This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File:                     NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier:          xsBLbCS2Lvir7rtDlywPuAB501LAk9ZtQmx/34Gi2pc=
Subject key identifier:   6C:B0:83:99:33:17:26:CB:EA:86:A0:07:29:BB:42:09:05:9B:1B:00
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer:       /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial:       019C1E71A987656013557805E586852E943A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number:          1802
Signing time:             Mon 02 Feb 2026 13:01:31 +0000
Manifest this update:     Mon 02 Feb 2026 13:01:31 +0000
Manifest next update:     Tue 03 Feb 2026 13:01:31 +0000
Files and hashes:         1: 0pBVrnwaMrvHC0mWbltAonQIV6s.roa (hash: nBJhwfttH5k4hcqYR4xXAgBBGUVFInHTXZxBXLHIH+8=)
                          2: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: AbRl9/TD35Rop93t0E7nYGkb7GGiQKcKuUVLQC90zAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1e:71:a9:87:65:60:13:55:78:05:e5:86:85:2e:94:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
        Validity
            Not Before: Feb  2 13:01:31 2026 GMT
            Not After : Feb  3 13:01:31 2026 GMT
        Subject: CN=6cb08399331726cbea86a00729bb4209059b1b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:fb:d5:15:f9:e8:4c:4b:02:09:5e:f8:dc:
                    e5:78:46:5f:2d:34:77:a7:4a:4c:f4:30:d2:6b:4d:
                    77:00:f2:6e:c0:80:b8:58:82:25:90:0b:cd:21:18:
                    9a:e0:d3:ed:4b:d4:43:5e:7b:1a:f1:c7:d5:86:e6:
                    60:e7:fd:e8:0d:81:0a:48:a7:f2:76:5d:4e:ae:42:
                    7a:78:8a:8f:1a:74:78:ad:74:8d:e9:c4:10:88:a4:
                    62:ae:c5:32:4a:67:2c:d9:15:3f:bb:3b:cd:45:ed:
                    13:07:68:b4:d4:75:0c:e1:c6:ec:40:95:02:16:fc:
                    b2:84:a9:49:0d:3a:12:be:41:79:0c:60:2d:1d:9a:
                    37:53:21:02:32:8a:d9:d0:36:60:41:cf:45:d4:73:
                    31:65:63:06:f9:ef:ad:25:07:3f:53:de:64:fa:4f:
                    43:e5:3b:c2:23:ea:e2:0b:02:a6:10:45:e1:47:23:
                    21:ba:27:6f:7b:b3:bf:c2:42:2f:52:7a:4b:02:35:
                    c0:a4:3b:68:1a:c2:ce:8e:9c:e0:b2:2e:8e:ee:ce:
                    2b:b7:e0:10:41:9d:dd:b4:9b:83:66:10:b4:b9:ee:
                    c5:34:2f:fe:63:03:bd:d1:2c:36:c5:d6:f0:83:9f:
                    43:16:d7:d3:3a:fc:84:64:4c:3e:58:99:56:c8:b7:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B0:83:99:33:17:26:CB:EA:86:A0:07:29:BB:42:09:05:9B:1B:00
            X509v3 Authority Key Identifier:
                keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:61:58:52:ae:57:0a:76:13:18:7b:12:df:77:c4:e6:4a:7e:
         33:44:69:1e:42:52:48:88:01:fa:7b:bf:a2:f8:6f:71:16:98:
         36:9e:86:c4:0e:b7:f3:d8:9d:ae:8c:7f:18:b2:e3:da:29:ba:
         51:22:5f:8c:f4:2a:71:5c:c0:b2:73:68:b9:25:16:7b:07:17:
         a1:b0:7f:c7:ad:15:c1:b0:27:5a:1d:13:9f:3a:2c:15:74:39:
         78:99:0f:cf:5d:c3:2f:08:12:74:97:52:1a:6f:0e:b7:9c:88:
         c0:2c:61:cb:09:e4:74:35:77:33:18:11:9f:20:02:44:25:7d:
         6f:8d:1a:27:77:01:67:c1:15:15:f7:5f:65:4a:f1:62:5c:44:
         6e:b6:b1:a6:83:09:69:f2:c8:1e:13:a3:6a:49:f2:84:c4:f6:
         7c:70:eb:b9:3a:66:0b:f6:b7:f2:3f:da:2e:1c:f7:83:06:2d:
         bc:e6:53:c2:ab:c9:33:1b:f7:8e:ee:9c:2b:8f:b3:78:66:cf:
         af:bb:2f:62:e7:33:af:a5:9b:9b:95:56:b1:4c:24:54:5c:85:
         80:f3:c1:fb:37:1e:56:ac:d4:3b:44:f7:54:d5:b6:be:ca:c7:
         6c:0d:09:8c:13:19:87:ce:f8:30:df:b5:e3:54:59:d8:49:9f:
         7c:00:25:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:23:33 2026 by rpki-client