This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
File:                     NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft (raw, json)
Hash identifier:          tJTUXDbQ77nK8p6McZAc9Nxula96VdxwVG1/hbMv+2k=
Subject key identifier:   DF:97:9A:A1:CA:47:D7:C7:36:D8:BF:14:21:E7:17:03:CB:FE:46:9C
Authority key identifier: 34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
Certificate issuer:       /CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Certificate serial:       019C427DF13F1C36D337041C12C227755EC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
Manifest number:          13F0
Signing time:             Mon 09 Feb 2026 13:01:15 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:15 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:15 +0000
Files and hashes:         1: NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl (hash: pnipQPI6Fns6+1WkbApRu+y2rGsgzjSGgjvlpRwMGUI=)
                          2: yLkWfOZ9pwRHBarKKNZ4fHLFIcc.roa (hash: svQPIicQF6L4iRCTdIy2JhuS8+4OxhvfXxWW++0FFdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:f1:3f:1c:36:d3:37:04:1c:12:c2:27:75:5e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
        Validity
            Not Before: Feb  9 13:01:15 2026 GMT
            Not After : Feb 10 13:01:15 2026 GMT
        Subject: CN=df979aa1ca47d7c736d8bf1421e71703cbfe469c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:b5:7d:28:cf:75:5a:24:57:d8:a1:07:94:
                    89:09:93:bf:52:a2:b9:00:4b:65:62:80:9c:58:0d:
                    9d:a1:40:cc:f1:3c:e6:ad:38:03:bb:62:4b:bf:b1:
                    04:5d:bb:5a:e5:3a:ea:33:ce:08:a2:2e:55:2e:d0:
                    f6:a1:55:55:21:e0:c8:2e:bf:e7:04:f5:c8:43:c2:
                    3f:6b:e0:14:ef:64:84:04:46:7b:b4:27:f7:4a:29:
                    6c:27:94:69:38:b0:68:5c:01:fc:7b:e4:ff:cb:42:
                    50:43:9f:9a:1c:21:9c:c1:2a:80:2f:13:f7:5b:70:
                    99:6b:5b:95:74:9e:53:b5:41:44:cd:80:b0:28:a4:
                    a3:e8:7c:34:35:55:8c:e6:51:eb:f0:74:3b:7b:e5:
                    3d:da:17:57:ba:d7:86:bf:c0:de:9e:fd:20:4a:01:
                    5b:a6:3d:f8:3f:4e:9d:d5:8e:8d:c5:ca:8b:b3:2b:
                    9a:54:59:c2:6c:66:ba:8f:26:38:d4:3a:dc:9e:38:
                    81:86:4f:e5:c4:84:f3:31:2b:95:49:fd:70:3c:66:
                    ec:8d:04:a6:34:76:32:fc:14:5f:4f:e7:79:15:a1:
                    bb:09:05:8d:92:a0:fc:34:df:65:38:7c:7d:d5:f4:
                    82:62:4e:b2:87:7a:74:44:58:2b:ad:99:b6:b3:79:
                    f6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:97:9A:A1:CA:47:D7:C7:36:D8:BF:14:21:E7:17:03:CB:FE:46:9C
            X509v3 Authority Key Identifier:
                keyid:34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:71:00:28:1a:1c:8e:6e:98:2b:fa:80:a6:d0:ab:32:e8:58:
         c2:40:0b:56:24:e1:3b:88:af:19:67:cb:79:b3:d0:36:e7:a8:
         75:ba:34:72:16:52:6b:2f:b2:1e:f3:a1:d0:81:ac:9b:45:03:
         82:d2:29:6c:01:c5:d1:9a:58:90:e5:72:b1:c0:d2:fd:a6:f8:
         d9:09:30:99:3f:1b:d2:0f:0f:36:ef:8f:61:5b:d7:13:b1:29:
         94:71:6a:1c:e1:50:41:71:9e:bf:6c:c6:19:15:2d:e9:d2:4e:
         ca:21:f3:65:b1:2a:66:15:4e:ef:ca:9d:32:24:ec:ad:85:d2:
         ad:02:1b:18:75:c1:2a:a2:d0:91:84:6b:ca:bc:61:19:fc:48:
         5c:29:b7:8c:cd:6b:60:e8:f6:19:19:30:d8:0f:c9:70:f2:70:
         f5:d8:f5:62:0e:e5:b4:70:6f:5b:3b:47:b4:df:a8:d9:88:70:
         31:4d:cc:fd:4c:9a:fd:2a:e0:4d:f4:78:9d:a9:7e:c2:5f:2d:
         86:9e:85:b5:07:3b:66:9b:48:b7:35:fa:d4:49:b9:4d:55:b4:
         e3:e9:82:89:c6:93:56:d2:3d:56:96:5a:ab:f4:4d:bf:cc:24:
         be:91:57:06:7b:24:c9:1b:16:2b:7e:29:ea:38:92:bf:4d:e2:
         db:d7:8c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:06 2026 by rpki-client