This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File:                     nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier:          qJUwPrSiM4lS/erfko43wvCRj4UjENJkpY5f/K42xpE=
Subject key identifier:   9E:23:27:36:E2:61:8F:0C:C3:A7:A6:86:07:1E:BB:32:6C:BB:5B:3E
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer:       /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial:       019C438FF8BEA73B2255CFDCCF20E31BAB3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number:          02FA
Signing time:             Mon 09 Feb 2026 18:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:34 +0000
Files and hashes:         1: DDkvvm20UwOj8A7Y_U-N1JKON2M.roa (hash: CztSHRDK9GU8Z8Q6g/s60OYynXKDEVEnijjY44XdV/w=)
                          2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: yoHaKw5GkspdPXJgo1OtzJSTaUlIqDGfDwwq8sfOUvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:f8:be:a7:3b:22:55:cf:dc:cf:20:e3:1b:ab:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
        Validity
            Not Before: Feb  9 18:00:34 2026 GMT
            Not After : Feb 10 18:00:34 2026 GMT
        Subject: CN=9e232736e2618f0cc3a7a686071ebb326cbb5b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:f3:0f:2d:16:e4:17:65:7d:e8:60:ab:33:
                    a2:b5:0a:7b:8d:ca:9d:44:28:04:00:d2:10:ac:17:
                    87:97:b7:f9:ab:83:7d:99:c5:ae:ef:93:9f:c2:93:
                    6e:89:00:43:ba:44:bf:5c:96:c7:8b:e0:00:6f:7a:
                    b4:40:47:90:f0:23:97:22:41:70:8f:bb:3c:6f:53:
                    1f:d2:28:67:52:5c:b1:37:ad:23:d9:d9:b7:b6:e1:
                    75:79:85:40:38:3a:22:e7:9e:22:f0:61:8e:99:82:
                    c1:e4:7d:da:00:22:0c:33:73:e7:86:f9:59:02:fb:
                    ef:4c:f8:61:f5:b6:c8:ae:42:bd:67:7c:61:c5:85:
                    a0:6b:0c:1b:cd:13:6f:f1:ce:ba:c3:6c:be:7b:ac:
                    6b:ba:f5:fa:8e:da:24:3b:87:50:a0:8d:a6:60:b7:
                    d9:83:69:37:0a:0d:e4:c1:f6:89:64:40:0e:a7:92:
                    c7:32:af:c1:bf:f0:f1:09:38:5a:6d:7c:0e:6b:bf:
                    02:5e:0f:a4:1d:88:07:62:fe:4b:aa:32:28:3a:11:
                    56:da:ec:9e:55:c4:c8:35:3f:40:26:29:91:e2:1c:
                    fc:d8:50:d5:18:77:bc:79:d8:60:0f:00:ef:3f:ff:
                    16:0c:c8:db:de:82:6c:c2:27:34:f5:dd:70:d9:07:
                    fa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:23:27:36:E2:61:8F:0C:C3:A7:A6:86:07:1E:BB:32:6C:BB:5B:3E
            X509v3 Authority Key Identifier:
                keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:16:44:6c:88:ab:10:76:86:c5:11:16:16:ea:3a:77:91:7d:
         10:51:25:59:55:ba:17:52:3f:87:84:e0:c5:cc:5c:52:8e:ef:
         3e:21:0a:2b:d4:6f:c4:5c:8b:94:b0:a1:a1:02:d8:16:4d:dc:
         83:b5:67:46:45:73:b7:16:7e:d3:a6:6d:37:56:a8:1c:10:e8:
         cf:00:30:de:e4:10:3e:c5:4c:52:06:d9:09:eb:1d:e7:4f:a0:
         ad:37:f9:70:c0:30:63:0c:08:49:4f:d2:09:0f:41:ad:b4:df:
         02:5c:c0:58:4b:1c:e6:da:a3:c4:e0:7b:82:04:93:aa:dd:9c:
         ea:78:88:12:ba:6f:c3:08:cf:45:0b:3d:3c:e0:3a:3d:2b:eb:
         a8:06:84:f6:21:57:34:89:d3:20:84:82:0e:98:30:dc:d9:d4:
         0f:eb:5d:85:34:c9:0d:31:2f:44:b1:5d:e4:28:4b:b3:12:f6:
         1b:62:4c:57:1d:f6:87:90:23:72:90:b6:42:03:fa:55:8c:d1:
         a7:cc:40:31:ae:5c:50:71:de:f6:fc:f5:87:27:41:61:13:ec:
         94:7e:11:4b:d1:ba:33:ed:8a:b3:0a:86:03:bf:66:2a:dd:18:
         93:8d:b8:47:b9:ac:0d:7a:93:46:77:87:6a:49:bf:67:63:f2:
         1c:5a:2b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:42 2026 by rpki-client