This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File:                     NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier:          y7J5LXfCMJLqXcZ3FrNrBufBUZzjspFDPEoAHN2NH6c=
Subject key identifier:   27:C8:AD:2C:B5:1F:C7:9C:08:85:ED:0D:B3:85:79:44:3F:F6:47:B3
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer:       /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial:       019C42EB8D73060B09C6E6992F0C370E7A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number:          181D
Signing time:             Mon 09 Feb 2026 15:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:59 +0000
Files and hashes:         1: 07kKKUMgBwNlGH8ItBg5huXyjBo.roa (hash: 0Db0rW3HyxMoZLKg3qDXyoGcyEgSvoFlGL2izdT+lqA=)
                          2: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=)
                          3: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: JWTIlnozq8xin1gEO9+sfAgVdBkswXB/OghXdmeMNeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:8d:73:06:0b:09:c6:e6:99:2f:0c:37:0e:7a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
        Validity
            Not Before: Feb  9 15:00:59 2026 GMT
            Not After : Feb 10 15:00:59 2026 GMT
        Subject: CN=27c8ad2cb51fc79c0885ed0db38579443ff647b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6f:89:ea:04:32:db:bc:9b:aa:df:2e:ed:55:
                    dc:af:cb:b0:3b:df:a1:89:b6:ac:5e:9f:69:8d:8c:
                    24:61:7f:c0:9d:66:9b:5b:1c:8d:27:4e:03:22:d3:
                    80:94:d5:09:1f:2d:7c:66:42:06:02:61:5f:37:3f:
                    51:f2:c1:3e:af:ea:f1:df:1d:c9:4c:e9:6d:3e:df:
                    2b:7f:30:65:85:03:ef:2f:6e:c2:a0:15:6c:b4:76:
                    4a:3c:76:f0:13:ed:a7:5c:30:d7:39:a6:ee:4b:6f:
                    92:14:5d:1a:b0:dc:34:f6:08:b8:41:a7:f2:05:4a:
                    72:65:ed:ff:85:2a:ee:9d:80:32:2a:ec:4e:d4:65:
                    06:cc:7f:88:87:eb:8d:4d:bd:a0:65:c8:32:1d:f0:
                    4d:35:5f:32:ce:b7:4c:cd:16:83:7e:8a:43:30:5d:
                    6c:17:0f:6c:3b:18:1e:fa:e7:56:5e:96:1c:d2:a3:
                    fc:0b:f4:b6:05:df:84:38:d0:06:13:4b:19:12:0f:
                    30:d1:11:1a:6b:c6:d5:54:8d:49:c6:23:bb:8e:7b:
                    23:3d:79:24:6a:9d:95:c6:3d:48:b5:8f:49:ed:6e:
                    93:17:db:05:ef:e1:d2:13:a1:08:35:2b:db:f9:94:
                    1c:09:bb:70:cf:5b:ce:85:77:90:93:98:5b:b3:f6:
                    ed:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C8:AD:2C:B5:1F:C7:9C:08:85:ED:0D:B3:85:79:44:3F:F6:47:B3
            X509v3 Authority Key Identifier:
                keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d6:f5:bb:88:46:e8:88:a1:bb:47:a8:60:09:fd:89:e8:30:
         ec:3a:15:60:76:7e:bc:2a:98:70:ea:36:f4:85:01:61:4a:46:
         12:d0:95:b0:d9:c9:cf:c2:0f:50:7e:bf:a2:19:a4:7f:0f:5b:
         21:ff:27:96:a9:3a:81:3d:14:7b:19:5a:03:67:82:c2:8a:44:
         6f:d2:be:f2:12:08:9c:54:1f:24:be:af:42:be:af:cc:16:b2:
         99:84:fa:88:3f:16:74:79:2f:52:1d:c2:94:c7:d4:96:1c:9c:
         5d:ea:ab:66:a2:2c:80:8f:88:a2:d6:2f:ae:49:ba:d9:3a:7c:
         d8:c8:20:dd:9c:f2:fa:1b:6f:8f:fa:1e:bb:d5:ae:7d:44:cb:
         2d:55:61:a6:d3:0b:4d:3b:ff:f0:bd:fe:52:4b:1a:24:d0:21:
         1b:07:64:67:31:97:71:28:55:66:eb:41:7e:d1:45:41:d4:8f:
         9f:ed:26:ca:95:d0:b5:d1:6d:f1:5c:81:04:17:7d:42:d6:28:
         3d:e4:ef:0b:c1:a7:93:22:50:1f:a6:24:c3:55:16:94:03:25:
         bd:3c:d7:02:64:e3:c8:10:e8:9d:c6:ca:bc:a9:73:4d:8f:ec:
         33:62:d1:1e:67:3b:cd:5f:f0:c1:81:f3:17:ad:ab:a6:f4:23:
         12:1e:21:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:31:35 2026 by rpki-client