This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File:                     nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier:          EvLNaoAjP17xJ1zdxhvYgUzhjwXfny7Ad5u56nNqVQQ=
Subject key identifier:   77:31:C8:8B:36:CB:5E:62:98:A0:29:F8:C4:EF:44:5E:3A:F8:36:B4
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer:       /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial:       019C43904944FD4C2F97366C94E1C3901580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 18:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:55 +0000
Files and hashes:         1: K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa (hash: qsG/IhEYDQQMIteOO+oU9qaNoWlYDMHDQu6BGiFFiUQ=)
                          2: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: Wtf4iaBlQbdn5+uOo9juZzkI/n11pQh2tLzuIoidMrc=)
                          3: viORdHUyF0zVxNz0mvDIvz7yXPg.roa (hash: I5UWTS5/9uqWU1okuiMu8r2OvTeAiLPa5m+dAhApSvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:49:44:fd:4c:2f:97:36:6c:94:e1:c3:90:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
        Validity
            Not Before: Feb  9 18:00:55 2026 GMT
            Not After : Feb 10 18:00:55 2026 GMT
        Subject: CN=7731c88b36cb5e6298a029f8c4ef445e3af836b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9d:b1:9e:ac:37:5f:a5:53:14:b6:f1:d5:77:
                    5a:1b:d0:b8:0b:8c:28:4f:98:b7:5b:23:f8:e0:61:
                    98:ab:10:e7:5f:9c:f1:31:9c:81:1a:f9:2d:65:b7:
                    38:30:0a:db:bb:0b:16:8a:ac:ce:35:d1:43:e8:5f:
                    01:6b:f4:3e:d3:7f:d4:9b:9e:5d:dd:3d:53:25:14:
                    74:e3:56:c2:0c:b8:57:93:56:07:25:01:11:ee:3a:
                    97:da:12:da:c9:65:a8:ec:44:3c:fa:b6:fb:5f:87:
                    7e:a9:77:bd:6f:51:b6:b8:a8:a6:32:cb:fc:6c:dd:
                    81:19:52:5c:37:a5:50:ca:52:1f:81:9a:25:41:52:
                    29:ac:38:20:ca:b1:6a:25:cb:5c:77:ce:6c:91:14:
                    42:d9:5b:ad:cc:80:61:fe:75:5d:08:24:12:29:15:
                    37:d1:29:51:8b:33:ec:c6:c5:be:8e:05:29:fb:b4:
                    53:45:a7:27:02:bc:64:94:9b:50:73:53:af:82:47:
                    42:75:80:de:4f:45:ef:ed:c0:6d:41:c6:8d:8b:32:
                    55:d6:2d:46:c2:03:e6:59:74:68:2b:04:b4:c3:d0:
                    08:fd:c6:ee:86:34:e7:7d:68:64:69:5a:25:c2:71:
                    41:55:93:48:5b:23:dd:6c:ff:ad:cf:f0:fa:6e:f5:
                    70:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:31:C8:8B:36:CB:5E:62:98:A0:29:F8:C4:EF:44:5E:3A:F8:36:B4
            X509v3 Authority Key Identifier:
                keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b0:dd:1a:60:7f:9f:fb:14:13:df:7d:47:03:4d:53:71:ba:
         8a:de:07:da:4e:e2:09:d4:1e:f0:46:79:00:35:7b:f5:0a:62:
         39:1f:12:f5:d0:a7:98:9f:70:20:26:26:48:6a:22:68:2d:cc:
         e7:5a:4a:14:50:5d:67:cc:f4:c7:a8:93:31:69:5f:8b:0e:f6:
         01:b6:b2:5d:f8:8c:c6:c7:4d:eb:b5:5b:fe:02:1c:d9:bb:ad:
         6e:d0:93:02:ca:bd:8a:2e:f9:54:4a:76:83:c6:a6:cd:d7:75:
         1a:32:47:46:8a:49:dd:11:7e:db:81:b1:aa:1a:e0:a3:ff:14:
         84:b0:cc:3b:c7:ca:ad:d0:09:79:dc:e9:7c:12:b5:55:f5:cd:
         4c:bf:11:54:d5:0d:78:51:2d:7e:b6:e5:94:25:db:a9:f8:6c:
         04:68:3f:cf:41:d7:07:b4:5d:38:17:0b:04:a4:50:90:64:02:
         83:25:55:0f:f6:c4:71:f6:f9:35:82:53:51:7d:22:25:ea:68:
         35:b1:df:1e:9e:55:a0:85:cc:fd:37:ee:89:dd:58:dd:72:00:
         55:fa:18:19:31:15:59:29:26:b9:aa:cc:58:95:04:0d:d1:af:
         d1:e2:f8:65:0f:5d:4c:dc:9a:17:ec:7b:be:c0:ea:fe:66:1b:
         ff:92:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:00:20 2026 by rpki-client