This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
File:                     nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft (raw, json)
Hash identifier:          y3KHjuhjSqmxPKal9VUryJnhxlvIOUmsJ3Ybtcc1lyw=
Subject key identifier:   78:60:80:C1:FC:E3:28:38:5C:0F:A9:A1:25:2D:E4:AF:02:1E:9F:1E
Authority key identifier: 9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
Certificate issuer:       /CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Certificate serial:       019C42B3EAE732441F84BB2BC31C014B82D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
Manifest number:          11ED
Signing time:             Mon 09 Feb 2026 14:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:13 +0000
Files and hashes:         1: GJbpcBM6DeYJcijI_V6UQpsMcLo.roa (hash: JvMmW6CWfWERUpYtBxgQrLJ4+C/bBMbHU6ozU5Y8U6A=)
                          2: nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl (hash: A6AhJNfCOnVEGF18Umomh8+BcouU1sKEklWlXbatqKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:ea:e7:32:44:1f:84:bb:2b:c3:1c:01:4b:82:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
        Validity
            Not Before: Feb  9 14:00:13 2026 GMT
            Not After : Feb 10 14:00:13 2026 GMT
        Subject: CN=786080c1fce328385c0fa9a1252de4af021e9f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:c3:12:e8:45:a9:e7:28:80:74:58:71:15:
                    c5:f1:c4:6a:6a:3e:40:5c:ed:74:37:b6:cb:cd:33:
                    6c:ff:f4:74:82:ab:54:9b:35:97:50:ef:7f:a2:be:
                    d2:c9:23:98:62:ac:ee:03:4c:93:ef:3d:b7:0a:cd:
                    1c:08:49:1c:98:9b:e3:2b:17:b3:90:69:74:83:02:
                    0c:68:b8:c4:f6:5b:62:c4:cb:59:70:10:ad:d1:c1:
                    2a:48:fd:98:28:a8:50:df:92:fb:dd:93:f5:c6:fc:
                    d8:ff:7d:77:e6:e8:35:6a:8b:b0:2f:ef:73:e8:16:
                    e8:a7:c4:03:a2:6e:f5:65:4c:b7:bc:f3:4c:6e:50:
                    8e:bc:0b:87:c7:05:ad:6a:75:33:1b:ad:51:80:50:
                    74:a2:80:53:0d:0a:85:5f:4c:f7:33:47:45:c1:ab:
                    07:5f:b3:1c:89:b7:40:f3:87:57:7e:98:25:93:d5:
                    fc:01:06:a9:9f:10:f8:29:ba:37:9d:aa:39:d1:75:
                    81:fb:4f:c3:e8:a7:80:bc:e1:93:45:50:3d:49:53:
                    83:21:57:17:e3:7a:d2:5e:0f:79:4d:97:fc:ae:3c:
                    35:ac:42:d8:c8:c4:af:b9:00:3a:0b:f0:57:17:18:
                    bf:43:01:0a:3b:0b:95:61:68:7c:cf:73:18:22:7a:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:60:80:C1:FC:E3:28:38:5C:0F:A9:A1:25:2D:E4:AF:02:1E:9F:1E
            X509v3 Authority Key Identifier:
                keyid:9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:25:cc:ac:b8:59:95:ea:09:fa:29:37:ab:8b:2a:f0:ff:aa:
         06:b5:21:fa:35:67:9f:27:9f:3b:e4:19:fc:53:a8:26:d0:22:
         42:b2:f7:df:f7:85:ee:29:fe:ed:27:18:1b:ec:bf:16:3d:de:
         9b:b3:de:e9:f2:44:97:c6:6f:0f:94:9a:d4:ee:01:e7:2a:fc:
         ca:29:7c:a0:f0:13:e6:5e:77:e1:40:fa:47:74:95:aa:1d:7f:
         a2:c9:81:8c:e9:96:af:a4:53:1b:9f:77:dd:12:fb:52:b3:7f:
         28:0f:ba:84:d0:4f:8e:16:a5:c0:cd:98:10:3f:7b:e5:7d:d6:
         b8:d1:1f:6a:27:44:97:ba:1d:d2:a1:8c:17:44:e3:f1:87:ba:
         71:77:bd:df:b8:bd:aa:5a:cf:f9:9b:55:f1:42:9b:7e:c3:44:
         cc:e4:56:b4:db:45:cd:cc:56:a4:c0:7a:8f:d0:5f:e5:bc:40:
         a1:ad:1f:9c:15:eb:c3:1a:ff:b3:ee:fb:c4:18:5d:9f:b5:1a:
         06:37:74:30:12:44:4c:eb:3d:87:c4:58:24:2f:03:38:7f:24:
         80:72:77:d4:2d:99:68:d5:5f:92:2b:a3:1a:60:a2:d5:7d:b2:
         72:52:1f:d0:b2:43:db:86:73:cd:e6:0e:f8:32:18:04:10:65:
         f4:db:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:17 2026 by rpki-client