This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
File:                     NW4BARgaykJR6fJKj2NzXi9evc0.mft (raw, json)
Hash identifier:          1S8Ng5x/4/258gSqqDRXhTx7UYhbQ0yNoA/B2n83EKo=
Subject key identifier:   B9:BF:35:F3:F4:3A:CA:6D:AB:0F:01:B8:6C:D1:45:1E:50:F7:1C:40
Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
Certificate issuer:       /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Certificate serial:       019C424622ABA0C18EADEA0A88BFA833D514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
Manifest number:          051D
Signing time:             Mon 09 Feb 2026 12:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:18 +0000
Files and hashes:         1: NW4BARgaykJR6fJKj2NzXi9evc0.crl (hash: a7eHLN+eyKmdOkNtVlo5w4Eo9om6NDwuFHe9HisS5Jo=)
                          2: OpL-pa8NL900kH8xzWl5YjvThJY.roa (hash: vlDt2SoHGnTYLb5raTfW4h1Lk0nI8+h/wkbguuhzWkQ=)
                          3: sIlCaCD_4BDRNR5RbqWtiio-eF0.roa (hash: PQBWwOKM2zk4TrqswCsq5mNswJnxO+Lcbmzd/J2ySfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:22:ab:a0:c1:8e:ad:ea:0a:88:bf:a8:33:d5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
        Validity
            Not Before: Feb  9 12:00:18 2026 GMT
            Not After : Feb 10 12:00:18 2026 GMT
        Subject: CN=b9bf35f3f43aca6dab0f01b86cd1451e50f71c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:c9:2d:5b:33:a6:15:d6:62:83:2b:49:be:
                    ce:4a:ac:dc:85:e2:71:24:ab:f8:82:f3:05:97:2e:
                    56:dc:8e:f1:87:c8:c0:54:cd:69:97:df:48:57:f7:
                    db:4d:74:bb:69:32:f4:93:f5:d9:fd:91:00:5c:02:
                    06:25:71:8d:8b:84:fd:cc:7b:d3:04:b8:51:34:68:
                    d6:ed:3b:98:de:19:a6:85:6c:bc:86:0d:e5:af:12:
                    52:30:27:7d:8e:b2:e0:fc:c3:a9:60:c5:90:09:c6:
                    ca:51:c3:82:d3:0e:4e:28:1a:78:e9:75:8f:fb:92:
                    af:4f:f3:56:66:5d:e0:45:98:44:8d:ee:94:9a:59:
                    d3:29:02:a9:2e:ab:85:2c:09:48:db:5c:78:d8:83:
                    87:8b:9c:f4:53:ad:cd:a9:4b:28:60:3a:db:90:84:
                    96:2b:47:a7:4c:ce:68:0e:72:9d:84:d2:4b:8c:e2:
                    a9:ec:25:93:de:1e:d0:f5:45:e9:63:ae:0d:7c:c1:
                    24:c6:f5:ce:be:fb:57:fb:bc:60:38:94:88:38:e3:
                    e6:6b:1d:32:06:69:a2:79:1b:f2:88:4b:85:28:cd:
                    73:ad:50:2d:67:f5:ac:ca:31:2b:10:28:ac:fb:c7:
                    af:ba:9f:8b:3f:74:8e:7d:6e:c9:99:7b:e8:87:55:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BF:35:F3:F4:3A:CA:6D:AB:0F:01:B8:6C:D1:45:1E:50:F7:1C:40
            X509v3 Authority Key Identifier:
                keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:6a:4c:e3:f0:56:de:67:cc:38:cc:a1:12:c7:f9:c8:3e:95:
         82:7b:ef:ae:7e:bd:51:af:31:84:45:98:ac:ce:02:48:f0:74:
         b1:d0:e0:73:a3:2d:1c:e5:53:ec:06:90:ee:13:f8:e0:a5:58:
         91:d0:79:71:5e:b2:eb:ac:d2:05:9c:61:7f:62:29:8b:c5:13:
         03:41:eb:10:33:1a:2e:51:08:bf:5d:f4:23:f7:26:dc:bd:a7:
         59:44:5c:f1:df:36:eb:07:d5:10:e4:9a:1b:4c:d7:e0:55:18:
         8f:dd:3f:b8:62:af:fe:be:9a:2a:65:00:a9:a9:eb:39:c9:b8:
         94:d0:a7:09:62:bc:2e:1f:51:03:9e:55:15:b9:f6:3a:e7:6a:
         f7:eb:c7:fc:fb:b6:fe:b4:c9:71:ee:18:03:3d:3f:a6:3d:16:
         f2:b9:9b:33:dd:64:d4:de:ea:8e:98:5f:60:be:cc:89:c1:ef:
         72:4a:a1:6b:4b:c7:58:3c:1f:ba:19:fc:3e:e4:46:2e:14:44:
         31:80:cf:4b:e0:9b:7e:53:d2:3d:49:84:d2:41:39:37:f4:ac:
         6b:30:f4:d0:f6:1a:80:9d:e9:9c:33:17:aa:d0:5d:72:8c:23:
         0a:88:2c:00:79:ca:1c:93:f6:95:08:2a:24:e8:38:9c:23:7c:
         60:b7:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:14 2026 by rpki-client