This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File:                     n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier:          Ke8valR4YLsqcxdwo0UuMT6HROvbU8w5E+JRy+pmXr0=
Subject key identifier:   28:FC:44:0C:A4:E9:56:5D:5A:F5:F6:EC:18:CE:1D:60:A1:50:2B:D4
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer:       /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial:       019C438FFCD42EE1A5E794FEC207133EAC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number:          06FC
Signing time:             Mon 09 Feb 2026 18:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:35 +0000
Files and hashes:         1: IxSOqG3VKiGzkrHVsxe1NDwRPlQ.roa (hash: COV4hg+LgsDZn9oz3/oU/egGJ+3yB4BuGfUdkH+oFDI=)
                          2: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: ZaYWDoWHF8UBmpp9fDm2LDgO1IfrhEDVo4SbjEN6X2w=)
                          3: p9sadlQLRMoFQLA1QXaKKY23LjQ.roa (hash: HShX7yQDvzKtFJFjK3t2BxQA1/vBYI4tq5fNWg1k4xY=)
                          4: ugyXshHr8wuLJhM8Vr2WcFZCUG4.roa (hash: yVgEXEDLqTUHDzrLVVJTJnKbB6aMI3zrlCtjybaz+8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:fc:d4:2e:e1:a5:e7:94:fe:c2:07:13:3e:ac:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
        Validity
            Not Before: Feb  9 18:00:35 2026 GMT
            Not After : Feb 10 18:00:35 2026 GMT
        Subject: CN=28fc440ca4e9565d5af5f6ec18ce1d60a1502bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3f:ab:e4:ac:a5:8a:ec:1b:5d:d8:79:e1:c6:
                    8d:88:b3:73:db:dc:ee:0c:6e:33:96:29:f9:dd:10:
                    7d:96:9c:49:8c:6b:68:2b:68:36:f5:de:c8:5d:69:
                    91:36:0e:1c:59:47:80:fe:63:87:94:91:5c:e0:aa:
                    99:8f:ba:13:f8:55:46:54:50:51:57:11:5f:85:f7:
                    4b:6a:67:66:8d:1b:ce:30:4b:d3:3b:42:01:00:43:
                    d5:4d:1d:90:f6:1b:7e:a0:74:c9:e3:3e:eb:54:f7:
                    66:02:fb:67:ac:61:50:f4:cf:4c:4c:0b:81:e1:64:
                    30:e4:ff:05:f1:ef:fd:46:5f:d0:e8:ba:21:f0:99:
                    01:98:e1:61:5f:6d:b2:18:56:b3:55:2c:4f:f2:ca:
                    9c:63:82:6e:36:fb:32:16:43:0a:0f:73:ab:c3:6b:
                    f6:12:76:cb:fd:9c:0b:30:34:f8:48:9e:4c:f6:ac:
                    67:7e:cd:a9:c7:5b:57:46:42:37:89:0b:61:8d:d3:
                    63:54:ed:5d:88:79:e5:51:75:49:f4:81:d7:dc:ee:
                    aa:7f:4f:13:04:93:d6:89:71:0c:b9:43:14:75:d7:
                    92:7d:f2:34:73:7c:67:bc:52:e7:e1:58:2d:f6:b9:
                    c1:9b:ff:5c:06:78:55:32:43:e5:80:a3:b5:20:91:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FC:44:0C:A4:E9:56:5D:5A:F5:F6:EC:18:CE:1D:60:A1:50:2B:D4
            X509v3 Authority Key Identifier:
                keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8e:7f:f6:07:cf:eb:e1:1a:d9:34:a5:7f:91:f7:66:4d:d9:
         ea:1f:05:bc:78:31:e7:dc:3b:f0:0f:a6:ff:35:3c:fc:f0:1d:
         21:85:db:25:be:ad:95:39:2f:7d:c1:4d:d1:1a:67:e3:b7:ed:
         f2:b8:a1:72:1f:c5:48:fa:80:93:6c:54:00:77:f3:05:73:13:
         fe:76:87:a2:a7:75:5d:b1:04:e5:74:29:f7:e6:11:ed:c0:d3:
         1d:bc:11:6a:7d:31:44:82:b0:76:2e:99:46:d3:0b:ad:53:44:
         00:39:79:dd:e0:eb:c8:3b:c3:dd:dd:ee:49:78:86:cf:07:3d:
         4b:7c:9b:bb:d6:c8:73:2f:e6:7e:83:32:b8:96:f5:7d:2d:b9:
         79:89:f8:fc:4f:5a:1a:12:56:95:0d:37:39:c6:38:a5:82:32:
         01:f7:15:50:3b:5b:91:cc:06:37:46:5e:5e:d1:d6:54:8e:c3:
         27:7a:f4:76:53:55:00:42:7e:ad:cf:fe:73:67:3e:9f:8b:d6:
         8a:6d:92:0b:ee:86:09:e1:e8:2c:52:4e:35:80:dd:07:f5:e3:
         de:43:a3:35:da:34:57:87:34:18:e7:f5:37:46:62:05:14:d0:
         b4:8e:5d:07:6c:a4:4b:f8:5d:ff:84:f4:f3:b5:cc:0e:3c:4c:
         6a:bc:bf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:36 2026 by rpki-client