This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File:                     N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier:          WN8WzHgT1EjRfuFgH5uhg9ov4Qi13+XLjkXFTSF0QQg=
Subject key identifier:   6A:45:23:7A:F5:D6:81:53:EC:56:5B:04:2C:A1:C0:C0:12:0D:53:FE
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer:       /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial:       019C43FD8AA3D97CC0D403EF23A567DB9A58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number:          0EBC
Signing time:             Mon 09 Feb 2026 20:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:15 +0000
Files and hashes:         1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: UnEzk11exZSZiMAmAVPMNoFkCisAeBDkSm8BLm4oxRE=)
                          2: gXm46Hmm-qTO4hodxrSof3TLiNM.roa (hash: xq/l2oyKL3r2u7cjQoxp//Kygz431FReQyIA4fXa0hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:8a:a3:d9:7c:c0:d4:03:ef:23:a5:67:db:9a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
        Validity
            Not Before: Feb  9 20:00:15 2026 GMT
            Not After : Feb 10 20:00:15 2026 GMT
        Subject: CN=6a45237af5d68153ec565b042ca1c0c0120d53fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:c6:6a:71:8d:32:b8:61:8e:2a:a3:cc:d8:
                    43:21:e5:fb:10:bb:a6:8d:5c:be:64:8b:31:96:ec:
                    fa:dc:d2:f0:46:70:13:2f:c4:d3:a5:e8:3f:4b:c0:
                    c9:c6:74:ea:61:0f:dd:70:e8:6d:8a:00:8c:34:87:
                    91:78:e4:41:75:42:08:65:ec:00:3b:62:53:a7:7d:
                    ab:19:67:c6:1f:fb:2c:c5:9a:39:76:c4:8e:53:4e:
                    e5:af:b9:38:0a:0f:69:09:47:d9:91:00:f2:15:90:
                    68:2a:1f:97:40:b3:cf:d8:c7:25:b7:41:aa:2e:52:
                    8b:0c:0b:bc:f2:af:34:c9:9e:3d:72:72:b7:22:30:
                    be:e1:5e:6f:b4:f7:fe:19:10:5f:01:dd:27:ee:a1:
                    8c:bc:45:5a:ed:e2:5a:93:2a:45:dc:4d:4c:1b:85:
                    35:10:0c:87:7a:5b:33:fc:8e:f0:49:da:95:8b:34:
                    95:8a:2c:e1:c8:19:7c:12:76:b6:0e:dd:d6:2f:d5:
                    96:a2:b5:ef:b4:70:31:2b:80:df:cd:1d:07:87:f3:
                    d2:48:35:7d:87:f8:87:2f:29:92:a6:e6:13:d5:61:
                    5a:fb:92:e0:98:59:c0:0e:bc:9b:7c:f6:6f:de:32:
                    8e:8d:20:a5:35:cb:70:15:25:c2:96:09:9c:a8:ef:
                    fc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:45:23:7A:F5:D6:81:53:EC:56:5B:04:2C:A1:C0:C0:12:0D:53:FE
            X509v3 Authority Key Identifier:
                keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:10:c7:44:81:b6:c4:0f:62:7f:68:d0:8f:fb:99:21:54:e1:
         7b:c1:9b:84:76:d1:c4:18:6b:04:5c:98:f0:48:f4:c9:2e:4e:
         d4:a6:f0:65:9d:3e:22:19:9f:63:dd:96:4b:c7:f1:81:0a:02:
         e9:8e:6d:29:43:7a:8d:af:e3:5e:cf:5f:79:33:ee:46:65:56:
         01:e1:3d:d4:c8:76:ca:22:0d:db:5b:00:e7:1b:0e:2b:03:7c:
         67:fa:44:99:72:48:2d:21:1b:d8:fc:6c:7c:34:84:2c:7b:90:
         bc:8c:6e:ce:16:d3:9c:83:42:f0:71:4a:31:9b:39:dc:63:1d:
         60:82:43:86:9d:97:c0:87:bf:84:a8:44:14:e4:7b:bc:19:59:
         c0:80:c7:3b:e1:74:eb:42:d1:99:c9:8c:8f:10:8e:4d:57:ab:
         e0:4a:c2:3d:5d:92:3e:f6:6b:cb:e7:0b:88:33:50:59:64:91:
         88:0c:b0:bd:65:73:93:69:88:85:c6:41:db:00:76:fc:24:90:
         bb:d2:2d:72:83:9a:5a:9e:71:59:d5:d1:01:0c:54:7a:66:e8:
         84:61:6d:4d:5d:2e:fe:91:cb:01:93:fb:41:5e:5c:b8:0b:38:
         ce:ce:5c:e1:8f:e0:d2:db:cd:76:5e:c4:52:66:dd:57:23:b9:
         57:d5:8c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:55 2026 by rpki-client