This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File:                     nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier:          3zlQpYUsuBgxmk9bNIVybuB+QQNgCENUp3MoYpYs9co=
Subject key identifier:   9E:43:AE:CE:A1:1A:65:00:B2:94:EA:11:A4:0E:B5:0D:A0:9A:F5:5A
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer:       /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial:       019C446C2441B7089EE0F5F315527EC79F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number:          1210
Signing time:             Mon 09 Feb 2026 22:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:03 +0000
Files and hashes:         1: HDHJKIBeJ8z6eZzJNfVJfRplMEY.roa (hash: WSBqT5EgDQanZYLsnHDLCaga6lrPpWZ3B9VRR/DtEdk=)
                          2: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: SUnrzy6B0S3vZ7r6lH0sCLNBE9SIWk9Us/APrbs364A=)
                          3: rWOdIY7KF2aaCbYLRoO8X_9vhhg.roa (hash: jQixs/++LL/sG6xvvrF6Pjngf83WmCHA4M8ILu4RIXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:24:41:b7:08:9e:e0:f5:f3:15:52:7e:c7:9f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
        Validity
            Not Before: Feb  9 22:01:03 2026 GMT
            Not After : Feb 10 22:01:03 2026 GMT
        Subject: CN=9e43aecea11a6500b294ea11a40eb50da09af55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:34:cd:97:4e:f7:d1:31:1e:1a:63:53:10:
                    1c:0b:f1:01:39:2c:73:ff:61:53:fe:bb:73:4e:0d:
                    c7:1f:17:b1:35:40:8c:b0:68:28:d3:ce:31:df:98:
                    54:1e:e1:42:f7:27:b6:67:41:e7:2d:5c:5c:a8:87:
                    9e:29:0a:9b:e4:e9:e4:ff:72:c3:c3:50:d0:e8:5b:
                    db:db:31:20:98:d4:c4:59:47:fe:18:f1:b9:54:20:
                    30:b1:10:16:1e:2f:8a:29:f0:25:75:02:dd:3b:97:
                    a9:bf:72:30:9f:86:14:f8:c0:7e:9a:9b:8d:70:41:
                    ec:a6:03:3e:b0:18:95:d0:5a:50:fd:2c:fc:83:df:
                    71:ce:df:dc:79:f5:f8:fb:43:e9:1a:88:fc:fe:d2:
                    a7:c0:e1:b6:19:7c:a7:1c:9e:03:d6:15:81:55:d2:
                    34:e1:30:99:81:8a:13:a2:36:41:93:59:01:6b:02:
                    18:ab:fc:37:28:b1:e6:57:98:27:0f:de:02:71:3f:
                    f4:52:e1:7c:2b:85:2b:f6:fe:ea:66:c2:bd:00:9a:
                    f0:b3:1b:c3:94:ac:a4:39:4d:c0:46:94:be:92:1d:
                    d1:2a:b8:76:8f:10:d4:21:e4:11:30:c7:04:e8:53:
                    e6:a5:bd:e1:d8:fa:db:9f:a5:91:12:d3:09:3f:b3:
                    27:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:43:AE:CE:A1:1A:65:00:B2:94:EA:11:A4:0E:B5:0D:A0:9A:F5:5A
            X509v3 Authority Key Identifier:
                keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:71:2b:fb:24:c9:3d:b6:47:f0:e4:cb:6c:61:ca:ca:a9:f8:
         7e:d2:02:01:70:26:81:62:fe:e9:77:9a:17:53:61:35:f3:20:
         21:30:39:b6:de:f3:41:40:d3:26:39:83:70:04:9d:4a:4a:8d:
         d3:e9:04:0a:8f:c2:df:a0:c2:21:0f:8a:36:d2:93:97:07:54:
         7e:7e:6a:3e:e5:19:32:88:b0:ab:38:aa:28:6c:62:d4:c3:40:
         f7:15:94:fc:0c:7b:e0:f6:fa:02:f5:8e:09:dc:c0:bd:ba:fa:
         7e:f8:81:1b:1d:83:df:79:79:d9:6d:ba:cf:45:6a:3b:bc:6b:
         cb:12:01:31:d8:88:27:a2:d3:a5:a8:b8:7e:1e:82:12:01:08:
         04:2b:8c:7d:8c:6a:aa:83:4b:0b:b8:78:30:51:2c:96:10:30:
         5a:c3:83:a8:16:72:e1:1a:69:42:4e:bf:f4:5b:60:59:31:ee:
         23:87:80:49:5d:27:a9:da:7a:e8:cf:d5:90:95:2b:b7:d7:c8:
         ed:d6:4a:60:e4:5a:b3:30:42:cf:fa:56:39:53:66:9f:22:af:
         af:ec:dd:62:2c:b2:a5:74:fb:85:4a:e6:b5:5e:9a:ef:0f:ad:
         4c:eb:ce:ae:a3:96:c4:53:4d:2b:65:ba:0b:95:ca:37:40:be:
         e4:5d:5a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:30:28 2026 by rpki-client