This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File:                     nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier:          I3vxtM/dos3DNC5f+nNJArvm3tm6d2w2R93Bz/m+lJk=
Subject key identifier:   0D:BD:F4:46:34:DA:6F:E8:6E:50:33:A3:4B:36:95:9C:2A:14:C9:C8
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer:       /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial:       019C4359353FA7478CC0C304F45608D32989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number:          07CE
Signing time:             Mon 09 Feb 2026 17:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:45 +0000
Files and hashes:         1: 3ehZu4iMUfcPfFG_lH5I5KE8DpU.roa (hash: s49ndrQJ40YayQJgFBDJ5AW3+BdIOwIQqaaClazI6fw=)
                          2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: C5jh/gz1Kr5a8+evbsVvSxMasfLYbL8K/g9tf/DVJ+w=)
                          3: sltPVYNXyX3HM6mTIe2E6MEOa4Q.roa (hash: myvFYoXQz/pPQaI+zt/UsJxjmt7PUBokhbr3Wq0mEHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:35:3f:a7:47:8c:c0:c3:04:f4:56:08:d3:29:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
        Validity
            Not Before: Feb  9 17:00:45 2026 GMT
            Not After : Feb 10 17:00:45 2026 GMT
        Subject: CN=0dbdf44634da6fe86e5033a34b36959c2a14c9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:35:38:f8:8b:12:aa:ea:67:e5:08:19:c5:71:
                    d2:c1:7e:aa:14:0e:11:70:cb:ad:47:39:8f:05:4b:
                    57:0f:00:a0:59:e7:ac:23:cb:e8:62:ad:87:51:95:
                    50:f2:18:25:50:b6:5e:ce:84:d2:6b:ec:c3:35:71:
                    19:88:f2:2f:f2:4a:ef:42:ba:00:1c:ff:cf:51:78:
                    a8:8a:e4:57:79:17:ce:5f:61:43:a3:ab:d3:d6:34:
                    c4:7f:67:c7:72:39:4b:2f:1c:d1:d8:06:17:02:54:
                    05:3d:7e:90:5a:d8:52:f9:cf:8c:da:89:43:8d:8e:
                    e2:98:6b:00:aa:b7:fb:b2:72:2f:8c:e5:b6:88:95:
                    66:24:b1:ce:33:26:2c:78:77:13:b5:33:db:d0:32:
                    84:72:21:3d:d3:f6:d0:8e:ed:a3:6f:2b:2f:7d:44:
                    2d:5c:76:8d:8d:33:af:8f:49:a0:38:8b:4f:3c:75:
                    56:16:c7:03:a7:31:e5:d6:12:db:8b:4d:46:3c:cb:
                    9a:77:28:ee:d0:42:68:00:2a:cb:3c:c9:37:77:c9:
                    1b:ba:83:74:3b:30:73:55:ef:c4:6d:71:2d:5c:32:
                    75:04:1f:64:b3:11:87:fb:3f:30:4f:7c:e6:ba:6b:
                    3d:76:c1:23:f3:74:cb:8a:90:d3:24:4e:2b:71:07:
                    15:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BD:F4:46:34:DA:6F:E8:6E:50:33:A3:4B:36:95:9C:2A:14:C9:C8
            X509v3 Authority Key Identifier:
                keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:10:e8:1d:f3:41:a4:e8:a1:d5:0a:18:df:27:80:5f:86:bf:
         ae:c6:6b:0c:a6:6a:25:20:28:bc:49:fc:95:c5:3c:9e:bb:6d:
         58:a3:4e:7a:94:19:97:a6:8c:1a:60:df:fc:ea:ba:9a:81:a5:
         c7:b9:4e:3a:06:d6:7a:34:58:d0:67:ad:af:6b:38:79:7e:3f:
         f1:b4:7e:e7:9a:5a:e4:7d:0e:d2:bf:f8:e4:54:9a:02:c1:0c:
         75:e9:00:6d:1a:06:ce:24:d7:cd:72:38:0f:bc:62:c2:18:76:
         21:20:c9:8f:78:c0:cb:e7:da:0e:57:2e:d6:2e:3c:a9:24:ef:
         47:f4:2a:0a:85:85:2e:1b:6a:43:fa:92:2b:8d:3f:bc:61:c5:
         b5:1d:4e:ef:d4:64:42:78:ba:1e:ab:0e:14:59:1f:56:b7:3f:
         3a:02:5e:25:4e:92:01:da:23:78:ff:7c:77:6d:bb:32:35:e0:
         06:3c:b4:b1:34:2a:2f:c1:64:5a:e1:fb:9d:5c:d6:f9:eb:76:
         02:57:f1:0c:19:58:e3:ff:62:d4:93:c8:61:62:fe:50:4c:f0:
         4d:d1:96:02:0a:24:7a:d1:e9:df:4c:4c:00:9b:e3:69:d8:2c:
         cc:08:77:b8:db:00:76:26:cc:b5:9c:d3:44:07:e2:4f:5f:06:
         2d:b4:ff:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:04:47 2026 by rpki-client