This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
File:                     N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json)
Hash identifier:          X5yYqYegrKZdr1fonZsPTyRTxoHnUrmHokzjOrJzJV0=
Subject key identifier:   17:90:FB:BA:FE:5D:27:CD:F9:DC:DB:20:87:76:57:83:85:E9:46:52
Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Certificate issuer:       /CN=37778681361b1fff87ce398402efa63869e5bfd1
Certificate serial:       019C427D390B4B48B2BA24128B7323D5DD7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
Manifest number:          0DBD
Signing time:             Mon 09 Feb 2026 13:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:28 +0000
Files and hashes:         1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: ++kaMCmHZ3sgeknpRJZUJk4UO+G21dZQNEr1e+/uLmY=)
                          2: U1i2p1mwMwcMPAenuBEHdijiIZE.roa (hash: AHlcD8BHVzzh2oESK4HUkXMAua5AnRRE5iMN+WNNbdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:39:0b:4b:48:b2:ba:24:12:8b:73:23:d5:dd:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1
        Validity
            Not Before: Feb  9 13:00:28 2026 GMT
            Not After : Feb 10 13:00:28 2026 GMT
        Subject: CN=1790fbbafe5d27cdf9dcdb208776578385e94652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:b0:4e:ba:47:95:d7:25:ef:cb:37:59:b5:
                    c4:aa:59:08:7b:67:7a:31:54:da:86:7d:cb:9a:12:
                    6a:75:c3:f3:78:80:0a:1f:a2:f3:b1:8e:1c:93:f8:
                    27:77:b7:f3:9d:c2:4e:34:c9:89:46:e7:f5:9d:e8:
                    f6:bf:fe:1e:ac:82:fa:52:0d:9a:06:c9:c0:9a:bd:
                    76:fe:09:a4:80:02:fb:17:6d:28:04:51:a3:68:ac:
                    20:19:8a:d5:68:1d:3c:5b:42:7a:aa:c2:8b:7d:b1:
                    06:03:ec:9a:61:0e:2b:de:78:40:80:fb:08:20:f4:
                    1c:f3:5a:45:3c:95:f7:7c:dc:4f:e8:2f:6b:ef:03:
                    d6:13:11:b7:80:d2:f1:37:53:e0:fc:c4:8d:42:25:
                    6b:50:43:54:7b:21:e0:be:5b:79:03:f9:75:7c:0c:
                    bf:03:fb:5a:8f:b4:73:ed:7f:34:ca:87:57:93:2a:
                    28:94:52:6d:de:37:2c:69:42:1c:82:dd:42:e2:d6:
                    ea:f5:6b:0c:6d:69:17:a1:ff:a0:37:78:46:b0:02:
                    2c:49:6d:ec:91:bc:f5:6d:f9:80:1f:7c:8f:28:e1:
                    b4:2d:1a:c1:bb:c3:cc:cf:d9:54:4a:d2:e6:e0:92:
                    04:e9:53:b1:12:b3:1d:12:bc:ea:02:e4:82:31:20:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:90:FB:BA:FE:5D:27:CD:F9:DC:DB:20:87:76:57:83:85:E9:46:52
            X509v3 Authority Key Identifier:
                keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:88:06:6b:13:28:77:13:cb:8b:98:59:d2:63:b7:ff:47:a6:
         04:0a:8b:92:d9:27:be:89:08:de:fa:28:ab:2c:18:2f:f6:25:
         b7:01:ad:0d:52:81:93:44:10:c9:4e:00:b5:4f:be:6f:39:7c:
         c6:f3:bd:34:3b:1e:13:88:ca:b6:5d:d5:37:67:a7:7e:c1:36:
         20:de:cb:8b:15:9c:22:85:99:f2:44:66:4f:9b:9b:66:d0:1f:
         d7:24:62:a0:cb:48:61:49:17:76:70:34:d8:7a:70:14:e7:3e:
         65:50:39:c1:a3:51:23:90:e1:c3:b3:6f:63:5e:c1:10:dd:5b:
         1c:3d:34:a4:42:f3:6f:77:90:07:ee:19:81:cb:61:aa:32:95:
         cf:ae:0b:0d:5c:ee:49:68:19:72:fe:be:dc:ae:bd:ab:e9:9e:
         36:4f:6b:c5:65:51:fa:d7:4f:d3:6a:cc:e7:cf:1d:ea:d4:ff:
         e2:6d:e5:6b:a8:d2:14:5d:81:f0:50:2d:a0:5a:ba:c1:a4:ca:
         10:e7:d1:19:70:95:13:14:f7:d4:16:e3:1b:c2:73:15:b2:4b:
         c6:49:4b:b8:6c:03:15:07:de:41:41:26:f6:1f:61:73:56:2e:
         22:28:25:ae:f5:a7:1b:b9:73:63:90:5c:25:b5:99:31:69:de:
         90:35:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:47 2026 by rpki-client