This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File:                     NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier:          we08mPGZn2lofYCE7SRnIsRVigW7sd/zFbLvwRfIjJ0=
Subject key identifier:   C7:86:83:48:ED:87:00:63:B1:3E:77:33:A6:04:F7:9A:8A:7B:94:39
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer:       /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial:       019C427DAAA9FB203A43945023F1EF7E8159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number:          037B
Signing time:             Mon 09 Feb 2026 13:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:57 +0000
Files and hashes:         1: 1a2w5_LzpzoweEi0kL3e8rXuwEw.roa (hash: Uznzi70zArzLc6sT1YufT+KJGM9lJIIJ4gfkTYxhtAs=)
                          2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: NKRvSXvnV22mXpABbKIRh34xRCv4eSVb9fqOy8LY4Ys=)
                          3: TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa (hash: yDE5fT46PoSW/d5/n8et57tOUUfO/M0RS358RxhsJ3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:aa:a9:fb:20:3a:43:94:50:23:f1:ef:7e:81:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
        Validity
            Not Before: Feb  9 13:00:57 2026 GMT
            Not After : Feb 10 13:00:57 2026 GMT
        Subject: CN=c7868348ed870063b13e7733a604f79a8a7b9439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d8:55:46:50:7d:99:5d:a2:73:17:e3:80:94:
                    b7:5c:84:8a:44:ee:55:29:f6:e7:5f:51:e8:de:24:
                    ab:c9:c2:8a:f8:aa:45:03:44:ed:f8:64:ec:ae:da:
                    50:ca:35:8f:e8:55:41:3e:3d:9c:7c:17:f3:c1:61:
                    ff:9b:25:63:e6:80:a5:47:8a:2f:de:85:4a:a8:24:
                    f7:cf:46:04:b6:52:b1:35:ea:2a:40:15:c3:bd:00:
                    de:4e:26:67:54:d2:15:c4:d3:41:43:4a:4b:22:9c:
                    50:94:c9:c0:96:ca:08:59:67:97:6f:0b:4e:5a:75:
                    e3:f6:b2:18:3e:1f:36:af:0d:38:10:b0:f6:7a:5b:
                    d8:d4:0f:ad:ea:e4:cf:52:25:51:c8:5b:98:7e:f5:
                    a7:2d:10:c2:1a:c9:fd:15:28:b8:80:7f:0e:66:4c:
                    3c:27:79:54:d6:d5:0e:0a:98:85:1a:c0:82:8c:96:
                    d4:7d:e7:c5:e5:23:8f:d9:d2:dd:f2:bf:5b:32:b0:
                    d4:fb:b9:48:e1:51:3e:a0:4a:cf:48:bf:51:9b:ec:
                    06:88:8c:cf:6b:d9:3a:71:c4:c5:bf:b3:97:c4:45:
                    c9:a5:a9:31:4e:fe:5d:8c:42:e1:bc:95:75:b7:58:
                    d0:e4:e7:b9:d1:03:d0:5b:d1:aa:8d:82:3c:8a:fa:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:86:83:48:ED:87:00:63:B1:3E:77:33:A6:04:F7:9A:8A:7B:94:39
            X509v3 Authority Key Identifier:
                keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:db:d1:df:b0:83:f4:03:ef:0a:87:04:f7:21:9c:f2:e9:b5:
         c5:15:14:8c:68:18:6a:a5:5c:29:d3:b5:2e:65:69:9c:a3:83:
         38:73:a1:bb:b0:25:ad:ce:5f:f7:fd:f5:e2:6d:1c:07:e8:bf:
         80:ea:42:b0:46:8d:ce:89:4b:b9:eb:77:b0:ea:01:42:7e:22:
         45:01:1f:8c:ec:f5:bc:18:d2:4d:10:b3:d0:e3:5e:1c:d5:3f:
         76:e3:c3:dc:3d:34:f2:f8:bf:c4:f1:97:1f:4c:22:8e:a5:f2:
         d5:f1:89:48:6c:47:c3:31:77:cc:f1:77:2c:41:6b:cd:c5:d2:
         f4:1e:f3:14:64:9a:a5:bb:8e:84:7e:5c:7b:24:ba:00:4b:18:
         3e:a6:68:2a:97:77:0f:e5:8b:8c:4d:62:21:21:8d:ae:b7:63:
         db:7f:f7:4e:d5:42:55:bb:16:02:1c:bf:47:be:82:06:0c:8d:
         a7:cc:d2:32:a3:8b:95:2b:df:06:8f:e4:0f:ce:ea:cf:c4:c4:
         ac:2d:08:91:5c:52:30:29:62:28:6b:82:47:00:0a:fa:37:c5:
         70:b6:c1:0e:cc:54:50:01:ae:c9:01:12:c1:22:6e:b3:4d:9e:
         54:d4:1b:73:82:22:7f:6a:6e:9a:4a:dd:20:a6:46:aa:56:77:
         6a:26:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:00 2026 by rpki-client