This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
File:                     Nse0TnxfKbnepAKsgFFgspjPDaY.mft (raw, json)
Hash identifier:          Hl/9BQ9upqNxNkj6CLnlhhwDtc7DsyWVP8p1QCZP9SQ=
Subject key identifier:   00:80:E1:5B:5A:12:E9:DE:C9:DF:70:84:B9:19:8D:24:FF:7D:AD:DA
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Certificate issuer:       /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial:       019C45473575022BD88ABAF66B329F0146CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
Manifest number:          1811
Signing time:             Tue 10 Feb 2026 02:00:20 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:20 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:20 +0000
Files and hashes:         1: Nse0TnxfKbnepAKsgFFgspjPDaY.crl (hash: I1NwUgqy39EidvhA683JNiWB0NHbrD96lksk6KeOi1w=)
                          2: r0kmA8KLPJyGWZOOvwVJTGeF-U4.roa (hash: LClJs+JlqTHZyPqNwNqgghz6JF/6AHMaeJCgatSBq2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:35:75:02:2b:d8:8a:ba:f6:6b:32:9f:01:46:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
        Validity
            Not Before: Feb 10 02:00:20 2026 GMT
            Not After : Feb 11 02:00:20 2026 GMT
        Subject: CN=0080e15b5a12e9dec9df7084b9198d24ff7dadda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:72:fc:08:c1:22:c9:4b:ca:02:30:b2:26:
                    05:86:89:01:9e:45:11:d2:d0:c2:d2:d6:2a:7e:41:
                    e1:d0:31:35:11:4b:4b:83:a0:83:16:66:3f:79:c5:
                    b3:7f:22:2e:7c:aa:ae:d9:d9:b4:a6:a0:4c:48:10:
                    92:33:9a:e1:41:f4:01:e6:76:86:0e:cd:4e:ca:28:
                    1e:16:43:19:92:fe:21:62:75:9f:7d:b5:d4:0d:38:
                    3e:a8:9b:2a:39:e5:2a:f8:46:74:77:ea:7b:6d:9a:
                    c3:4d:a3:b8:d7:62:6d:4f:2f:22:7f:60:8d:a4:5f:
                    f8:5d:2c:48:05:43:c0:e3:f3:9e:3f:79:37:a0:79:
                    ab:39:9d:f1:a4:41:a2:6a:09:c2:2a:a6:a4:e0:ad:
                    6f:f3:ae:80:39:3e:7a:55:5c:d5:6c:9c:03:6f:39:
                    d8:e0:56:3b:5c:ff:0d:c8:de:64:41:66:71:10:e5:
                    f7:23:c6:1c:8f:ba:13:72:e8:98:b7:d8:c5:18:31:
                    29:8f:52:51:f7:21:66:79:13:3b:b1:6c:f7:60:d4:
                    16:a3:4a:51:65:33:0d:c2:6d:35:d7:8a:5c:78:6d:
                    27:c7:47:d7:d5:d3:38:ac:fa:e5:dd:95:f8:a4:3b:
                    0e:d9:fa:77:02:80:13:a6:6a:d7:25:e5:ab:ec:5b:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:80:E1:5B:5A:12:E9:DE:C9:DF:70:84:B9:19:8D:24:FF:7D:AD:DA
            X509v3 Authority Key Identifier:
                keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:11:28:1c:44:e6:9c:eb:9b:0d:9d:18:4d:b4:21:4d:11:a5:
         72:24:2f:64:9d:13:be:da:22:b6:6b:9b:22:97:22:6f:d6:07:
         47:56:03:96:ed:a2:3b:47:3e:de:b9:04:8b:af:65:21:c7:1e:
         78:4b:1c:14:2e:66:a1:f4:1b:a1:3a:71:18:80:d1:7b:78:50:
         11:a2:1c:ed:b9:ff:a6:e7:ef:23:ad:61:bc:c0:34:7d:95:aa:
         00:65:4e:ac:06:df:95:0a:ff:39:f6:34:a7:17:1f:ce:53:07:
         06:72:0c:6c:d7:4a:56:4f:63:8f:07:e1:d5:bd:a1:a9:71:07:
         75:1e:47:7a:dc:69:7d:39:78:c3:b7:8a:36:c6:45:30:08:2d:
         07:36:7c:78:d1:ce:33:3d:6f:16:41:ad:8c:2f:ff:02:31:e7:
         35:43:3d:a4:48:83:b0:95:14:55:21:dd:bf:c2:90:50:9a:a9:
         0e:ba:89:05:a6:70:7b:5f:c5:22:88:3c:c0:ed:b2:2c:4d:f3:
         f7:9a:7c:68:c6:5f:32:1f:8d:d8:96:d0:a4:07:dc:78:8b:0a:
         cb:3b:f6:e3:e6:55:38:e0:05:68:11:e4:bb:f8:28:ae:7a:34:
         06:bb:2c:c7:22:dc:e7:81:7d:1f:ea:3a:8d:e4:4b:02:fd:2a:
         57:b9:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:52:28 2026 by rpki-client