This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File:                     nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier:          HLQNAQ4NM7Bmc1yPi3iq5TvrNREiXB7Sl5ldlo7GBaQ=
Subject key identifier:   2E:36:C2:B2:F1:41:2D:53:ED:1F:08:F7:DA:15:9C:C7:8C:8E:CA:B9
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer:       /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial:       019C41D8C4D9891F6E7E2427CCCED7C17882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number:          12B2
Signing time:             Mon 09 Feb 2026 10:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:50 +0000
Files and hashes:         1: MI1eAedSp8b3ejhW5Is6MVZnkBU.roa (hash: ffD0wdFOnzca91uqXIMtkqIhdgKPLxX/FYK0ZtNqw10=)
                          2: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: /sgk1rRDNj6578s8hOQv8JnXuaci3C108Lqgtm4RnDo=)
                          3: soRgBsppmhAjuwcesmTHduOH9zE.roa (hash: FnK+5njb2ep7QTqDrCHoNsGJ6m0P3EF/QDbE4FdNFpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:c4:d9:89:1f:6e:7e:24:27:cc:ce:d7:c1:78:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
        Validity
            Not Before: Feb  9 10:00:50 2026 GMT
            Not After : Feb 10 10:00:50 2026 GMT
        Subject: CN=2e36c2b2f1412d53ed1f08f7da159cc78c8ecab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e7:db:04:f3:44:6c:7e:78:78:bb:32:db:52:
                    3b:19:5d:f1:74:21:00:5d:e5:b4:fb:e3:a0:cb:38:
                    94:71:af:1e:c9:33:68:76:a9:d5:d8:76:08:b1:c4:
                    fe:b5:66:46:10:07:32:c9:be:ce:e2:29:c5:ea:b7:
                    d6:b7:d2:52:86:b0:a6:7f:19:58:39:82:a0:4a:87:
                    1f:c8:0f:71:06:66:c1:0b:f0:1b:8d:68:45:9e:ba:
                    c2:31:1a:2e:96:ed:4c:8c:77:3c:0d:4f:8f:59:f4:
                    81:d2:c9:fc:64:27:79:e4:46:f1:b4:13:3d:9c:fd:
                    0a:b0:ef:23:97:2a:17:3c:cf:49:fb:59:67:01:d4:
                    7c:2a:6e:f5:58:ca:e3:50:ad:e1:fc:1d:7e:12:cb:
                    4b:f3:4a:02:ff:b2:24:46:0f:37:3e:12:ab:45:8c:
                    a5:a7:eb:f7:5d:0f:58:d2:60:0a:8e:d1:f7:26:a0:
                    80:c6:7b:79:3b:4a:1d:ef:7c:32:7d:36:d6:dd:6e:
                    57:04:ff:3d:b3:8e:72:01:83:b7:b7:2c:ff:b3:1d:
                    60:fb:ca:a5:72:8f:b9:22:17:28:dc:4d:a2:5a:db:
                    7f:6e:d2:1e:67:0e:8a:ca:70:d1:e5:b9:65:87:b3:
                    6f:18:8b:b9:5b:c4:6d:c0:e1:b8:0b:59:83:5a:8a:
                    c3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:36:C2:B2:F1:41:2D:53:ED:1F:08:F7:DA:15:9C:C7:8C:8E:CA:B9
            X509v3 Authority Key Identifier:
                keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c2:45:13:c4:62:a5:ac:88:b8:8d:25:6e:5d:7f:8c:88:3f:
         72:67:69:49:cd:85:9f:06:33:f0:00:4b:a4:91:1b:39:3f:04:
         b5:6d:f9:cd:0d:b9:90:f4:1a:ef:96:e4:e7:8e:10:1e:62:d1:
         ce:d5:8b:3a:96:5a:d7:eb:48:09:15:df:6c:59:52:41:61:7b:
         07:69:9d:ee:14:3e:ad:2e:ae:24:ef:72:8b:c9:64:19:5c:4e:
         13:41:43:b7:4c:62:38:12:68:14:cd:e7:2a:1f:b1:9b:85:6c:
         8c:e9:59:6d:62:5c:13:e6:c7:cd:92:9e:e9:0e:83:47:53:39:
         02:6e:e3:5d:6d:a1:2a:4e:7e:fa:e6:da:73:3b:e2:2b:16:ad:
         dc:88:c0:91:e7:95:9a:7b:36:a9:c0:07:af:55:14:77:a8:10:
         cb:68:60:53:68:57:31:0a:c0:02:87:55:8c:97:5c:93:b5:44:
         94:66:38:ff:a9:ce:94:3d:4a:68:b4:06:c5:a8:e2:87:fc:62:
         2f:7b:9f:78:f6:c2:70:01:47:3d:2e:26:d5:fa:f3:94:fb:e4:
         b5:98:f3:f2:01:de:f3:c8:af:65:02:0b:16:65:e5:9f:8c:1e:
         9c:70:3d:51:8b:f8:ad:d4:a2:00:1c:1a:e9:3c:b4:98:99:32:
         52:34:d7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:58 2026 by rpki-client