This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
File:                     NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json)
Hash identifier:          o6uCOWT65oxVQxODeNgh+cb6CtBKprc7eCJP0sGDfQg=
Subject key identifier:   4F:58:BA:74:39:15:92:72:E3:CE:6B:A5:05:A3:DF:97:67:A7:31:C4
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Certificate issuer:       /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial:       019C4246B806A362D654009E4C166BB1D112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
Manifest number:          15CD
Signing time:             Mon 09 Feb 2026 12:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:56 +0000
Files and hashes:         1: 7HpWZ8JsTHRKitkQiB-HL7tVhQU.roa (hash: go++botqtIXYynK7T+rgO/KPJxpRmv9z/xVOLNzuEFk=)
                          2: 8vxStV176PVhHBrk8PFYjrws9_k.roa (hash: Li2gh8hFqhoK1B3KxIba5052K8TBHeXZ0m+Xe9NeavQ=)
                          3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: hZ+c5pgBAxIALm5w3cWDUL+t3Eak0JiXvjJ5qPxLkDI=)
                          4: ZZV4J0xzHJahvI9bkvvUlw3YqJ8.roa (hash: 2jraLRcOy/O0ieEHzHeWnifNeQVyP8qfUT2eUqJPbaA=)
                          5: Zu0kk3WOXaDw5gWMP5k-8qCbgec.roa (hash: XR0jb+xTVsWguTI1Vj79PXiuVJZlpNZfWK4CtdCSYxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:b8:06:a3:62:d6:54:00:9e:4c:16:6b:b1:d1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
        Validity
            Not Before: Feb  9 12:00:56 2026 GMT
            Not After : Feb 10 12:00:56 2026 GMT
        Subject: CN=4f58ba7439159272e3ce6ba505a3df9767a731c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:d2:d9:8b:d4:1c:57:ef:c6:4a:8d:b4:f8:
                    67:d4:37:6a:5d:31:3c:39:2a:bd:a6:1a:06:f9:f5:
                    dc:d3:50:e5:06:64:a7:66:1c:28:bc:be:d5:84:40:
                    c2:d9:44:29:2d:e5:12:3d:61:c4:c5:0b:90:a6:a6:
                    92:05:46:7a:e8:31:47:e0:bd:33:d7:99:c4:63:de:
                    ef:29:de:d0:b6:93:92:10:21:e0:48:03:db:af:57:
                    73:d4:a1:6a:c1:74:98:ca:ab:13:cb:72:15:b5:d9:
                    41:d6:72:72:16:8e:0b:b3:30:f7:e5:93:fc:ae:6a:
                    45:53:4f:22:7e:18:06:69:d6:ae:42:a7:03:50:ae:
                    7e:0b:05:c0:19:db:f6:38:7b:ac:f5:0a:60:39:d6:
                    e7:61:65:d7:92:e2:cd:38:54:4c:13:e5:3d:22:5d:
                    f0:c3:39:64:46:43:a1:42:fc:6d:09:43:f2:37:94:
                    38:f3:9a:9a:be:8d:24:5c:78:8f:d2:e0:9f:4a:53:
                    15:24:f5:53:e4:f3:b2:eb:d9:78:31:bc:be:ec:8d:
                    f6:82:20:97:72:73:1c:9d:d5:12:7e:97:40:34:bb:
                    50:20:99:a7:73:59:0e:7a:cb:1d:cd:be:e0:7b:1c:
                    34:c1:51:be:db:6f:00:ab:1a:55:4f:2e:04:77:80:
                    dc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:58:BA:74:39:15:92:72:E3:CE:6B:A5:05:A3:DF:97:67:A7:31:C4
            X509v3 Authority Key Identifier:
                keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5b:9a:6b:aa:7b:fd:f8:7b:9f:78:e9:18:6c:b3:ea:49:56:
         84:47:e6:b9:7b:aa:c5:b8:8c:b5:1b:e2:0f:38:24:2e:73:2f:
         a5:f2:2e:a3:41:2c:db:f9:51:1b:0c:b1:47:dd:05:e5:63:ae:
         0f:02:1f:8a:3c:65:fc:74:50:dc:69:d3:80:16:80:47:58:72:
         70:e7:0c:f8:70:68:42:0b:5b:a5:71:99:25:bf:a2:3b:07:28:
         d8:e1:2d:fd:67:db:29:94:3b:69:a7:1f:3b:33:18:ed:5c:27:
         95:86:ae:1c:d0:bf:14:2d:81:25:fc:a3:6b:e4:81:05:ff:c2:
         ae:53:c1:39:e7:ae:79:ce:20:1a:c2:15:12:6b:26:c7:21:c9:
         41:1a:8d:a0:b9:11:09:d3:fd:01:80:19:5d:73:04:77:df:93:
         7e:e1:b0:67:82:33:9e:22:b2:a2:0c:f3:14:ba:91:c4:38:e6:
         c1:09:09:66:c8:9b:dc:ce:c9:d7:05:91:00:bc:4e:ac:6f:38:
         ac:ee:47:fd:f1:8e:b4:c2:6d:6b:1d:af:54:42:44:b3:cd:95:
         58:40:4b:8f:cc:c4:32:e6:f8:87:0b:b9:eb:9e:0a:bd:a4:79:
         9e:88:00:d6:e2:73:6f:36:e7:29:f0:61:6c:4f:21:b5:db:48:
         30:6e:da:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:19:05 2026 by rpki-client