This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
File:                     NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft (raw, json)
Hash identifier:          1GT9HT0TH+VgevPFysXTjnvPdEgjPcLM1gbgXeMbu6Y=
Subject key identifier:   26:E6:2E:8B:1F:C8:1A:15:0F:9B:11:B4:7E:EB:3C:D7:61:32:07:BA
Authority key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
Certificate issuer:       /CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Certificate serial:       019C43C712C616CB2737BA2634DAB5498101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
Manifest number:          12A6
Signing time:             Mon 09 Feb 2026 19:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:45 +0000
Files and hashes:         1: 95fE5XU1a1pGoSxnu5vxMKDbXJg.roa (hash: 4/Ix+l1myZu6RT/8dZ3jkzpVwV0AaDZm+INviGp4TeQ=)
                          2: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl (hash: c1ngGQgJDUz7xvYU/W96AmaDzhZbvdcYlRmTYufEiQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:12:c6:16:cb:27:37:ba:26:34:da:b5:49:81:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34803a2cf290b0bdc69addc003d564a234aa4f76
        Validity
            Not Before: Feb  9 19:00:45 2026 GMT
            Not After : Feb 10 19:00:45 2026 GMT
        Subject: CN=26e62e8b1fc81a150f9b11b47eeb3cd7613207ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e4:7f:73:81:fc:ba:b2:31:f9:52:ad:76:e7:
                    bd:df:48:f9:b2:8b:ae:a2:25:59:9b:5d:a5:0e:52:
                    68:1e:cf:d0:ed:68:7b:4f:7b:15:fd:92:4a:d5:55:
                    60:7c:2d:9a:3a:7e:c4:fc:ad:b2:3e:ee:a1:6c:e3:
                    83:f4:5b:fc:99:97:5c:77:0e:3d:19:40:55:e0:d6:
                    17:72:64:c5:9e:54:17:ef:6d:fa:1b:90:c4:33:37:
                    b1:6c:aa:21:41:48:8b:7b:2a:05:1e:30:f4:f6:03:
                    ea:85:74:c8:67:8c:54:1c:23:4c:0b:8c:e1:d6:40:
                    56:7b:51:a8:70:af:ca:31:94:cd:2e:29:0b:bd:29:
                    7c:aa:2d:76:6d:46:33:52:94:fa:c7:3f:6b:a6:a4:
                    78:01:1f:60:03:28:0d:fb:83:05:39:d4:d1:98:fb:
                    1a:69:7f:dc:89:3e:1f:4f:44:27:08:da:03:18:89:
                    da:b3:6b:3d:12:d7:c5:57:e9:6b:4a:b3:cd:dd:ce:
                    21:9f:13:d9:87:67:e1:ff:52:0d:49:82:08:4b:40:
                    cd:a0:c3:af:e1:6d:8b:f6:bc:0b:74:a2:c5:66:e9:
                    05:6d:eb:45:3d:12:9c:2c:33:bc:19:f8:bb:ae:21:
                    45:c5:a2:3e:5b:79:6a:f7:b0:fe:66:cd:6c:a2:c5:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E6:2E:8B:1F:C8:1A:15:0F:9B:11:B4:7E:EB:3C:D7:61:32:07:BA
            X509v3 Authority Key Identifier:
                keyid:34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6f:8e:9c:45:de:24:9b:b8:75:94:c6:79:5f:64:fb:be:d8:
         08:9b:34:80:f4:98:dd:c9:c3:37:9e:dd:69:4f:de:33:27:36:
         c1:df:7c:8e:fd:b5:d1:30:1a:24:d7:68:ad:39:09:4e:5e:87:
         fb:b6:5c:94:1f:7c:1e:56:79:b0:c0:f3:80:c3:89:c5:45:55:
         6f:0c:8e:f2:fb:c5:5b:2c:79:89:64:28:73:6c:b6:cf:4f:b7:
         51:53:ef:75:10:23:e3:1f:00:80:20:11:ba:73:80:c8:a4:58:
         8e:86:92:b1:bd:7a:59:3a:ae:bd:f8:14:c4:78:6d:4a:c9:65:
         9c:3f:68:8a:bf:89:9b:6b:45:2a:cb:c7:44:a6:0c:84:e0:a8:
         80:8e:9f:92:aa:1f:39:f8:fe:1c:84:46:b5:d6:49:3f:a9:94:
         9d:21:dd:3c:3e:f5:37:7a:69:f2:c3:30:84:1e:cd:e0:41:1f:
         d0:cf:d5:28:e1:02:c6:cc:52:43:fe:be:25:f4:9d:06:6e:38:
         0c:f1:4d:27:d3:80:40:4a:98:2f:15:8a:11:51:93:f2:75:29:
         6a:3c:c1:b3:19:45:0f:22:0e:fa:41:86:83:22:d7:83:b3:d1:
         9b:10:03:e3:42:5a:09:00:b2:2e:b0:46:19:0d:c1:88:74:9d:
         91:47:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:54 2026 by rpki-client