This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
File:                     NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json)
Hash identifier:          57P+6dgnGY6KDw/ObygdlCVUOJUPmUhgFSOTzPp5A44=
Subject key identifier:   F4:80:35:D6:4D:FB:CC:BB:16:8E:38:A5:B1:9C:CF:B4:41:6D:31:4F
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Certificate issuer:       /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial:       019C438FCF97B0094319B48C9F683543B7F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 18:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:24 +0000
Files and hashes:         1: Gc2XvyP01-fby2wIcpCQAXK9NNI.roa (hash: TqTwmJ2kXyM/+f6YO1uN50U7uVnjd7tFzIbHZN9RIuA=)
                          2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: 33S+Vgb2+Mf4BHg4hZVwme/QgIBow9YpjZC+TvvMnIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:cf:97:b0:09:43:19:b4:8c:9f:68:35:43:b7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
        Validity
            Not Before: Feb  9 18:00:24 2026 GMT
            Not After : Feb 10 18:00:24 2026 GMT
        Subject: CN=f48035d64dfbccbb168e38a5b19ccfb4416d314f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:83:b2:df:54:c0:c8:30:52:ef:c9:ea:11:3f:
                    8f:1e:82:c2:86:ed:0c:70:63:42:3a:08:53:37:cb:
                    94:d6:a7:fd:fa:ed:21:cb:ca:ab:31:8c:af:77:af:
                    b8:ad:be:3f:77:13:d5:c0:e4:17:d4:5b:26:ad:39:
                    fc:28:ab:3b:b9:a8:6e:83:7d:38:27:1f:8f:43:40:
                    9c:30:e2:04:d2:da:de:28:dd:39:6c:00:5d:59:3f:
                    8c:3f:d8:19:e1:de:3f:b7:d8:bc:2b:69:7a:8d:77:
                    70:a6:54:f7:40:91:8f:80:a7:70:9c:98:30:58:b1:
                    d2:7d:df:25:2a:42:50:a0:f5:64:29:5b:e2:2c:0c:
                    61:d3:8a:ab:57:d1:0e:31:44:05:c2:81:45:da:35:
                    3c:f4:2f:d1:d6:1c:d6:80:81:10:08:10:af:c2:9e:
                    c1:bd:ff:c0:b7:4c:a7:4b:0d:96:6f:5d:7e:e8:c8:
                    b5:24:ae:4b:27:5b:6f:94:f0:f1:50:67:a9:88:39:
                    61:f4:46:ee:32:04:9e:d5:ee:04:5d:d8:a2:7f:1c:
                    47:21:5c:1d:d8:b0:60:04:19:e0:17:b0:44:f7:34:
                    55:38:a8:ed:7f:67:2f:02:ab:d8:cc:0e:07:98:4a:
                    49:a3:bf:8a:6e:5b:ab:08:3a:62:04:bf:17:74:d3:
                    8e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:80:35:D6:4D:FB:CC:BB:16:8E:38:A5:B1:9C:CF:B4:41:6D:31:4F
            X509v3 Authority Key Identifier:
                keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a4:4a:50:9b:68:ea:d6:f2:3a:91:6c:e6:a8:f3:87:3e:19:
         a4:14:34:5d:08:51:9f:13:5c:4d:14:4c:3e:fb:86:a9:0e:2a:
         74:00:ed:9a:11:0c:06:a4:25:a7:f7:84:e2:7b:40:88:e7:16:
         50:cf:ce:de:10:17:5e:ae:87:ee:45:53:e7:f8:4a:f9:55:61:
         da:b1:83:08:34:4a:68:85:03:ac:36:a1:91:b5:fd:61:f6:d0:
         21:59:00:84:8d:61:e5:eb:07:99:4d:59:66:d5:6c:79:8e:d8:
         eb:02:64:a5:34:55:99:44:f6:92:06:04:9d:47:2f:b6:46:11:
         de:f2:b5:17:f3:6d:bb:77:4a:dc:4a:18:03:ac:27:88:eb:31:
         76:96:d1:6c:41:a8:f4:c1:d1:1d:af:61:5e:22:33:a7:57:3e:
         73:7d:b4:02:68:b1:87:91:ae:02:b5:29:34:64:1f:4d:56:de:
         83:3c:82:e2:a4:9c:af:db:bd:6d:8b:90:05:02:fa:a6:02:a1:
         35:75:0f:39:5f:1d:24:16:6a:23:5a:e1:91:2c:19:45:8f:d9:
         1b:89:76:64:d9:46:cd:fa:02:44:c5:f0:79:f6:3a:9a:26:33:
         9e:f1:f7:fe:bc:4f:1e:d5:0c:0a:4b:93:cc:9e:7c:79:f8:f1:
         b2:2c:8a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:35 2026 by rpki-client