This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
File:                     0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json)
Hash identifier:          A6MG6JbDTBRyeUvRIs99wqpORQLHtL/4gmaDOLXK2O0=
Subject key identifier:   00:4E:F1:2B:CE:1D:61:AF:19:C9:6F:E2:BF:26:FA:37:5A:0E:BB:C0
Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
Certificate issuer:       /CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Certificate serial:       019C427D607106B0A78A5C62738AFFFB384F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 13:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:38 +0000
Files and hashes:         1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: EryLdHDS0S78NcsZIsiGuzLbpSgQlfbhYRN1FucDOgE=)
                          2: VIaUBNL6WlewF92VFkKdJgnVoGY.roa (hash: BUyipvdgIG16YQ2huh7/x7j/eCf65uRrmNCB96nUmSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:60:71:06:b0:a7:8a:5c:62:73:8a:ff:fb:38:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7
        Validity
            Not Before: Feb  9 13:00:38 2026 GMT
            Not After : Feb 10 13:00:38 2026 GMT
        Subject: CN=004ef12bce1d61af19c96fe2bf26fa375a0ebbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:2a:d7:af:fb:09:06:cd:b9:2b:3d:7d:ef:
                    38:87:b2:96:c0:16:e0:f8:26:d8:51:44:09:3e:05:
                    2e:aa:eb:39:c1:0a:9c:6f:a8:24:b1:45:6e:bc:25:
                    3f:87:e6:f2:be:9a:0c:c0:a4:b9:36:54:85:5c:26:
                    7e:9b:76:e1:1f:67:21:5f:01:1a:f8:a1:d2:ac:6f:
                    90:62:3f:13:dd:39:2c:e7:af:fe:d2:2d:89:60:8a:
                    b1:8a:d2:ae:d0:b0:aa:8c:98:ef:a2:61:10:7f:35:
                    9a:e7:13:3a:16:e4:50:65:0d:8a:8f:98:75:34:62:
                    df:60:ea:23:ee:41:cf:8e:f0:54:18:44:e1:f9:27:
                    83:a8:c6:b2:0b:97:d6:41:ec:73:39:2d:ac:81:13:
                    a3:d4:62:eb:d6:8e:16:68:8a:b4:bd:b6:49:d6:a9:
                    b2:a5:3f:b8:f2:c4:5f:93:58:a8:1a:4e:c1:73:4f:
                    9b:ce:48:8b:2b:96:89:f0:c7:8a:79:47:40:58:23:
                    a2:a1:5a:36:53:e3:28:f7:cc:da:6d:aa:43:a0:4b:
                    63:1f:a7:a0:a3:bf:3e:88:23:e6:99:19:c8:c9:51:
                    5b:cf:10:07:32:69:4a:d7:a2:79:94:83:6a:79:50:
                    1e:65:f4:0b:e8:89:02:0f:0c:76:c5:2c:f9:8e:63:
                    a6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4E:F1:2B:CE:1D:61:AF:19:C9:6F:E2:BF:26:FA:37:5A:0E:BB:C0
            X509v3 Authority Key Identifier:
                keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:33:13:31:8c:0f:62:1b:11:f7:05:a6:59:3f:43:c6:04:72:
         c1:87:af:64:40:b9:9f:e9:1f:81:fc:21:b9:b3:3c:7b:19:31:
         92:12:2c:39:c3:02:2e:35:1b:ee:46:13:f8:4c:7b:18:1b:eb:
         56:4b:1d:eb:d8:a3:a4:2e:87:48:f7:24:30:be:2a:c0:36:64:
         1e:30:a0:72:92:d7:ee:3d:4a:05:1a:af:2d:39:c2:70:81:2e:
         62:42:a4:8f:ca:7f:af:27:65:de:8c:b7:5d:87:c0:3e:d5:41:
         cb:1a:80:82:a9:b6:20:53:50:8c:32:66:f8:06:63:85:f2:73:
         f2:37:27:d0:78:ca:16:e6:f9:dd:1a:da:af:fc:95:5b:3b:56:
         13:0c:c3:49:c8:98:7f:af:fd:d5:9a:5c:60:b8:54:0e:4c:cc:
         03:88:6b:b2:14:d1:50:96:6f:1d:ad:54:50:2a:8b:12:eb:61:
         00:7d:11:52:e5:3b:07:53:59:9f:e9:19:99:2d:80:3d:33:d0:
         59:4a:9c:df:46:e3:c5:1b:81:98:29:3f:81:3d:8e:a2:c2:05:
         ab:5a:8f:09:0f:07:66:4d:79:43:fd:14:2e:c5:af:a1:96:7e:
         ef:e3:d4:95:5e:f0:9b:bc:0d:77:37:64:2c:d8:0f:56:96:d5:
         3d:60:b2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:00 2026 by rpki-client