This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File:                     _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier:          fcke+n3LFieQ98TIQKQx5l+YOv4A/NWPr2ChPG63PUg=
Subject key identifier:   4B:DC:33:34:76:53:F6:D3:20:04:6D:36:F8:F4:35:21:BC:95:5C:87
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer:       /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial:       019C446B7E02E615BA48CE3DCCB3BC027767
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number:          07EC
Signing time:             Mon 09 Feb 2026 22:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:21 +0000
Files and hashes:         1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: SLFXOXOo4W0fXflNA1UaZvuLeq+l7ejP1bhsgsV5qoY=)
                          2: cGNM2kUYGwh1pqp3KDfnuGuO-40.roa (hash: RBzO91NF0DSPBv6o+tDtIFzqxm7krs8U6K6aFGD7SjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:7e:02:e6:15:ba:48:ce:3d:cc:b3:bc:02:77:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
        Validity
            Not Before: Feb  9 22:00:21 2026 GMT
            Not After : Feb 10 22:00:21 2026 GMT
        Subject: CN=4bdc33347653f6d320046d36f8f43521bc955c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:18:02:65:f4:e8:96:d2:63:b1:70:97:f5:
                    8d:86:0c:6e:dd:8c:f6:cc:c9:58:11:7b:32:1c:f1:
                    86:6b:a8:22:6d:25:40:86:02:49:7c:92:0c:dc:2c:
                    e6:fa:17:15:12:7e:cc:1f:90:d5:8e:0a:96:d2:9c:
                    ad:29:2a:40:8a:57:28:fb:cf:bc:18:97:62:c7:aa:
                    ff:d3:e0:fc:32:51:ba:38:4e:d3:d5:ff:01:c0:63:
                    7a:fc:b5:46:30:9a:ab:75:d1:5a:2e:58:78:7a:ab:
                    bc:44:ac:94:a4:f7:66:57:b6:d7:d1:6a:36:e7:26:
                    f2:bb:f9:78:ce:96:6a:f3:ee:0f:f5:40:1e:38:ec:
                    33:44:71:ed:9c:37:05:ad:a7:2a:bb:54:26:45:cb:
                    bb:cc:ff:b8:12:01:4b:49:f1:51:b5:b9:9d:d8:b3:
                    af:39:a3:15:cc:a7:c9:ce:d2:c2:2a:cd:9e:6e:bb:
                    fe:87:d6:06:45:3e:a8:24:78:ee:8b:89:02:68:04:
                    ca:6f:68:14:23:a6:aa:87:b2:f5:5a:38:52:2c:24:
                    ff:9c:c2:3e:e6:3b:a7:7f:a5:05:e3:d4:90:dd:aa:
                    aa:57:1c:cf:1e:e0:ef:d9:f3:8d:67:bd:0c:c0:aa:
                    1d:6c:33:20:1c:19:d8:69:15:3a:df:fc:a1:d4:96:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DC:33:34:76:53:F6:D3:20:04:6D:36:F8:F4:35:21:BC:95:5C:87
            X509v3 Authority Key Identifier:
                keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1c:ef:a3:a0:90:64:5d:5e:38:ad:3d:69:40:4b:f9:e2:d1:
         d4:cc:65:bd:4b:aa:29:09:c6:d6:d7:73:c2:38:b0:4a:fe:52:
         a9:4f:26:3d:23:52:33:1e:c5:db:e8:29:12:35:f7:7d:95:a3:
         22:96:44:34:0a:3a:f5:65:38:25:9b:c1:e0:07:8e:c5:d7:48:
         98:6b:fd:c0:1f:3a:d2:aa:e6:d4:86:16:6c:61:ba:0c:52:d1:
         43:13:a5:9b:0f:6a:7c:55:fb:b1:4f:02:50:04:25:3c:02:71:
         22:a0:fa:fc:b0:c0:6a:73:ee:3f:20:2a:f8:f2:d7:09:15:21:
         55:4f:78:ba:ea:81:a0:80:13:3b:03:d6:8a:f3:a1:6b:32:77:
         6b:ef:af:74:d3:f4:7e:d1:1c:ea:4e:9d:f4:be:5a:10:b0:03:
         40:08:62:8e:b4:f9:d9:31:d5:17:25:9a:00:94:9b:e9:41:1d:
         6c:c4:a4:2e:2e:7f:98:d7:14:18:93:17:95:02:8c:54:83:75:
         7e:94:13:b4:2c:46:2d:d4:fc:bf:9e:02:5f:f9:5b:43:b3:c3:
         96:40:b2:a8:96:51:95:84:ad:f5:d1:76:f5:f5:01:87:ec:ed:
         c1:9c:00:ed:ba:df:1d:f2:6d:6b:06:da:9b:4a:36:a8:68:5b:
         f6:9c:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:11:07 2026 by rpki-client