This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
File:                     NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json)
Hash identifier:          6yNYxOP55IKrjcQSmvSEuibnwS2ElF0mEuVGTqKvz2U=
Subject key identifier:   E2:A4:16:98:26:0B:F2:11:3F:48:6D:1E:ED:0F:A8:B4:07:14:CE:A4
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Certificate issuer:       /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial:       019C43907F335E1694DA7F787AEC69C27D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 18:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:09 +0000
Files and hashes:         1: 0e20Vnm0C5gqevgZraEdYYQvC2k.roa (hash: 6onisxkqwNjHYYcPnOhg1nsEQp++MNFfPSzmz8SXV28=)
                          2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: ubRdfSCv/rgkiCfd/q0tcp81AMy8VXFDhZpuAW2MIh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:7f:33:5e:16:94:da:7f:78:7a:ec:69:c2:7d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
        Validity
            Not Before: Feb  9 18:01:09 2026 GMT
            Not After : Feb 10 18:01:09 2026 GMT
        Subject: CN=e2a41698260bf2113f486d1eed0fa8b40714cea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3b:a4:dd:e1:53:21:2f:e3:54:b7:e0:4f:49:
                    87:d9:4c:52:20:ad:d5:55:61:89:38:24:8b:72:48:
                    57:1b:8b:f5:45:db:0d:f6:6f:54:c0:a5:0a:9e:a5:
                    d0:e7:76:74:2d:9c:0c:09:d7:59:6f:be:fb:15:90:
                    14:e8:49:ab:2d:29:6b:f2:8e:01:ab:1f:8b:7b:70:
                    1f:af:35:d7:48:59:39:ba:ba:23:cf:6b:2a:d7:a2:
                    e5:05:9e:82:c5:7c:b4:ec:81:cf:a6:04:81:78:34:
                    90:14:b2:35:b4:d0:0b:d9:7c:ee:22:f8:bf:bf:e1:
                    c4:be:5b:1a:9d:52:92:5c:90:31:4e:a0:5c:93:ed:
                    e6:32:44:de:5a:c9:ba:84:16:e1:70:03:34:06:cf:
                    25:b3:71:8a:c8:2c:f8:67:63:62:38:1d:58:1e:34:
                    39:65:e8:ca:b5:c7:8b:a0:90:e8:6d:03:a4:b2:8f:
                    0b:79:46:b3:85:8a:5c:0a:eb:ee:c8:e1:ed:5c:e4:
                    26:48:a2:30:aa:c6:53:44:1f:4d:23:e1:15:3a:4f:
                    4d:9f:ca:1c:71:1e:07:cf:70:21:8a:b2:f6:09:96:
                    f0:24:82:a3:7d:5d:fa:20:d9:e7:f1:e6:cd:09:ba:
                    d9:4e:32:67:a6:a5:dc:e5:ce:39:19:b9:4f:62:c5:
                    00:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A4:16:98:26:0B:F2:11:3F:48:6D:1E:ED:0F:A8:B4:07:14:CE:A4
            X509v3 Authority Key Identifier:
                keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:65:19:5e:5a:86:9d:92:23:1c:12:79:9d:06:66:b3:65:1e:
         3f:74:61:0f:47:19:ea:9d:e7:bb:b1:df:b4:d3:a1:12:6f:ef:
         82:2c:75:54:87:d0:9c:ad:0a:d8:95:7e:f6:20:01:95:09:68:
         eb:08:fe:84:55:59:a2:7a:d3:13:58:96:2c:2f:b0:c6:e6:32:
         8d:28:70:a0:7b:69:56:dc:69:52:31:be:24:c6:05:ae:dd:d7:
         ef:25:33:98:9e:85:e1:40:3b:ef:cf:32:69:63:38:20:91:7f:
         10:32:16:cf:58:30:14:6f:e8:50:86:69:ab:4a:da:ce:e8:35:
         8d:77:29:43:52:a7:e4:c8:95:ec:61:ce:f0:76:17:8f:56:c9:
         bc:e0:ef:e2:1f:9a:08:05:0c:dd:b3:a7:64:3e:d2:20:13:7d:
         29:6b:d6:4a:4b:67:98:34:d7:8b:67:63:92:a3:bb:99:da:9f:
         9b:af:fc:9e:2b:77:89:78:e6:0e:87:c2:c7:40:5e:b4:80:07:
         c5:37:7a:e1:94:57:f7:5e:5d:a1:3c:4e:5d:8a:ce:81:cc:e0:
         c1:25:d8:a6:6e:4f:80:36:72:96:8c:60:e7:b4:ab:6a:d7:29:
         dd:37:90:09:ea:22:97:dc:6a:be:a1:e6:39:a9:3c:f9:6d:47:
         52:85:de:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkH8zXhaU2n94euxpwn1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YjAzZWM4NWQwODYwN2E2YjFkZGYxZmU3OWRjNjUxY2Nm
ZTNmMzcwHhcNMjYwMjA5MTgwMTA5WhcNMjYwMjEwMTgwMTA5WjAzMTEwLwYDVQQD
EyhlMmE0MTY5ODI2MGJmMjExM2Y0ODZkMWVlZDBmYThiNDA3MTRjZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTuk3eFTIS/jVLfgT0mH2UxSIK3V
VWGJOCSLckhXG4v1RdsN9m9UwKUKnqXQ53Z0LZwMCddZb777FZAU6EmrLSlr8o4B
qx+Le3AfrzXXSFk5urojz2sq16LlBZ6CxXy07IHPpgSBeDSQFLI1tNAL2XzuIvi/
v+HEvlsanVKSXJAxTqBck+3mMkTeWsm6hBbhcAM0Bs8ls3GKyCz4Z2NiOB1YHjQ5
ZejKtceLoJDobQOkso8LeUazhYpcCuvuyOHtXOQmSKIwqsZTRB9NI+EVOk9Nn8oc
cR4Hz3AhirL2CZbwJIKjfV36INnn8ebNCbrZTjJnpqXc5c45GblPYsUAfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKkFpgmC/IRP0htHu0PqLQHFM6kMB8GA1UdIwQY
MBaAFDWwPshdCGB6ax3fH+edxlHM/j83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jYzRmZTktZTQ4Yy00MmRhLTk3ZWEt
YWI1N2NhYmMxOGY3LzEvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9jYzRmZTktZTQ4Yy00MmRhLTk3ZWEtYWI1N2NhYmMxOGY3
LzEvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGUZXlqG
nZIjHBJ5nQZms2UeP3RhD0cZ6p3nu7HftNOhEm/vgix1VIfQnK0K2JV+9iABlQlo
6wj+hFVZonrTE1iWLC+wxuYyjShwoHtpVtxpUjG+JMYFrt3X7yUzmJ6F4UA7788y
aWM4IJF/EDIWz1gwFG/oUIZpq0razug1jXcpQ1Kn5MiV7GHO8HYXj1bJvODv4h+a
CAUM3bOnZD7SIBN9KWvWSktnmDTXi2djkqO7mdqfm6/8nit3iXjmDofCx0BetIAH
xTd64ZRX915doTxOXYrOgczgwSXYpm5PgDZyloxg57Sratcp3TeQCeoil9xqvqHm
Oak8+W1HUoXeUQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:13:29 2026 by rpki-client