This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
File:                     NPwYIZBVFuYYMg6eRxoTsqqslv8.mft (raw, json)
Hash identifier:          Ojso6gXS3AOp1x6KESpIRA1N7OYZHkWnKJh03pFz9Gk=
Subject key identifier:   13:4A:CD:C0:14:DA:67:E0:3D:ED:F2:61:1A:8E:BA:BA:76:10:60:E6
Authority key identifier: 34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
Certificate issuer:       /CN=34fc1821905516e618320e9e471a13b2aaac96ff
Certificate serial:       019C41A1866C0127E48AFCFF21A1203A3BBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 09:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:30 +0000
Files and hashes:         1: FT4kAT6lWQN00FHh3OTXw40E65E.roa (hash: GFS78DgVCOqhb0Wz+qsE+LrfZ/kjwcDR1Tvaz5iQcCc=)
                          2: NPwYIZBVFuYYMg6eRxoTsqqslv8.crl (hash: qeSiW+ellSSblK07N9lNq9VdqfHYd5hxsoZNmbTjpkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:86:6c:01:27:e4:8a:fc:ff:21:a1:20:3a:3b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34fc1821905516e618320e9e471a13b2aaac96ff
        Validity
            Not Before: Feb  9 09:00:30 2026 GMT
            Not After : Feb 10 09:00:30 2026 GMT
        Subject: CN=134acdc014da67e03dedf2611a8ebaba761060e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:91:e4:55:41:34:65:5b:c8:5f:b9:e0:56:
                    f8:3d:b1:17:e7:22:39:95:2f:89:b5:a4:5b:30:0a:
                    f9:3a:a4:2f:a4:e7:4d:ca:d0:23:66:c1:88:43:ce:
                    f8:2d:28:19:81:8d:70:6b:49:65:85:af:e8:97:3a:
                    ac:bd:e4:01:26:49:af:4e:d0:f9:35:f9:a7:a7:d0:
                    14:89:0c:81:51:40:a4:cf:be:55:70:42:9c:13:08:
                    53:68:55:9c:d6:00:80:72:a7:04:70:56:69:80:e0:
                    ff:16:d8:db:fd:98:5a:45:39:25:0d:25:e6:96:7c:
                    59:2f:c7:54:be:7f:b7:6c:fa:e4:18:de:93:c2:9d:
                    1e:83:b7:30:72:a9:8b:b1:7b:34:ad:5e:12:43:5c:
                    93:53:f5:1e:7f:05:99:48:73:d6:02:a9:81:a9:e6:
                    95:f0:c5:ef:cf:c1:4d:fa:f7:f1:52:67:98:27:5a:
                    d0:79:a9:8a:9b:ad:e4:90:c5:93:22:c8:8e:5f:5d:
                    69:9d:38:d4:8d:1b:be:01:de:71:ed:75:4e:89:a9:
                    fe:12:d6:da:f4:1e:22:e3:be:5b:7f:65:86:83:bd:
                    b2:5e:de:2f:27:53:26:e6:4b:fc:d2:6b:18:9f:f7:
                    d9:a4:24:d3:9e:b5:04:3b:fc:e9:a7:b1:32:a5:88:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4A:CD:C0:14:DA:67:E0:3D:ED:F2:61:1A:8E:BA:BA:76:10:60:E6
            X509v3 Authority Key Identifier:
                keyid:34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:20:cf:5d:73:35:8b:ca:af:7d:ba:5d:39:18:fd:1e:b7:88:
         5f:5e:b9:4d:7e:36:fc:3c:87:7c:e8:2b:87:12:b4:61:db:59:
         cf:60:2a:14:d5:ce:d2:73:1b:f4:70:0a:34:24:53:28:b7:4f:
         65:78:57:83:b7:0e:b5:68:39:eb:a0:20:9c:09:49:d0:9c:58:
         9f:6d:cb:bd:60:19:d8:94:c6:ce:5e:c7:e8:8d:0d:1a:e3:62:
         7c:5a:94:a5:70:74:64:78:cb:a0:44:0e:7b:02:25:78:cf:d8:
         3b:04:1b:cc:0b:39:16:f1:70:b0:65:f5:71:b8:af:c7:aa:30:
         76:62:f9:99:21:a0:ff:59:a1:57:77:9d:a2:bf:a5:fc:9b:84:
         d0:3d:17:07:13:f9:97:0c:c9:bb:27:6f:62:48:bf:d1:1d:fa:
         e8:10:e7:2d:42:59:4a:bd:d2:84:fb:50:51:09:7c:fe:56:c6:
         5f:4c:a6:ed:ba:dc:e2:30:fb:39:14:41:3d:e2:54:0b:6f:cf:
         68:a9:27:72:ae:e5:c3:71:e6:6f:49:d3:8a:74:ca:60:63:28:
         97:68:ea:7d:df:69:6b:5d:5c:56:f6:23:80:79:52:35:7c:a3:
         13:30:f7:51:83:fc:65:ed:64:82:40:1b:88:76:e7:30:3d:86:
         ef:a5:e5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:54 2026 by rpki-client