This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File:                     8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier:          XxsCEbCWz/NDS9ZkmxCVY9XPRZUrR9vH5IULH1YUvRM=
Subject key identifier:   20:46:61:98:B5:66:C6:AD:FF:CC:36:3A:94:01:3A:58:92:B6:57:68
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer:       /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial:       019C446C3DC05B6FEEFB8A2C32329E509A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number:          11D6
Signing time:             Mon 09 Feb 2026 22:01:10 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:10 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:10 +0000
Files and hashes:         1: 2hKU1NYjNBDhpco5HEAK3um-kbE.roa (hash: YhjeByYxX6wVLssUtZI4v3Qulxa9a1zwl57K6O3z8yo=)
                          2: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: VzuUB5lQgHUCRdwo7skPVanxExcG2YHrUBsKHRn9et4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:3d:c0:5b:6f:ee:fb:8a:2c:32:32:9e:50:9a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
        Validity
            Not Before: Feb  9 22:01:10 2026 GMT
            Not After : Feb 10 22:01:10 2026 GMT
        Subject: CN=20466198b566c6adffcc363a94013a5892b65768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:46:71:5e:00:da:cc:70:ff:3c:cf:e4:b3:4b:
                    2f:b4:91:03:5f:6f:a8:0b:1a:da:8f:e4:bc:10:fd:
                    32:2f:65:9c:5b:d5:ff:92:fc:41:7e:6f:d1:86:99:
                    50:88:eb:8d:8b:e5:9d:4d:7c:64:a0:5f:e1:5f:72:
                    e0:30:37:a9:4b:76:fe:65:80:03:f4:7f:27:7f:c4:
                    37:fc:8d:1d:d5:00:e2:41:d9:cb:a3:af:d9:f4:29:
                    3d:68:ba:13:eb:0e:9e:eb:14:f0:c9:64:ce:e6:84:
                    cb:38:d8:7e:9f:8a:fa:a8:aa:40:e6:f6:f6:c5:de:
                    85:9c:95:5f:c9:ab:d0:86:76:ea:d4:ec:06:80:b0:
                    ee:dc:48:57:6d:fa:ba:59:ac:2e:7e:05:eb:77:46:
                    1e:b0:47:6c:a7:d4:4b:60:17:f3:46:ae:c3:db:cc:
                    5f:4a:76:53:7b:6e:20:02:7e:f2:15:7c:17:e0:fb:
                    fc:1f:1c:46:99:7f:1c:ad:fc:38:28:6d:fb:33:c7:
                    62:c7:10:46:b6:08:66:29:d0:63:9e:2c:d0:b8:0a:
                    e9:cc:c2:40:5e:91:87:cc:46:37:fa:ec:d4:39:c5:
                    19:fc:e4:10:10:cd:c9:20:f0:37:37:d7:d6:e0:73:
                    e0:6d:b2:53:60:b0:34:c2:94:b0:e7:b0:2c:a4:40:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:46:61:98:B5:66:C6:AD:FF:CC:36:3A:94:01:3A:58:92:B6:57:68
            X509v3 Authority Key Identifier:
                keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ac:92:63:d0:61:aa:22:ad:7d:c0:7b:7d:54:2c:f9:97:75:
         d4:b5:55:f6:f7:99:b7:be:59:f0:9f:b8:46:00:13:2d:91:fb:
         f7:ce:34:db:87:63:c4:94:d3:6d:49:40:11:f6:a1:39:9e:bf:
         b4:01:3b:3c:29:65:61:f8:2c:41:d5:f9:c0:fb:48:ca:64:b9:
         e1:e4:4e:71:7b:3c:67:b3:6f:ba:2a:4b:86:17:6b:8e:5c:9d:
         26:2c:77:c7:a0:10:58:fd:69:28:fe:08:29:9f:c6:62:c2:15:
         af:ac:88:3e:a6:59:e5:36:71:cf:e1:f5:ce:dd:94:d2:f8:8d:
         b8:43:6d:5b:75:71:46:c6:c8:2a:f7:1b:15:be:b8:63:89:c7:
         21:33:9c:90:46:fd:27:b7:50:29:66:2b:c3:89:e7:c6:55:82:
         72:aa:99:11:c7:72:7b:00:90:f3:31:78:b0:3f:e5:0c:bd:72:
         7d:a4:b7:61:ed:b6:96:8b:0b:1d:a4:73:51:b8:f4:17:52:3f:
         8f:ed:a7:d2:bf:6d:af:eb:25:43:bd:47:51:f5:87:91:c3:9e:
         8e:41:40:47:44:97:ff:ba:d5:ca:4d:c0:a5:35:4f:16:85:ab:
         cf:db:a0:ab:03:50:dc:40:e9:99:c9:1b:87:7e:06:f4:d2:e8:
         c9:92:f8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:37:47 2026 by rpki-client