This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File:                     NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier:          7wRWgd73mwiRF899OmOkPCx4bY7igNvIRWdx7dROIX8=
Subject key identifier:   78:BA:7F:80:A4:D6:1F:D5:1C:2D:33:3C:22:55:DC:CB:52:73:B4:90
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer:       /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial:       019C427D10E46E4540AC236AAB6C88CF9371
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 13:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:18 +0000
Files and hashes:         1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: jZSzw7CKUrl4CSl0bdBrpnkTkQ6iiQI9HGQknkesjiQ=)
                          2: fk9U3XR8wWwd2opanzwEAz6eKk4.roa (hash: 5EeRjXWRWUv9RoV34Pw35rxYHtcF/8u2AEnciChzLxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:10:e4:6e:45:40:ac:23:6a:ab:6c:88:cf:93:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
        Validity
            Not Before: Feb  9 13:00:18 2026 GMT
            Not After : Feb 10 13:00:18 2026 GMT
        Subject: CN=78ba7f80a4d61fd51c2d333c2255dccb5273b490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2f:88:19:7e:11:cf:12:cc:f3:af:d1:71:8c:
                    70:80:79:f0:0d:7d:a9:41:ec:4c:86:3e:9b:f7:bf:
                    2a:6a:50:0a:66:f7:fd:f9:aa:fb:dc:21:c5:c6:ae:
                    fb:8c:aa:77:6c:c3:b3:a1:27:3e:93:62:0d:aa:64:
                    b4:01:8f:16:a7:e6:90:29:66:02:5b:e3:fc:9b:f9:
                    e7:b5:3f:66:e8:00:1b:bd:d9:4f:8c:6a:ea:ef:c8:
                    4e:2f:1a:5c:b2:4d:c7:cf:a8:67:6b:d1:26:02:71:
                    01:ad:87:30:ca:dc:80:1c:29:ec:c3:e8:15:94:2d:
                    b0:65:b2:8c:07:74:18:dc:3a:bc:49:a7:5e:be:0e:
                    72:30:e1:71:f4:dc:12:bb:b1:0f:19:79:15:54:96:
                    bf:db:5e:d7:81:e5:c3:4d:50:e1:85:7c:d8:6a:ad:
                    19:bb:6c:be:cf:bb:0e:97:7e:3e:f1:30:08:27:60:
                    28:53:2c:18:98:c2:28:20:e6:cc:a1:c7:d3:e6:71:
                    1a:d1:41:8a:33:28:82:15:2f:e1:f8:12:98:27:5f:
                    06:b4:b7:ba:8f:59:4b:2e:cd:6d:34:75:21:ab:c7:
                    33:d3:3b:28:83:91:41:ac:bf:ac:ff:03:82:c5:08:
                    68:6c:2d:6a:c7:b6:50:4c:54:09:bf:60:90:f9:36:
                    d1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BA:7F:80:A4:D6:1F:D5:1C:2D:33:3C:22:55:DC:CB:52:73:B4:90
            X509v3 Authority Key Identifier:
                keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:68:76:9c:93:af:37:25:2d:44:18:70:87:b0:44:93:80:cd:
         09:64:7c:e0:95:f9:0b:55:1e:d8:5e:0e:36:dd:58:cb:dc:9c:
         70:0f:fe:b1:39:bc:c8:7a:f6:2a:50:9a:89:ae:53:22:77:b5:
         3d:03:24:25:9b:7e:ae:c3:b7:ad:14:63:67:7a:33:af:8f:fb:
         32:76:69:bd:39:59:05:a1:b9:c8:fe:8c:b9:70:e5:a1:09:3b:
         7c:8e:ef:da:18:e8:2e:3b:da:40:63:48:c3:6f:87:d3:dd:34:
         5f:31:ab:3a:c6:e9:1d:54:52:03:b6:00:3b:14:91:9c:6c:fc:
         0c:ec:b9:01:d9:df:91:ef:a8:4b:74:6c:54:ca:c9:fa:49:21:
         67:c9:ea:0e:86:8a:4c:f2:93:36:8f:c3:82:8a:d9:bb:a1:3f:
         0e:8c:23:35:ce:b5:e2:0b:63:6c:6f:4f:08:e4:72:7f:05:40:
         28:74:1a:10:37:d2:3d:43:e1:34:e1:37:17:bb:db:46:bb:34:
         f2:a1:9d:d2:a2:3c:1c:df:c2:57:82:c3:e0:78:f1:56:be:68:
         cd:20:b1:57:35:cb:3d:76:24:3c:f2:9d:f1:85:1d:9c:94:23:
         36:b5:ca:ed:ae:60:63:a3:c0:10:54:8b:90:a9:ae:bf:93:59:
         d6:b8:ca:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:03 2026 by rpki-client