This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
File:                     neBXM--4s3ZMqT7jQJiIadlmA6o.mft (raw, json)
Hash identifier:          NEKcxcOqa2VoYW4KAJ/uarL0B4Iz3V+N98qkvZnV8/Q=
Subject key identifier:   CD:76:29:A4:C9:9E:05:2D:72:A2:8D:04:F8:71:66:F5:83:23:3F:E7
Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
Certificate issuer:       /CN=9de05733efb8b3764ca93ee340988869d96603aa
Certificate serial:       019C4321C7634243130EAE75B14C77CA404A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
Manifest number:          0840
Signing time:             Mon 09 Feb 2026 16:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:13 +0000
Files and hashes:         1: 0dKz27FXmEvTUAS97w6oezHQSJM.roa (hash: O/nMJnxeA2xWpfnp6SVdaMqFKXk+z2ftNLJ81ExuMdU=)
                          2: neBXM--4s3ZMqT7jQJiIadlmA6o.crl (hash: fO/3wp/qMQMX5JFx5DR3cPXRQpJhTDC1GNp3LfrjDCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:c7:63:42:43:13:0e:ae:75:b1:4c:77:ca:40:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa
        Validity
            Not Before: Feb  9 16:00:13 2026 GMT
            Not After : Feb 10 16:00:13 2026 GMT
        Subject: CN=cd7629a4c99e052d72a28d04f87166f583233fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:91:c4:e2:11:d7:71:62:a4:c9:b9:80:8f:
                    ca:37:b7:02:0d:c0:70:1c:f7:65:a4:7a:93:03:c0:
                    5d:34:8a:59:bd:8c:17:a3:7a:b4:ba:42:37:3e:fb:
                    56:68:c8:b9:44:4b:93:65:6c:a0:e0:54:13:d1:9a:
                    d0:0f:1e:39:06:4d:cf:0f:8b:65:b5:21:20:0c:d4:
                    4d:b4:39:ff:11:19:aa:da:a6:10:20:5b:21:cd:e3:
                    01:2b:fc:db:50:cb:fa:db:a3:29:f0:70:85:54:db:
                    cd:34:ef:54:ce:55:49:f6:a6:84:3c:c4:eb:c4:f3:
                    8c:d4:a7:ba:ff:38:db:fc:86:4c:19:6b:23:fa:19:
                    46:91:db:11:6a:1f:84:dd:9c:c7:3f:d6:0a:78:b2:
                    ec:ec:4e:7e:b7:49:67:27:a0:4c:80:b3:00:0b:51:
                    06:d1:10:76:45:75:d8:8d:58:d5:25:0b:52:32:3e:
                    44:6d:9a:33:7d:a7:e2:4e:41:7e:00:07:54:bb:b5:
                    22:85:b3:ea:40:dc:04:00:fa:64:9d:16:ac:4a:d6:
                    a4:a4:99:38:eb:ae:5e:ed:c6:e0:0c:73:6f:84:07:
                    4f:01:75:bd:c3:bb:e1:79:75:6b:0b:3c:64:01:39:
                    39:66:e2:70:4c:17:af:bf:f9:99:b6:0b:d7:ce:48:
                    78:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:76:29:A4:C9:9E:05:2D:72:A2:8D:04:F8:71:66:F5:83:23:3F:E7
            X509v3 Authority Key Identifier:
                keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:5a:d4:a6:a9:11:4a:20:2e:2f:90:6e:58:67:0f:1b:7c:51:
         a0:62:ab:c6:d9:df:5d:09:18:41:81:df:78:c7:1e:e5:91:e5:
         bb:ab:36:51:4a:18:bc:0e:57:1c:01:dd:6f:d7:78:55:0d:a6:
         44:44:84:33:dd:03:d5:4b:b0:7d:0e:9d:af:c0:de:ab:f5:04:
         05:07:ea:01:34:3c:8d:2e:64:5b:39:2a:88:ad:a0:71:77:49:
         df:20:29:f3:e7:f2:5e:63:f0:a1:de:35:5e:bc:dd:34:52:1e:
         87:99:c1:bf:d4:74:31:8f:83:d3:03:45:bd:f1:f9:16:3e:f6:
         3b:f2:30:2e:7d:5b:1c:37:44:c6:71:e0:96:c5:11:2f:f8:7a:
         af:6a:0f:13:e0:dc:80:cd:88:80:d0:cc:1f:cf:91:bd:44:f0:
         e8:8c:3c:ec:d7:a0:7a:0c:31:cb:54:6c:2b:94:41:fb:f7:19:
         16:22:42:77:dc:4f:11:e1:0a:d0:00:c0:f0:43:fb:a6:e7:f5:
         b2:a7:4c:79:fd:43:02:6b:c2:57:f0:78:80:36:6a:6f:65:07:
         d2:f4:61:23:90:23:4a:8c:f1:92:8d:77:1d:04:1f:8f:73:4f:
         b5:5e:96:e3:c3:44:c7:ae:f5:0d:8d:8a:90:4b:d7:63:6e:79:
         9f:7a:f7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:21 2026 by rpki-client