This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File:                     NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier:          kaHb1NhYY1q6UTblfFas2+Ibs+25Oc3Drxd4hFXOhBQ=
Subject key identifier:   CC:66:3B:81:2B:6A:F4:4F:E5:54:42:93:E4:FB:21:F6:12:B1:9A:96
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer:       /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial:       019C427D25853F4638F5D1D2088F6BDC0865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number:          0831
Signing time:             Mon 09 Feb 2026 13:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:23 +0000
Files and hashes:         1: 4OrfC0gESmi91J763IQoNP33VaY.roa (hash: UOBol6M5aYlHh1KzK/jjTCQLc+/4wpm6CbL5n4iAyts=)
                          2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: uqIYNLONLcyK4PRgTx51GZYa7rmM/0enm7TXI3b9BO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:25:85:3f:46:38:f5:d1:d2:08:8f:6b:dc:08:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
        Validity
            Not Before: Feb  9 13:00:23 2026 GMT
            Not After : Feb 10 13:00:23 2026 GMT
        Subject: CN=cc663b812b6af44fe5544293e4fb21f612b19a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:55:f6:9b:a5:a9:03:1f:f2:9a:a9:af:22:
                    18:4a:14:ac:f7:ab:51:82:14:c8:14:4c:40:e5:06:
                    80:f4:89:d7:6d:39:d0:52:a8:34:d5:98:20:b1:50:
                    ac:c7:ac:80:c0:ab:d2:85:0a:a1:8f:d4:64:67:1a:
                    28:7b:de:f3:de:b3:bf:a5:fb:35:6a:15:73:85:d0:
                    08:6e:a7:b0:4a:ef:79:3e:b3:f6:06:9b:64:14:3c:
                    d1:47:34:03:33:fe:76:13:43:af:c1:c2:c0:52:67:
                    36:5b:17:d6:24:31:d5:ce:a7:04:2e:b2:f2:e2:ec:
                    6e:fa:ab:d0:b5:57:ad:13:65:57:4c:41:86:62:fc:
                    2b:5a:e5:a4:0a:16:49:43:d2:34:1d:38:0e:4d:9a:
                    0b:45:39:2e:81:72:1f:42:ee:c7:c1:31:7c:07:eb:
                    c5:5e:96:14:17:cf:79:18:dd:86:ed:60:4b:f8:ee:
                    85:dd:42:8b:70:cd:a3:53:8b:c9:fc:ce:4c:0b:7d:
                    99:7b:5e:8d:be:59:9b:16:3b:06:c3:01:90:e1:86:
                    a3:14:ce:3c:b8:fb:b4:be:0b:06:39:a4:b5:b0:4e:
                    d5:90:f0:b0:04:61:26:58:d6:fc:f9:d5:cb:2c:cf:
                    aa:6b:1b:20:99:14:4b:6e:90:d1:64:57:97:45:0c:
                    ff:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:66:3B:81:2B:6A:F4:4F:E5:54:42:93:E4:FB:21:F6:12:B1:9A:96
            X509v3 Authority Key Identifier:
                keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:75:05:1e:61:55:d1:ba:91:07:d5:bc:ce:39:23:5d:b8:12:
         5c:88:09:41:ff:8d:ba:38:f3:e2:09:cd:d7:d2:45:05:ea:f2:
         42:5d:d2:56:b0:8e:c6:da:cb:73:2d:ed:90:a6:a0:ce:df:58:
         7b:eb:44:73:03:c7:35:ca:0b:40:25:b2:5c:ae:d5:59:da:2f:
         6d:30:56:6c:14:43:1e:7f:ab:d0:c5:5c:0b:02:b9:9b:e8:c0:
         aa:de:c2:b7:52:d9:74:99:da:59:4f:d0:e6:7e:04:c7:63:2f:
         e6:57:e6:b3:3d:a3:a6:ab:35:8b:2a:ec:93:f1:e5:f0:1a:2b:
         78:83:0e:b5:36:fe:40:44:75:c1:3a:55:e6:22:69:35:ad:9f:
         90:6b:20:d7:d1:8a:23:96:29:72:71:c0:b3:48:bb:5a:3e:5d:
         29:ea:ee:fd:29:1e:e3:74:70:40:33:72:cc:eb:27:72:0c:63:
         00:b8:99:49:21:84:20:8c:6d:05:4d:4b:b3:be:55:de:b0:11:
         43:1e:b8:d6:00:86:ff:86:2c:4c:f0:e2:93:c1:b3:52:6b:21:
         e9:e8:f5:c2:eb:99:96:df:9f:f2:d3:bf:16:ad:af:a7:28:cc:
         3c:f9:95:8f:ff:8f:8e:86:0e:f1:a3:fe:13:5c:ff:29:bb:a0:
         8d:89:57:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:47 2026 by rpki-client