This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
File:                     nuxqatPVR_hR05uGb7FAn6GXL78.mft (raw, json)
Hash identifier:          87kl9Dd8oh1/JW6SpSokybVhYTiFX9pO/YddP6LTk0Q=
Subject key identifier:   FE:F1:3F:55:29:71:E3:68:6A:A6:48:94:1F:34:27:F8:FC:88:F7:D6
Authority key identifier: 9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
Certificate issuer:       /CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Certificate serial:       019C4321DC04D4C0B026A6C843416663E269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
Manifest number:          180B
Signing time:             Mon 09 Feb 2026 16:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:18 +0000
Files and hashes:         1: nuxqatPVR_hR05uGb7FAn6GXL78.crl (hash: vuiH2S4ueMNWpqwrZlZcRC7Hb7LkwqrIYMgIiFBDq00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:dc:04:d4:c0:b0:26:a6:c8:43:41:66:63:e2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
        Validity
            Not Before: Feb  9 16:00:18 2026 GMT
            Not After : Feb 10 16:00:18 2026 GMT
        Subject: CN=fef13f552971e3686aa648941f3427f8fc88f7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:19:2b:db:e9:47:75:09:20:4c:3e:e6:6d:
                    49:0c:09:e0:c1:04:a3:02:49:c8:d5:67:94:fc:ce:
                    bd:2d:ef:35:e9:45:9b:e0:1f:71:9d:82:76:31:62:
                    7a:dc:30:99:4f:af:01:9f:27:4a:36:6d:c4:1d:99:
                    2d:9a:12:c7:ea:b4:21:07:04:25:d5:5f:d0:e4:60:
                    b9:15:dc:dc:fe:40:ad:d7:c5:e2:2b:db:88:c2:0c:
                    b5:6a:54:9a:fa:d1:82:34:21:58:a3:7b:ff:3a:92:
                    c1:9c:b6:73:76:7f:2e:bf:36:ff:7d:0f:76:d0:7c:
                    7b:7c:46:43:f1:df:f2:52:f1:60:03:88:0b:ec:92:
                    d8:63:d7:13:b2:6e:3c:61:32:a4:f7:90:26:54:fd:
                    ca:f9:34:86:86:1b:c9:20:84:6f:a4:45:a1:a9:ab:
                    d3:19:92:d7:10:d4:96:00:1c:45:84:b8:e6:1b:b4:
                    5d:c2:37:1d:35:6f:bd:13:c1:bd:ac:b3:35:67:11:
                    1f:28:c2:1f:90:41:26:98:21:a3:26:a9:05:da:82:
                    d0:05:c0:91:bd:b3:4b:17:11:9e:33:12:20:16:33:
                    22:04:a9:31:97:d7:68:77:95:33:d9:ee:71:e8:b5:
                    03:5e:2f:2d:56:c6:a6:ed:fb:d3:c3:bf:c5:47:79:
                    69:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F1:3F:55:29:71:E3:68:6A:A6:48:94:1F:34:27:F8:FC:88:F7:D6
            X509v3 Authority Key Identifier:
                keyid:9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1a:a2:45:05:ed:66:ad:6b:23:15:2a:19:a7:6e:20:b2:3b:
         f8:2f:77:c8:57:0b:6a:3d:ff:85:01:f0:61:38:60:87:50:ed:
         96:57:b3:8e:d0:7f:35:dc:c7:2a:64:01:c9:02:d0:d3:62:80:
         30:18:69:27:4a:62:bb:cb:89:31:53:67:7e:5c:92:0e:db:dc:
         37:f8:d7:80:0b:fa:ed:e2:13:1d:e3:6a:5e:12:9d:56:7f:ce:
         4a:d4:cd:ea:1c:3a:2e:cd:b1:e1:ef:d7:d3:53:4c:d9:1f:20:
         32:ad:92:03:80:4c:f3:eb:f8:7d:70:5c:d7:91:fb:d9:7f:52:
         7d:e1:6f:81:08:ef:a5:f7:0a:55:96:8a:3a:40:20:db:2a:61:
         12:41:47:3c:9d:a4:a5:8c:5c:a9:3d:05:f8:16:f7:93:99:4e:
         2b:b5:d7:bf:08:c6:13:d2:60:f4:58:b7:c6:d3:44:4b:a7:0b:
         2d:51:ac:57:f9:2f:dc:8b:07:d6:e6:1a:b7:41:f3:d9:04:32:
         b2:13:eb:f4:58:ac:f4:95:82:2c:c6:c7:3f:91:f2:1f:2f:e9:
         a0:bb:c5:3d:ec:6d:ec:db:26:b2:72:9d:e9:41:b6:c7:fd:fb:
         85:f7:48:87:9e:7d:21:35:f9:18:32:e4:a2:b7:f8:2d:f3:7e:
         66:72:16:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIdwE1MCwJqbIQ0FmY+JpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWM2YTZhZDNkNTQ3Zjg1MWQzOWI4NjZmYjE0MDlmYTE5
NzJmYmYwHhcNMjYwMjA5MTYwMDE4WhcNMjYwMjEwMTYwMDE4WjAzMTEwLwYDVQQD
EyhmZWYxM2Y1NTI5NzFlMzY4NmFhNjQ4OTQxZjM0MjdmOGZjODhmN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2MZK9vpR3UJIEw+5m1JDAngwQSj
AknI1WeU/M69Le816UWb4B9xnYJ2MWJ63DCZT68BnydKNm3EHZktmhLH6rQhBwQl
1V/Q5GC5Fdzc/kCt18XiK9uIwgy1alSa+tGCNCFYo3v/OpLBnLZzdn8uvzb/fQ92
0Hx7fEZD8d/yUvFgA4gL7JLYY9cTsm48YTKk95AmVP3K+TSGhhvJIIRvpEWhqavT
GZLXENSWABxFhLjmG7RdwjcdNW+9E8G9rLM1ZxEfKMIfkEEmmCGjJqkF2oLQBcCR
vbNLFxGeMxIgFjMiBKkxl9dod5Uz2e5x6LUDXi8tVsam7fvTw7/FR3lpoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7xP1UpceNoaqZIlB80J/j8iPfWMB8GA1UdIwQY
MBaAFJ7samrT1Uf4UdObhm+xQJ+hly+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnV4cWF0UFZSX2hSMDV1R2I3RkFuNkdYTDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jY2VmMjMtNTM0MS00MWNjLTlhZTkt
NjFlZmI2Zjg5ZjBhLzEvbnV4cWF0UFZSX2hSMDV1R2I3RkFuNkdYTDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jY2VmMjMtNTM0MS00MWNjLTlhZTktNjFlZmI2Zjg5ZjBh
LzEvbnV4cWF0UFZSX2hSMDV1R2I3RkFuNkdYTDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRqiRQXt
Zq1rIxUqGaduILI7+C93yFcLaj3/hQHwYThgh1DtllezjtB/NdzHKmQByQLQ02KA
MBhpJ0piu8uJMVNnflySDtvcN/jXgAv67eITHeNqXhKdVn/OStTN6hw6Ls2x4e/X
01NM2R8gMq2SA4BM8+v4fXBc15H72X9SfeFvgQjvpfcKVZaKOkAg2yphEkFHPJ2k
pYxcqT0F+Bb3k5lOK7XXvwjGE9Jg9Fi3xtNES6cLLVGsV/kv3IsH1uYat0Hz2QQy
shPr9Fis9JWCLMbHP5HyHy/poLvFPext7NsmsnKd6UG2x/37hfdIh559ITX5GDLk
orf4LfN+ZnIWYg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:15 2026 by rpki-client