This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File:                     rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier:          a3xJXOT72sJ1KV3J4qVbkqpx1bgby6gr2Jaxw3kNEOw=
Subject key identifier:   F4:02:41:AF:9C:B6:97:E6:AF:34:C5:51:E5:58:CB:B3:BE:83:DD:F7
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer:       /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial:       019C42EB0B0EC4125221BDE9DAF132B08982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number:          0E9F
Signing time:             Mon 09 Feb 2026 15:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:25 +0000
Files and hashes:         1: lspkwJT88HzimvAJv3qctC-BJ3Q.roa (hash: egyKq59ztseKxvGFJSFIE/3NMX0yyNxg5wnFnieS1nE=)
                          2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: jbVSECn6XasQNDgMH44So1y9CHOVz3CpG0F+WCh4f5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:0b:0e:c4:12:52:21:bd:e9:da:f1:32:b0:89:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
        Validity
            Not Before: Feb  9 15:00:25 2026 GMT
            Not After : Feb 10 15:00:25 2026 GMT
        Subject: CN=f40241af9cb697e6af34c551e558cbb3be83ddf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:34:ac:e1:de:23:c7:bd:c5:0a:21:83:52:
                    b0:c1:f9:e6:ce:23:13:7d:75:7c:53:1d:d9:5a:0b:
                    d3:86:27:9c:c1:b5:a5:b8:f5:4f:3d:9a:69:21:2d:
                    71:ac:b2:5b:01:c7:70:7f:c6:d1:03:3f:59:53:4f:
                    10:1f:01:03:68:b3:9f:2a:e2:a2:2d:f1:24:9a:74:
                    8d:23:46:e6:91:81:43:0f:5b:01:5f:6a:7e:8d:12:
                    a4:03:94:24:f0:79:bb:23:11:4e:02:d8:e7:74:30:
                    f1:46:65:f1:2d:db:e9:88:24:49:9a:e3:ae:0e:15:
                    66:7b:43:a3:b7:f2:75:35:30:df:71:bc:66:e6:8c:
                    c3:45:5a:75:22:23:47:a3:74:35:82:91:be:0e:5e:
                    6e:6f:f1:f4:09:27:8b:5b:2c:ba:d4:48:61:53:4d:
                    97:84:af:d3:43:7d:5f:25:64:31:7e:9e:d2:79:8b:
                    60:a0:62:e4:93:ce:c5:fa:d8:3f:7f:3a:20:73:d0:
                    fd:1b:a8:46:11:6d:88:ff:5f:16:7f:89:ac:14:48:
                    7b:c6:55:d3:07:f8:0b:a0:ad:c7:84:f4:cc:0a:65:
                    f8:05:38:5c:86:96:a2:1a:2e:f1:88:98:73:ac:15:
                    40:ef:67:39:3f:b1:9b:29:15:a2:51:15:5d:0a:df:
                    8c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:02:41:AF:9C:B6:97:E6:AF:34:C5:51:E5:58:CB:B3:BE:83:DD:F7
            X509v3 Authority Key Identifier:
                keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c8:b0:5c:dd:17:fe:b6:58:82:b5:14:de:56:30:5c:1f:b0:
         38:52:2f:c3:91:ee:4f:33:7c:81:93:02:8b:36:a6:1b:dd:bc:
         98:05:70:54:20:7e:bd:84:bf:6c:03:46:ff:14:8f:56:f2:ce:
         ad:d5:b4:5e:1f:e9:91:19:8e:66:a8:d1:15:7b:a3:01:0c:0a:
         b2:32:0f:ca:45:1b:9b:e2:fb:6c:40:c8:4f:52:73:d5:8b:42:
         f2:ed:bb:a8:1f:6a:09:9a:84:d0:39:4a:51:c8:5f:b0:f2:2a:
         44:0c:de:7a:e0:51:2a:c9:e6:57:73:fd:83:3d:fd:97:c7:ac:
         2c:7b:aa:e3:13:ee:ce:5c:50:d9:3e:08:90:2a:e2:a4:9f:d2:
         63:ba:ca:92:ba:fc:23:bd:74:44:c4:4a:84:cb:ed:fa:26:a9:
         60:56:65:69:8e:e7:77:87:d3:f9:3f:54:68:ab:4f:ff:e9:3a:
         d4:5a:4c:ed:bc:6a:90:b3:a7:d0:be:3b:d0:a8:e9:45:be:6f:
         b8:8f:79:5b:e6:9f:24:2b:d3:b5:18:55:9b:e7:ee:92:ae:58:
         aa:d7:ed:f1:d4:cd:90:f2:8f:8e:4a:d2:f2:2f:7d:4a:36:90:
         5a:cb:63:08:36:e6:04:9e:d8:b3:c0:96:d6:7e:e6:a4:04:3c:
         a3:e0:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:43 2026 by rpki-client