This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File:                     nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier:          KC71NEvuo0JDXKalF4OskyYE6d4taism7ux9a/WIHwg=
Subject key identifier:   49:A3:A9:E8:0A:8D:89:D7:AA:AD:1A:3E:4F:61:08:52:2A:1A:BE:55
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer:       /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial:       019C42EB50261F8549C45E5D7FE2156271B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number:          0EA2
Signing time:             Mon 09 Feb 2026 15:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:43 +0000
Files and hashes:         1: fb_wL9N1OW0PyiKLL5fbxlqRd_A.roa (hash: PwX6Qj+/Hw67w92aS4xQ86nPtQ/6Nm2w8w8MnwiNUKI=)
                          2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: hhArwWQrmFsQDnEqs0ixCr9ryCG5u8eh9a/gCmyecNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:50:26:1f:85:49:c4:5e:5d:7f:e2:15:62:71:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
        Validity
            Not Before: Feb  9 15:00:43 2026 GMT
            Not After : Feb 10 15:00:43 2026 GMT
        Subject: CN=49a3a9e80a8d89d7aaad1a3e4f6108522a1abe55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:70:df:ac:2b:f4:11:26:45:32:bc:06:ef:
                    45:33:a6:3b:96:66:b6:84:35:44:8b:dd:6d:76:dd:
                    3d:26:c2:73:bb:ba:15:a7:cd:ec:ce:b1:92:0b:9f:
                    ec:87:de:65:45:c7:1e:35:28:a3:38:98:7d:9b:ef:
                    34:b3:dc:ef:dd:b5:69:d0:11:bf:17:8e:90:c2:23:
                    a7:27:f5:cd:23:0b:dd:fb:91:2d:bc:7c:ee:bc:ec:
                    b9:3d:f7:5b:cb:70:c6:23:91:76:87:e8:53:66:3c:
                    51:63:fb:f6:89:6c:17:6e:5d:4f:3c:3e:e9:f5:85:
                    3c:ec:d3:3d:24:49:eb:ed:79:89:d5:ac:9d:fc:ba:
                    f0:19:bf:52:e9:2c:68:8d:53:be:de:86:1c:02:82:
                    e2:11:4d:a0:44:7d:ff:e4:19:6e:4c:79:41:d8:64:
                    f9:39:cd:eb:5a:a7:11:d4:63:b6:25:6e:fe:7f:48:
                    22:59:f2:d6:dc:77:9b:4e:af:93:d0:b7:00:7a:51:
                    d6:5a:0c:a7:d8:a8:19:ad:e5:cf:75:81:9c:f5:30:
                    01:2a:9b:8e:bb:fb:ac:6b:e3:8f:b5:e9:4e:25:a0:
                    ef:7f:4a:8d:ee:5d:0b:d7:06:21:e0:41:5b:a7:a3:
                    f3:ff:24:fa:50:da:a6:e4:5b:5d:46:4b:df:3b:25:
                    13:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A3:A9:E8:0A:8D:89:D7:AA:AD:1A:3E:4F:61:08:52:2A:1A:BE:55
            X509v3 Authority Key Identifier:
                keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:7e:da:be:6f:a4:52:49:cf:62:87:e9:55:65:cc:f3:35:cc:
         cd:1d:d2:1f:3f:b7:f2:84:ad:83:87:a5:85:5d:20:48:39:08:
         02:b4:5a:3c:6c:b2:89:cb:85:5a:71:8c:c0:65:5d:40:f0:f7:
         20:11:12:68:c1:ec:89:88:88:ac:60:f9:01:0a:8d:2b:18:a4:
         87:ba:1d:81:74:d4:ca:b9:95:79:4c:f0:59:04:84:d7:51:72:
         bd:1a:b0:9c:e9:48:9d:57:3e:18:c5:84:d6:f3:95:02:71:0e:
         7f:d5:54:c0:df:d9:34:e3:f9:f8:c1:86:86:b3:60:1e:bf:2a:
         62:94:fd:04:7b:61:c4:e9:5a:b1:a4:59:62:34:cc:41:5a:7b:
         d7:89:12:0a:9f:6a:fa:89:a4:22:ec:7a:0d:33:37:36:2a:e2:
         d2:2f:66:5f:ad:eb:52:c9:f7:1c:76:64:29:ac:b4:46:63:4c:
         c8:14:ed:e7:5a:32:11:1a:aa:4e:5d:bc:70:b1:d3:4f:19:f2:
         14:f7:99:f4:84:ba:5f:23:e8:52:79:d6:5b:ba:94:c7:d1:07:
         07:b8:9f:a0:ae:fe:1f:46:15:fb:84:ba:b9:d0:a9:91:0d:cf:
         56:f2:1c:7f:70:97:8f:97:15:89:30:76:af:2b:fe:d3:e0:a8:
         8b:d3:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:52 2026 by rpki-client