This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File:                     nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier:          Bobyw4+q8Iyg+egA5RPP54AOoMtHg4xNbu/l1iJzMCY=
Subject key identifier:   02:96:38:EF:9C:3D:DA:5C:DF:4C:E3:FB:AC:07:CE:31:33:68:CA:AD
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer:       /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial:       019C43596C6A6A4D770D750197A663CD1D27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number:          08D7
Signing time:             Mon 09 Feb 2026 17:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:59 +0000
Files and hashes:         1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: nRuRBqqEG2A5/WD/vMPMYULX6e6yMKxj4jWo7cbnpSA=)
                          2: zaw-l3nyUygb03TlyeeZ5uNtuxc.roa (hash: vbvudETvvHbmCpQdctUZ1OuuVkp6d4krvgnH2TdlDSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:6c:6a:6a:4d:77:0d:75:01:97:a6:63:cd:1d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
        Validity
            Not Before: Feb  9 17:00:59 2026 GMT
            Not After : Feb 10 17:00:59 2026 GMT
        Subject: CN=029638ef9c3dda5cdf4ce3fbac07ce313368caad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:c2:a4:32:73:97:67:e6:49:8f:a5:f1:f6:
                    05:d2:d1:14:8c:d7:11:c9:71:41:55:d0:6b:1d:df:
                    a4:b2:b1:c1:e2:6f:07:40:5e:d0:56:b5:42:64:f3:
                    06:64:7e:bb:db:a1:9b:53:00:15:db:aa:01:16:14:
                    d8:5f:c4:41:69:e4:bb:b0:8d:31:ab:88:3a:58:8c:
                    35:03:3b:66:a1:69:df:5d:47:40:3f:7d:ac:ce:fd:
                    a9:06:b4:f8:24:90:12:99:97:e2:55:be:f7:bc:69:
                    65:04:12:69:92:27:1c:8f:9e:0f:fc:b9:57:92:2e:
                    5b:2c:77:22:92:58:23:62:61:dc:33:c9:bb:f0:4d:
                    01:36:93:bb:1a:24:38:b1:8a:51:93:58:ef:e8:04:
                    52:39:ba:b3:ec:50:d4:c0:2b:d5:b1:4c:bf:db:6d:
                    3f:26:84:30:27:39:74:2d:98:68:6a:0a:51:12:9a:
                    92:2b:ed:51:a0:46:56:0a:9d:d9:58:1d:e5:b6:2e:
                    f1:b2:15:1b:08:cc:01:7c:91:cc:24:e8:a2:06:9b:
                    e2:ec:f4:ad:d3:5d:eb:24:1f:97:89:99:0d:71:e1:
                    27:09:1b:e8:0c:50:b7:e5:ad:ab:d1:07:03:8a:28:
                    32:f7:cb:c2:28:6f:3b:1f:80:89:cb:89:4f:48:38:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:96:38:EF:9C:3D:DA:5C:DF:4C:E3:FB:AC:07:CE:31:33:68:CA:AD
            X509v3 Authority Key Identifier:
                keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e4:97:0d:8c:81:49:17:79:be:fe:c2:6f:cc:f3:fe:c7:f0:
         3d:de:33:37:aa:8c:61:38:7d:05:c9:a1:43:96:20:2a:a3:a7:
         26:1c:ed:13:30:02:31:22:80:71:da:87:60:33:1c:3c:95:37:
         0f:09:82:ed:e5:fc:e8:45:c2:d2:bf:50:ef:5f:64:4f:00:9b:
         6c:e2:7e:f1:77:37:65:a6:78:72:0d:79:7b:f4:fc:0b:51:81:
         f6:8b:01:3e:c3:30:3c:77:8c:35:99:21:6a:aa:af:ee:d1:c8:
         29:8d:ac:a2:5f:14:01:84:29:a1:3c:6c:44:9d:7a:c8:f9:04:
         b9:ce:bc:b9:4b:77:9c:b6:c1:fd:39:90:f1:9c:41:ad:8d:e6:
         06:a4:c8:4e:c2:f3:b1:1b:82:66:96:60:ba:ce:fa:67:aa:a9:
         71:94:d9:e1:de:5f:a6:59:f8:d3:54:89:2d:92:e6:ea:39:6f:
         23:8d:a4:46:34:14:25:50:cc:91:d1:94:32:df:af:77:0a:9b:
         ca:f1:ad:7c:1e:d6:11:97:83:14:fd:9b:8b:78:49:a9:4d:52:
         b6:0d:64:db:fa:86:64:7e:61:0d:de:72:62:05:f3:2a:f3:96:
         b3:d7:eb:73:7b:38:f2:2c:bd:a5:06:21:d7:59:7c:4a:13:2b:
         70:ab:92:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWWxqak13DXUBl6ZjzR0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNjIwZjMxYjQ5OTdjNzM0NWJjNjZiNDZiNDNkNjg2YmYw
MDkzMWEwHhcNMjYwMjA5MTcwMDU5WhcNMjYwMjEwMTcwMDU5WjAzMTEwLwYDVQQD
EygwMjk2MzhlZjljM2RkYTVjZGY0Y2UzZmJhYzA3Y2UzMTMzNjhjYWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnfCpDJzl2fmSY+l8fYF0tEUjNcR
yXFBVdBrHd+ksrHB4m8HQF7QVrVCZPMGZH6726GbUwAV26oBFhTYX8RBaeS7sI0x
q4g6WIw1AztmoWnfXUdAP32szv2pBrT4JJASmZfiVb73vGllBBJpkiccj54P/LlX
ki5bLHciklgjYmHcM8m78E0BNpO7GiQ4sYpRk1jv6ARSObqz7FDUwCvVsUy/220/
JoQwJzl0LZhoagpREpqSK+1RoEZWCp3ZWB3lti7xshUbCMwBfJHMJOiiBpvi7PSt
013rJB+XiZkNceEnCRvoDFC35a2r0QcDiigy98vCKG87H4CJy4lPSDiC6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKWOO+cPdpc30zj+6wHzjEzaMqtMB8GA1UdIwQY
MBaAFJxiDzG0mXxzRbxmtGtD1oa/AJMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2Qt
NGI4NzkzZGI3NDYwLzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2QtNGI4NzkzZGI3NDYw
LzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+SXDYyB
SRd5vv7Cb8zz/sfwPd4zN6qMYTh9BcmhQ5YgKqOnJhztEzACMSKAcdqHYDMcPJU3
DwmC7eX86EXC0r9Q719kTwCbbOJ+8Xc3ZaZ4cg15e/T8C1GB9osBPsMwPHeMNZkh
aqqv7tHIKY2sol8UAYQpoTxsRJ16yPkEuc68uUt3nLbB/TmQ8ZxBrY3mBqTITsLz
sRuCZpZgus76Z6qpcZTZ4d5fpln401SJLZLm6jlvI42kRjQUJVDMkdGUMt+vdwqb
yvGtfB7WEZeDFP2bi3hJqU1Stg1k2/qGZH5hDd5yYgXzKvOWs9frc3s48iy9pQYh
11l8ShMrcKuSpQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:43:55 2026 by rpki-client