This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
File:                     NgqdJtuz6l36roO2GQit2Pxt028.mft (raw, json)
Hash identifier:          h/Y5+RbVdVHfPqIrB0tP24BApUCn3eQTsLSBBKu/z7s=
Subject key identifier:   01:8E:04:17:68:70:4E:6F:3B:B7:05:00:1C:31:BF:01:E5:BE:10:9A
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Certificate issuer:       /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial:       019C42EB295CB5544CD6B87C2B0A25390302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 15:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:33 +0000
Files and hashes:         1: NgqdJtuz6l36roO2GQit2Pxt028.crl (hash: stA/eT+NiPbNYwKRBZXS7Jbc1Qfb5L370GA7TA26jfg=)
                          2: pl6PNo8hUrBCcmdPr6uyLCgo9LE.roa (hash: JUhZmiTLChpqRA0MSl5whEAJwGew2IlHkB2zV8iZ9V4=)
                          3: sg3Ew_-j8eSBsSEqujV82pVTpmY.roa (hash: u5sONjGdKQ7+lq8JPUBVxgSwpY1PR0uLjyPXqaXUKG4=)
                          4: teABFGsGVj_scwJjrE3mhP8dVpQ.roa (hash: 2hJ5yRJDHs67/jo71c3Tu7rhezA7dGIjE7rutPTVstE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:29:5c:b5:54:4c:d6:b8:7c:2b:0a:25:39:03:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
        Validity
            Not Before: Feb  9 15:00:33 2026 GMT
            Not After : Feb 10 15:00:33 2026 GMT
        Subject: CN=018e041768704e6f3bb705001c31bf01e5be109a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:96:9c:f6:26:58:45:c4:dd:2e:7e:16:4b:
                    d0:a9:27:df:d9:fc:e7:27:7a:37:d9:05:0f:bd:27:
                    23:62:be:f4:21:e3:61:82:1e:c4:32:46:e9:4f:cc:
                    32:36:24:eb:36:d3:0c:a8:66:a0:1a:c3:69:59:e8:
                    87:21:2c:e5:d1:b7:c2:b0:66:65:bc:b5:9f:77:5b:
                    c7:c8:d1:f4:aa:17:57:48:a9:52:ca:44:11:6e:15:
                    5d:d6:39:b7:c1:c4:14:df:68:b5:b9:bc:35:09:5a:
                    9b:1a:f7:69:58:c3:bf:3c:b6:51:f5:a7:f1:10:dc:
                    f2:59:3b:f3:8c:cb:b4:a9:ca:b1:51:6f:2a:4c:43:
                    fb:b8:81:e5:68:67:94:51:70:e8:7d:a4:cf:ac:7f:
                    59:df:0a:59:71:f8:4b:5d:5d:7e:56:98:ce:55:85:
                    a4:93:44:20:23:85:bb:cf:78:05:80:9c:2e:85:e4:
                    fe:61:ea:82:cd:85:8d:89:18:31:4d:dd:bf:ba:e6:
                    56:48:2b:cf:aa:da:5a:23:19:8d:51:34:20:37:aa:
                    d3:1c:71:f7:19:fa:49:e2:72:09:ac:74:96:cf:c9:
                    c1:60:ca:ad:f3:0a:8f:9a:90:ae:4f:81:e7:38:01:
                    6e:ab:12:f2:dc:76:74:7d:12:57:f3:24:61:d2:bb:
                    61:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8E:04:17:68:70:4E:6F:3B:B7:05:00:1C:31:BF:01:E5:BE:10:9A
            X509v3 Authority Key Identifier:
                keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:cf:0d:8d:f7:c9:60:c2:a4:aa:5a:8f:57:de:78:cd:50:e8:
         54:4a:ba:29:65:5c:2e:67:0a:0c:2d:70:e5:95:60:f6:37:1a:
         0a:ca:09:0e:d6:12:a4:46:18:56:51:4a:0d:c7:6c:ce:02:c9:
         20:aa:d9:0d:51:13:40:78:6f:4b:2a:9a:91:25:2b:3b:50:e8:
         fd:2e:66:d9:e7:6e:30:e7:06:17:1a:ba:dc:33:76:55:03:2e:
         bd:9d:a4:a3:25:1f:c5:2f:10:54:c4:e1:46:31:c1:83:af:28:
         c3:62:ad:b8:23:c3:30:6b:54:0b:d3:a8:97:da:bd:d0:a7:f5:
         fb:95:21:15:ea:b6:37:9a:2d:c3:e8:1b:d8:89:d1:d0:42:e9:
         b6:56:23:57:a0:66:ef:47:b8:1b:4c:71:56:94:12:99:e0:d1:
         06:68:35:f3:c1:98:01:23:ce:30:d3:ba:bd:7c:c8:e5:8d:ce:
         71:87:51:46:a0:d0:3d:8c:c1:e9:38:f3:01:72:86:69:52:fe:
         82:74:e9:7c:63:eb:d6:14:2f:91:a2:71:cc:2e:02:90:76:88:
         76:d9:99:70:c2:de:6e:b1:98:87:53:b3:c8:b8:fa:b6:1e:b9:
         7c:e7:4c:d5:52:c6:36:4d:0f:02:3a:ca:71:bf:85:d2:0d:62:
         ec:ab:dd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:41 2026 by rpki-client