This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
File:                     N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json)
Hash identifier:          f0AoDjphtX5zEKPPZj325xIWQWFxSwcRRuR8eSWpiNs=
Subject key identifier:   E6:AA:62:1C:7E:81:38:DE:F4:78:1A:0F:84:B3:3D:F4:05:D9:46:AB
Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
Certificate issuer:       /CN=37ca50022828d901bf42b2798f7844104b05404d
Certificate serial:       019C41A19E6E2B8FA94E3E97758CE82EE9CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
Manifest number:          0C25
Signing time:             Mon 09 Feb 2026 09:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:36 +0000
Files and hashes:         1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: PRjFGMWT2VVGemF5DVCEEO2fYS2t6PiSiKE+Hkd8wsM=)
                          2: T8qj0TqqRzvgZV6bToFz4c0FM-4.roa (hash: RUkC3kCoEXyWtFRshNXK5Ou2vFrdu7iWv96bVF4GwyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:9e:6e:2b:8f:a9:4e:3e:97:75:8c:e8:2e:e9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d
        Validity
            Not Before: Feb  9 09:00:36 2026 GMT
            Not After : Feb 10 09:00:36 2026 GMT
        Subject: CN=e6aa621c7e8138def4781a0f84b33df405d946ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:7c:20:c9:b2:13:bc:63:c0:a1:f9:d0:c5:
                    ee:b3:89:1e:4e:2b:b3:23:62:ea:a8:20:2d:05:e7:
                    e3:32:12:b8:81:02:bb:8f:6c:25:98:e2:6d:35:be:
                    e1:21:de:07:78:c1:d9:58:d0:33:e9:2e:45:d8:a4:
                    39:17:67:67:6e:12:a8:9a:c8:31:8c:8d:83:e4:ed:
                    a5:02:1b:c5:7e:83:31:12:a1:db:4d:58:d6:cd:0a:
                    4a:06:54:58:62:c1:3e:f4:e1:f7:45:36:94:0a:52:
                    4e:9f:4b:2c:c3:be:24:33:f1:53:75:76:4b:08:cf:
                    44:11:ed:b1:30:5d:e8:4f:28:24:20:e8:20:41:e7:
                    32:bd:e6:18:86:8c:74:b2:c5:22:7a:d3:bf:5d:7b:
                    85:6b:55:89:12:12:f6:19:8b:07:02:bd:8e:8f:d9:
                    93:ef:fc:c8:7a:c9:86:aa:56:ed:00:27:10:a3:cc:
                    3a:f6:6d:1b:9d:58:d5:20:08:ad:20:45:43:b5:4c:
                    f5:28:b4:fe:38:61:4c:58:ad:df:07:cb:50:bd:52:
                    d7:d3:5d:d8:75:6d:0e:8b:d4:99:fa:06:7b:3b:44:
                    76:b0:af:f7:eb:84:33:8f:ad:20:22:4a:f5:34:41:
                    24:38:6a:e2:49:7b:50:bf:c5:e8:19:73:84:df:2c:
                    06:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AA:62:1C:7E:81:38:DE:F4:78:1A:0F:84:B3:3D:F4:05:D9:46:AB
            X509v3 Authority Key Identifier:
                keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f4:16:b2:3d:67:c3:ba:64:57:43:26:d5:a1:d5:70:8b:4a:
         47:08:b9:65:83:4b:fa:29:8d:c7:c1:dd:98:c8:8b:73:ef:0e:
         dd:52:e6:b7:63:b2:94:45:26:c1:26:81:9e:e6:d6:a6:f4:bc:
         c0:1c:07:bc:12:4b:86:3d:2d:2f:ae:2f:0c:e8:83:42:74:a5:
         2b:db:7b:1f:41:88:41:82:38:fd:b1:89:db:3a:db:88:43:35:
         59:d9:88:92:6d:e4:bd:d8:13:dc:cc:45:ed:70:81:70:5c:60:
         f5:a5:80:0e:7e:45:ef:01:b4:cb:ef:c5:55:a6:c6:57:78:06:
         33:24:4a:d8:8c:d3:64:50:73:4d:d8:63:c6:db:8b:5c:75:f4:
         c3:b7:dd:87:2f:4e:28:49:69:c3:ce:1b:b0:28:25:56:4e:6c:
         13:00:50:0d:ea:91:ac:73:5e:c9:90:95:14:4b:0d:18:d5:e8:
         46:d4:10:18:0e:17:b5:fe:b7:1b:e1:9a:5e:07:52:17:2a:00:
         88:a3:b9:96:a1:e5:f9:f4:22:a3:47:ee:fc:d0:2e:78:0a:70:
         0c:06:88:5d:b5:17:53:c9:0b:79:1c:12:e0:b0:bb:51:92:d4:
         60:0c:f4:0a:c1:0f:ad:b9:0e:97:74:ba:9e:00:fc:4e:8c:6e:
         09:ba:47:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:20 2026 by rpki-client