c:ed:65:8f:68:ab:90:19:dd:f1:14:d4:3c:ba:c5:c8:ea:
         c8:49:4c:a2:43:69:03:dd:e0:f7:73:23:be:5e:92:14:c8:ed:
         6b:c9:50:05:37:27:19:8e:98:15:b0:e6:ab:f8:f7:36:b8:2a:
         df:f4:c1:14:89:5e:2d:81:a9:b0:0a:af:d9:ff:26:a4:4d:1d:
         d8:6d:a8:95:b2:14:7b:13:e7:c0:21:fe:31:28:71:38:eb:02:
         a7:4b:aa:f2:3b:02:5a:60:66:7d:82:1f:f1:69:55:94:2f:8f:
         9c:88:65:ba:d9:9c:f2:05:65:94:ba:65:8a:d5:78:1e:94:43:
         4c:d8:9f:02:33:43:2d:7c:55:06:4f:d2:b1:da:cf:1d:f3:90:
         a9:ba:96:0e:d2:33:b9:59:4c:90:3d:3f:a2:03:87:82:60:93:
         0b:bc:30:f4:77:99:84:d6:87:63:d7:a6:22:5c:98:15:c2:b7:
         f0:8a:ff:25:6c:04:b7:a4:07:ab:31:87:ce:80:59:aa:3d:09:
         78:6f:92:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:23 2026 by rpki-client