This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
File:                     NY82t7AwW9n_68U3oadWt04E1eQ.mft (raw, json)
Hash identifier:          5ktByjNsazPSoIAGWIZCE1GSJazPe0dHEb9MRIsKTgs=
Subject key identifier:   9E:6B:D5:6C:EB:6D:01:1C:4C:06:20:99:55:09:CF:D0:C1:26:47:9A
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Certificate issuer:       /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial:       019C4390342A5224C3C75EFC0B51DCF5658D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
Manifest number:          084A
Signing time:             Mon 09 Feb 2026 18:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:49 +0000
Files and hashes:         1: HpNoPyQg0FUOf8oxwArXB82edsU.roa (hash: 90HgYD+gZxel+odW0C1ibu7Dxis/Nvml6GTHNV4NnPc=)
                          2: NY82t7AwW9n_68U3oadWt04E1eQ.crl (hash: omBleBJLqVWSywl9WnQM6exYjXnEh1K3vbdLSIRoofY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:34:2a:52:24:c3:c7:5e:fc:0b:51:dc:f5:65:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
        Validity
            Not Before: Feb  9 18:00:49 2026 GMT
            Not After : Feb 10 18:00:49 2026 GMT
        Subject: CN=9e6bd56ceb6d011c4c0620995509cfd0c126479a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:61:9d:da:46:93:ce:17:ec:c8:60:93:68:
                    7d:4e:53:4a:c6:f3:51:53:d4:58:91:fc:78:ac:ee:
                    3a:ce:d9:64:96:77:fd:23:88:c6:5e:5f:0a:ce:7f:
                    26:b8:f3:37:ea:49:a2:ce:a0:93:fe:29:67:66:88:
                    d6:14:e1:1b:82:c4:ed:bd:88:64:7f:52:db:52:7d:
                    9a:82:88:be:d7:5b:d9:ea:d9:b8:0e:e8:15:eb:9e:
                    50:2e:54:cc:05:59:f7:aa:72:a0:c3:5d:68:87:93:
                    fd:b4:03:72:bc:6c:f2:6c:f3:09:5b:e3:03:ec:16:
                    a4:5e:b2:61:ad:2a:97:46:97:e0:68:50:4e:30:20:
                    15:a5:df:67:6d:ae:cd:bf:92:a6:40:a1:33:80:c0:
                    be:b1:c3:bd:f9:21:e5:36:7c:f6:0c:79:be:d0:27:
                    87:b6:ba:3b:9c:8f:0d:12:3e:56:04:39:80:ee:58:
                    e2:7d:3a:d9:cf:29:ff:22:6a:55:a0:cc:1d:d4:bc:
                    4a:ce:a9:54:e5:8c:a5:93:99:08:da:13:4e:a1:42:
                    1f:78:86:8d:8f:8b:3d:67:11:42:0b:8d:0c:e9:df:
                    7f:b3:42:34:a1:85:ea:df:54:7a:82:28:60:f9:5e:
                    a1:3b:e9:1d:f2:d7:37:21:95:7b:83:0a:38:fe:7d:
                    31:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6B:D5:6C:EB:6D:01:1C:4C:06:20:99:55:09:CF:D0:C1:26:47:9A
            X509v3 Authority Key Identifier:
                keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:26:87:4b:6a:fb:75:2e:b0:df:2d:df:31:5f:28:b1:54:18:
         07:84:3e:ce:10:8d:b8:67:7d:f1:a6:3b:a9:e5:44:02:b2:fa:
         f6:41:1c:73:b3:0c:70:d1:bd:59:42:54:4b:5a:d7:5e:78:47:
         14:3c:35:3c:37:1b:d4:d6:90:97:11:36:d0:f3:ef:92:3d:93:
         41:cc:be:29:d8:fb:7a:cb:d8:55:57:97:01:ec:63:ec:e2:60:
         fa:ae:90:73:a0:2c:48:1f:45:a2:17:72:9a:b9:17:d9:d3:69:
         ed:81:18:dc:68:92:d8:ca:45:d6:91:ca:21:31:da:7d:80:c7:
         c0:7b:5b:f0:ee:c8:86:6f:dd:ca:fb:83:12:7b:0d:e2:b2:ed:
         7e:d3:a2:39:30:63:72:ea:70:fa:2a:a5:71:49:6c:96:b4:2c:
         15:93:e9:3e:f3:87:ab:26:d4:86:82:9d:27:3c:ac:6b:b4:37:
         06:24:e0:6c:7b:f2:4a:05:8e:ff:46:cd:69:b7:c2:6c:29:4f:
         62:69:ce:0d:39:30:e4:d3:8b:33:2f:88:4b:cb:84:3a:59:93:
         ff:e7:a5:2d:ce:e0:ef:9a:84:10:1a:53:c7:96:03:22:14:a1:
         1c:f2:de:cc:a6:7d:20:40:ee:79:f7:d4:39:c7:55:91:c4:f4:
         88:c2:39:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:53:09 2026 by rpki-client