This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File:                     nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier:          D8TRYou17q6nBEO9R3uiISO/vJXBAyJLqf6ZSSUhhxY=
Subject key identifier:   0D:18:42:92:1A:3A:59:9D:76:8E:1D:A3:DB:A1:C6:00:E0:50:33:EC
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer:       /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial:       019C43C706B5F3F4C71A122A29EFD0453097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 19:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:42 +0000
Files and hashes:         1: VEb6LUknY6TAB--bLPap2buV2rQ.roa (hash: VfylxmQnc3Muyj1Trwo1dEbBUHPDFWZL/o1oaD+MsA8=)
                          2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: a2E0VjeHMEKEkOpH/oUMG1jhO0VK6XgBebcEltLdFt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:06:b5:f3:f4:c7:1a:12:2a:29:ef:d0:45:30:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
        Validity
            Not Before: Feb  9 19:00:42 2026 GMT
            Not After : Feb 10 19:00:42 2026 GMT
        Subject: CN=0d1842921a3a599d768e1da3dba1c600e05033ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:0f:e8:7f:8c:6f:8f:36:23:70:45:46:4c:
                    b0:b0:5a:f7:ea:88:c3:e9:ea:10:56:57:eb:8d:fb:
                    6a:51:3d:8c:e0:d9:39:0d:db:5c:c1:b5:3f:f5:28:
                    99:c2:10:fd:d6:d5:ae:cd:6e:ff:fd:6b:5b:68:c3:
                    f5:5d:eb:e4:b4:43:aa:34:f0:13:b0:39:ed:5f:7f:
                    09:47:7d:89:95:66:1b:fc:4e:71:53:31:9f:a4:0c:
                    30:3c:cf:62:23:a4:42:71:7a:de:da:f8:0f:cf:78:
                    39:3f:21:d3:0f:55:3d:84:b7:10:ef:0f:87:46:d5:
                    16:94:e3:b8:1a:99:b5:df:66:3b:08:29:bd:e4:80:
                    a7:4e:a6:ea:e1:2f:76:41:34:e4:81:79:83:1d:0f:
                    e2:9a:32:78:53:4c:80:5b:27:b4:97:94:10:83:07:
                    b9:d3:a7:9f:02:34:16:2f:eb:64:a6:60:02:3e:37:
                    25:3f:92:27:79:fb:b1:62:52:7d:54:12:88:ae:53:
                    c3:74:bb:63:94:37:09:d8:b1:86:30:03:a5:e5:68:
                    ea:dd:92:a8:77:5d:67:96:c5:8b:21:5f:1f:36:44:
                    b7:00:97:d3:63:ef:0a:3d:13:9b:9a:ce:03:d4:f5:
                    7e:d4:7c:bc:fd:ed:93:85:13:c9:e4:fa:c1:2c:f9:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:18:42:92:1A:3A:59:9D:76:8E:1D:A3:DB:A1:C6:00:E0:50:33:EC
            X509v3 Authority Key Identifier:
                keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1d:67:d9:a5:7e:78:9a:7e:c2:1c:ee:e1:ea:bf:b7:d6:33:
         7b:4e:73:bd:24:59:f7:fd:43:84:64:8d:40:20:f5:f8:b4:e2:
         9f:98:32:c9:01:cd:7c:74:b5:b1:75:70:bd:fe:99:55:29:93:
         12:34:da:1b:f4:c1:ea:3a:63:94:2b:8b:9a:12:4e:6e:dc:06:
         2c:50:6d:e3:47:d4:87:9c:d6:0f:22:20:69:6b:16:2d:b8:39:
         08:c5:31:0e:a5:9c:c0:62:9f:3b:48:a7:bf:e2:be:14:c9:e7:
         03:38:78:46:51:05:ca:a5:eb:58:50:c3:7c:e9:21:b8:d5:4d:
         f8:73:18:43:7c:52:19:e4:15:33:06:c9:f3:47:d3:cd:87:36:
         3f:81:b1:cc:68:6f:d9:89:3e:56:30:b8:e9:54:56:8d:96:9e:
         9f:76:73:08:d5:c0:ad:e7:2e:48:92:7e:e4:7d:2b:1c:02:27:
         4e:e8:46:ee:77:4f:0d:be:00:3d:d7:77:3e:92:9c:b2:e5:96:
         0f:2f:d6:a4:40:32:50:d4:04:ff:a4:3d:80:68:3a:e4:5e:e3:
         36:19:7d:9b:37:ae:e3:d9:6b:45:37:35:08:21:c2:59:61:d6:
         f4:6a:35:5a:a7:ca:ae:15:5c:55:4d:3f:f1:6a:49:d8:8a:78:
         69:24:1b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:16 2026 by rpki-client