This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File:                     N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier:          eyZglOyLQfzMslxd9UlgF62b0hnhF6IVsnhLPSivtVI=
Subject key identifier:   25:11:55:2A:4A:99:CD:F9:B1:A7:9A:42:B3:F5:3B:79:97:9A:6E:5A
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer:       /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial:       019C42B436C52F03856B4DC910F18C424B9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number:          17F3
Signing time:             Mon 09 Feb 2026 14:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:32 +0000
Files and hashes:         1: 1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa (hash: NBwXIln+Lrk68hloVfF0NdhAEyHd00EUEH5nirBGf1U=)
                          2: 7mIgzFRr6XpzVVMsTQLKIHrILsQ.roa (hash: T0CPxkJ6b9ENop729OWssjPxSjAAOz8Aw63ICvojjNA=)
                          3: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: UEICkhuEJ+BXHvagHrwJhtNqWZyeTer32U0zShFyoCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:36:c5:2f:03:85:6b:4d:c9:10:f1:8c:42:4b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
        Validity
            Not Before: Feb  9 14:00:32 2026 GMT
            Not After : Feb 10 14:00:32 2026 GMT
        Subject: CN=2511552a4a99cdf9b1a79a42b3f53b79979a6e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:62:65:11:70:cf:b1:0b:0e:02:06:6a:30:
                    5f:d1:6b:23:6c:a1:e2:59:28:f5:3a:44:b7:7e:73:
                    f5:a6:f3:af:cb:ec:ab:9c:fc:d1:a3:91:2b:b9:75:
                    62:16:a2:fa:e2:8a:95:bc:a4:2f:ff:12:96:1d:b6:
                    7d:9a:03:8e:aa:e3:16:66:69:13:35:2b:a9:23:d2:
                    aa:d3:83:0c:b4:a7:79:02:27:e2:aa:c4:1f:5a:ce:
                    ec:d1:67:15:dc:56:76:24:fc:41:a9:26:62:23:8f:
                    fe:2f:7c:6e:f3:ef:16:ac:ef:fd:6e:6e:35:99:92:
                    6a:86:e6:2e:64:2f:6a:53:ae:e9:74:e8:4e:04:4e:
                    66:3f:a6:b9:cc:4f:c6:96:0b:e7:36:b5:89:9f:9c:
                    ce:4b:95:55:b8:78:22:f4:52:f6:8c:c2:ed:ab:c4:
                    39:88:92:d0:03:ba:7b:e1:97:1a:3d:b6:be:70:33:
                    cb:8f:46:e0:ca:97:f9:59:41:d9:19:de:37:e3:7a:
                    fe:44:e8:4a:4c:90:68:93:75:ad:e7:bf:dc:df:3c:
                    a5:b6:6d:ca:37:a2:46:7c:8a:cb:3f:76:78:7b:4f:
                    1a:8a:a6:74:ce:b7:b4:7f:a0:d7:18:1b:8a:cb:41:
                    ed:b6:3f:5b:9f:c5:c7:22:77:fa:a4:3c:55:15:48:
                    7c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:11:55:2A:4A:99:CD:F9:B1:A7:9A:42:B3:F5:3B:79:97:9A:6E:5A
            X509v3 Authority Key Identifier:
                keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e5:cf:3a:82:0b:2d:24:6b:72:95:0b:0e:fa:a5:eb:3e:2d:
         f9:d1:0d:8c:c0:ea:da:4d:6d:ae:47:c1:5a:c0:b8:49:64:d4:
         61:8f:1c:91:6e:a0:bb:b5:b0:0e:9d:0b:25:a5:58:d7:5c:26:
         fa:43:76:7e:23:78:10:87:93:f7:00:fa:e6:2e:2e:f6:c0:55:
         59:6d:b0:f9:71:1c:8b:62:92:c3:9a:f1:da:05:e3:2c:34:af:
         5d:6f:ab:41:75:95:41:3d:33:7b:88:9a:7b:ac:ee:d1:fa:aa:
         c3:4a:5f:e3:11:69:10:a6:a6:44:4e:0c:91:c9:67:42:66:32:
         45:3d:98:40:12:11:e8:0b:71:6f:35:b2:67:34:c7:4e:fc:08:
         16:d6:77:65:8c:75:d9:f7:7d:e9:fd:9f:dd:69:7d:da:13:3c:
         f0:95:80:de:31:1a:8c:14:2c:01:71:97:67:84:68:70:31:4d:
         12:ef:88:d2:3f:ad:ac:58:8c:c5:6a:dd:8f:f6:91:42:e5:2b:
         60:4e:6f:d1:b3:ce:19:06:8f:99:03:ff:57:4d:56:9a:e8:42:
         31:45:cc:3b:a5:64:53:81:f8:61:4b:4a:16:ca:2a:5b:bf:1f:
         17:35:59:3d:a3:57:b8:cc:23:0d:bd:34:69:46:b4:2b:eb:79:
         97:c1:17:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:57 2026 by rpki-client