This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File:                     nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier:          QmP2FHHseDjGpoloLk9lq1AcmhDbj9g97cGkT+i7PRI=
Subject key identifier:   0C:0E:DF:22:D6:E0:7F:7F:2A:3D:B3:FC:D7:78:BD:B7:DF:1C:EA:1B
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer:       /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial:       019C427D39B2FDA8F8D241B583D231911CF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 13:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:28 +0000
Files and hashes:         1: gOqd7rN6RgPdoi7qiSxbZnHEaVQ.roa (hash: VBG1qW1V9HrpcCPfAbR67cE3N+E+YVk++0KjIj45T9Y=)
                          2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: JSYSzUrfw0yZcvVpbVSSuC10Q0naTENucEykzL3OOww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:39:b2:fd:a8:f8:d2:41:b5:83:d2:31:91:1c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
        Validity
            Not Before: Feb  9 13:00:28 2026 GMT
            Not After : Feb 10 13:00:28 2026 GMT
        Subject: CN=0c0edf22d6e07f7f2a3db3fcd778bdb7df1cea1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6a:87:37:79:8e:c7:69:ae:88:0a:92:95:bf:
                    b6:1b:69:55:0a:78:cd:d3:3f:87:91:c4:1d:77:4b:
                    e0:8b:0d:bc:dd:94:f5:12:c4:af:32:dc:c1:14:45:
                    79:60:bd:d7:30:49:b2:ce:d6:7c:9c:2b:2f:4b:56:
                    17:c2:67:33:5f:18:da:2f:d6:31:41:7d:c3:b5:93:
                    45:59:f3:ef:a6:15:08:b1:3b:9a:77:61:61:4d:b4:
                    52:bf:ab:f2:c2:34:30:12:db:fe:53:6e:a8:63:a3:
                    77:d3:07:30:45:dd:8c:98:f4:24:dc:0a:5e:b0:df:
                    5a:55:ef:48:af:ca:22:9d:8d:27:b8:7a:d6:57:c5:
                    a2:9b:3a:52:96:06:72:e3:c8:5c:c2:af:44:db:0c:
                    e5:8a:56:01:18:af:cd:7d:91:e6:1a:8f:ea:e8:27:
                    c3:aa:ea:6c:ea:b8:80:6c:a9:c3:dc:df:45:ec:fd:
                    68:68:f8:86:c5:ec:50:cc:48:01:5a:96:17:33:99:
                    18:9d:9a:c6:0d:dc:e0:c7:fa:d7:f0:17:36:5a:a8:
                    bf:0f:4b:b9:e4:e2:32:d1:f2:3c:21:35:f1:24:ab:
                    d4:7e:9e:2e:b2:80:c0:3f:78:09:62:7e:4d:93:6d:
                    0b:f3:50:ad:00:29:dc:cc:95:5e:e0:09:b8:93:cf:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0E:DF:22:D6:E0:7F:7F:2A:3D:B3:FC:D7:78:BD:B7:DF:1C:EA:1B
            X509v3 Authority Key Identifier:
                keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:92:30:4a:e2:f0:fd:df:c2:c5:74:93:d9:6a:4f:6f:38:2d:
         3d:23:c5:c9:ed:54:5e:98:89:78:b3:5b:b6:44:14:78:6f:a2:
         ed:18:4a:6d:ee:c3:8b:95:b4:6b:6a:19:8b:d0:a0:1e:a4:0d:
         53:fa:26:7e:3b:6a:df:b9:52:ac:db:6a:39:15:a5:ca:3c:cf:
         5a:cd:c0:e0:79:8d:07:8b:53:93:da:20:37:0a:e4:3f:bd:3f:
         6c:8c:77:03:8e:39:14:3f:39:0a:70:39:90:0b:af:db:a3:14:
         9f:7b:53:df:7a:82:29:ad:75:91:c6:3b:ab:18:58:53:17:df:
         09:88:4a:5f:83:29:06:ba:05:7e:65:9c:f8:79:f0:e1:c8:6f:
         71:ad:95:c7:1d:96:62:b7:fe:dc:50:d0:64:35:c1:cf:57:e3:
         d8:21:44:15:89:96:54:f3:0a:b2:72:cb:38:23:4f:64:fd:cb:
         66:46:d3:96:91:29:44:6f:7d:62:e7:95:a9:b4:1f:56:77:0c:
         e7:8b:1b:02:fa:bb:1d:46:7c:4b:d9:89:18:a9:80:01:d2:b4:
         b4:43:c0:9a:5c:e6:3e:a4:53:2b:0e:da:21:9c:1b:7f:3b:92:
         a0:2b:03:cb:d4:73:ec:b0:93:20:18:7c:e9:34:91:da:83:53:
         44:af:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:37 2026 by rpki-client