This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File:                     NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier:          fOUqVOdQjjW3w37HTWaeCm4G3Ud1ujtb2qxyzA27/Ow=
Subject key identifier:   CD:60:8A:5F:1B:75:CF:2D:4F:8E:51:67:80:EC:27:4E:47:51:B2:33
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer:       /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial:       019C41348D708A0F8DA0E0E0A78CA7E02BBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 07:01:28 +0000
Manifest this update:     Mon 09 Feb 2026 07:01:28 +0000
Manifest next update:     Tue 10 Feb 2026 07:01:28 +0000
Files and hashes:         1: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: GDbQptDNeWl2HPqWwmEYUBJcO3hRPC/DjjiJwnGAd9U=)
                          2: h9csAbPkQWfATuuCxHD4BYCCVSo.roa (hash: uOXNbpvZvHEf4Spk0vf1dg88f9LIRcDmba0q2K0ziEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:8d:70:8a:0f:8d:a0:e0:e0:a7:8c:a7:e0:2b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
        Validity
            Not Before: Feb  9 07:01:28 2026 GMT
            Not After : Feb 10 07:01:28 2026 GMT
        Subject: CN=cd608a5f1b75cf2d4f8e516780ec274e4751b233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ad:78:4f:55:36:1b:e1:bd:6a:ac:9f:b6:93:
                    5d:b1:22:27:51:87:75:6b:93:8c:ae:8d:4f:42:b0:
                    75:8c:c5:70:2c:89:a2:2d:0d:d0:34:07:16:8b:d5:
                    f3:b5:57:4d:20:e4:b9:ab:62:82:82:aa:bb:16:65:
                    09:52:86:0f:c6:af:b6:e5:42:d7:29:1f:2e:f5:29:
                    ec:0f:a1:57:f1:5b:fa:bd:6a:10:15:7f:8f:c2:6e:
                    97:76:87:41:09:1c:7e:58:33:7b:e3:32:39:8b:d4:
                    ca:e8:11:d6:3f:66:38:7e:08:47:50:32:29:6f:b1:
                    fe:23:c2:92:cd:6f:7e:f7:e1:9a:15:3b:33:88:76:
                    cd:3d:ac:67:69:4a:6d:5b:fd:ad:a8:1f:37:46:6b:
                    c0:d5:97:1f:56:c3:7c:76:12:39:13:cb:87:45:f7:
                    52:4e:97:06:22:e4:01:7c:8c:34:25:95:32:ea:46:
                    ac:d0:a7:fe:6d:2e:63:90:e7:8b:f8:8f:bd:53:9f:
                    d6:12:1b:df:b5:14:31:7e:43:c1:40:42:cd:97:ce:
                    cb:c0:d7:f1:26:d4:21:27:61:f9:a0:d8:aa:8c:ca:
                    56:65:1e:17:2d:af:c4:db:6f:04:29:f8:73:dc:1f:
                    58:51:75:68:16:11:80:a7:42:87:a5:fa:04:f5:7e:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:60:8A:5F:1B:75:CF:2D:4F:8E:51:67:80:EC:27:4E:47:51:B2:33
            X509v3 Authority Key Identifier:
                keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2c:df:c9:8f:02:92:7b:9e:f6:76:6d:de:53:1e:73:98:91:
         72:3e:ac:c1:20:81:a2:69:77:9e:44:4f:81:0a:54:21:1f:8a:
         0d:75:0d:90:55:21:c0:d2:7c:ef:1d:3d:3e:32:35:ce:ff:2c:
         df:9b:f5:5c:e6:b3:75:1b:22:a5:f1:3d:15:2d:94:ca:50:6e:
         91:2e:eb:59:64:ed:70:07:6a:43:6e:c5:98:de:d8:9b:cd:14:
         3f:83:23:30:4b:91:2b:71:79:8e:16:cb:9c:fb:1d:8c:c3:a6:
         52:ef:2c:0c:08:d9:47:4a:56:c0:e5:17:45:c3:6b:9b:83:d3:
         fc:a6:b8:6a:e4:fe:40:ca:6f:78:ae:21:f4:2c:4d:2d:37:7d:
         01:58:39:9f:0b:7a:59:28:5c:c6:8a:a5:1a:f4:83:e9:58:17:
         ae:75:fe:ea:ca:10:b6:19:58:31:6f:9f:5f:ae:e1:4f:27:70:
         3a:42:c9:41:50:3e:18:dd:88:83:31:a1:9a:08:22:20:6e:c4:
         32:82:dd:68:7e:48:cf:1d:0e:2d:a1:c4:b5:68:94:1c:16:f1:
         3e:8b:22:44:b1:2d:ac:81:f6:28:1b:b3:fd:28:e6:da:4a:6c:
         24:f0:6d:a0:3b:21:8a:65:c1:21:7a:1a:65:80:b9:d9:bc:15:
         a2:6c:96:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:39 2026 by rpki-client