This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File:                     ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier:          ip1H11FQwFbfov1hK7JosQZYCqGdw137pWYPKbLwBRA=
Subject key identifier:   1F:16:47:BB:B2:FF:D6:FA:FB:24:AF:44:B5:31:DA:17:33:55:4E:9E
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer:       /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial:       019C420F789CC9C250D7497D2CF2A7D1E644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number:          1068
Signing time:             Mon 09 Feb 2026 11:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:35 +0000
Files and hashes:         1: UO-N3sO-KaU53uAnF0r-Zaxk-s8.roa (hash: th5Xy1RQIpZsqAYlXmjApBlkGESDWNt7uQOcgpj0D/M=)
                          2: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: +VzJDX64qQ3qc2BeYY7x4/rr+IO/hDXEHbDaR+vVQrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:78:9c:c9:c2:50:d7:49:7d:2c:f2:a7:d1:e6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
        Validity
            Not Before: Feb  9 11:00:35 2026 GMT
            Not After : Feb 10 11:00:35 2026 GMT
        Subject: CN=1f1647bbb2ffd6fafb24af44b531da1733554e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c2:db:d5:1d:a4:16:f3:2f:b9:f6:dc:46:59:
                    8d:20:4a:88:e8:ea:66:5f:cf:3f:4b:35:6c:40:75:
                    b8:20:8d:50:83:d3:3f:e8:df:91:88:66:97:f7:da:
                    86:39:41:a8:9c:6d:54:29:d5:86:e2:ac:5f:ac:31:
                    06:b7:9a:60:a4:90:55:25:b8:6f:d6:77:b5:c0:a4:
                    04:5f:92:32:ab:35:e6:68:a2:be:9b:af:7b:1a:49:
                    d9:5c:1f:fb:c0:dd:30:c7:7f:67:1b:a7:52:dd:9b:
                    6d:7e:df:e7:13:90:af:21:67:d9:93:eb:84:9e:ff:
                    ff:bc:c4:9d:c6:e3:e7:dc:b1:68:9d:61:17:ec:49:
                    cc:62:d8:e3:97:d3:76:33:32:c0:8a:5c:bf:c1:ab:
                    9f:53:72:b2:85:39:da:7f:6c:ca:3b:ce:96:98:d9:
                    35:22:3d:53:08:73:39:04:59:6d:2f:82:97:81:29:
                    e9:57:ba:77:78:95:5e:5b:58:41:55:eb:a3:c4:52:
                    60:52:cc:31:47:15:2e:71:e9:c4:10:46:09:55:99:
                    06:65:fa:f3:12:f7:65:0a:6a:f1:d8:bb:45:dd:f6:
                    70:ce:34:d2:a5:d6:8c:f9:91:08:ec:6b:60:1c:0a:
                    90:b0:26:ba:16:f1:e3:6c:14:35:c3:02:d4:c7:35:
                    0f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:16:47:BB:B2:FF:D6:FA:FB:24:AF:44:B5:31:DA:17:33:55:4E:9E
            X509v3 Authority Key Identifier:
                keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f1:51:51:e9:13:98:7d:83:9b:9f:0b:35:c2:30:cb:2b:1a:
         5a:83:2c:d2:02:df:da:c3:17:8f:1d:f1:a4:77:76:4d:37:33:
         32:97:bf:b5:52:b5:94:0b:1b:3c:fb:de:c6:4d:86:0d:a0:93:
         e9:b0:c0:34:d9:f3:62:46:84:11:7f:99:23:2f:f8:13:48:27:
         ef:93:13:50:68:e3:6b:20:8d:18:81:ab:a8:09:bc:fa:19:d6:
         b7:6a:de:23:8e:65:2b:9e:fd:75:da:1d:b9:1b:38:19:64:1c:
         cc:d4:68:d4:fa:4a:65:e2:7e:21:af:37:3f:e1:6d:a1:94:b8:
         cc:aa:36:7c:91:93:43:6a:a8:67:41:77:2c:12:c4:3c:ec:4f:
         1d:a9:a8:b4:4e:37:8c:2a:12:62:fe:35:8e:21:b4:fb:5d:1a:
         21:9b:09:96:0e:40:45:51:fe:eb:65:b4:8d:c2:35:57:a8:9d:
         b3:7f:c4:58:43:6c:d8:6c:1d:15:75:b9:75:0b:6f:ba:3b:4f:
         e9:3e:82:e5:a6:70:be:24:25:4b:81:e4:91:a3:ca:d6:90:52:
         8a:75:2a:69:7c:52:ac:1e:f9:e5:db:84:83:a8:90:bd:14:9d:
         ed:f6:75:b2:d4:f8:17:38:53:51:b7:c3:4e:4f:16:55:f0:88:
         58:61:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:04 2026 by rpki-client