This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File:                     N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier:          3NqEbtTqCT31/6veCSMRjItzyG54DCxffbusaLbHuEM=
Subject key identifier:   74:5E:33:AD:2F:C2:B9:07:A8:93:3F:FF:42:20:53:66:00:39:2D:5E
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer:       /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial:       019C1EDEC0E35DC46D9E9E0E7C409B7C6574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number:          1801
Signing time:             Mon 02 Feb 2026 15:00:40 +0000
Manifest this update:     Mon 02 Feb 2026 15:00:40 +0000
Manifest next update:     Tue 03 Feb 2026 15:00:40 +0000
Files and hashes:         1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: KwKkFY5xxEFX5qFv6n+IWAcMpNLQXK/VXYuavgHxbVE=)
                          2: rNGlVa8TkjQC_3M9tVgFauOAU3E.roa (hash: AR/uZQW7gtN2BjMz+6MNQeE7vlvGCoJ/untsTNbYdcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1e:de:c0:e3:5d:c4:6d:9e:9e:0e:7c:40:9b:7c:65:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
        Validity
            Not Before: Feb  2 15:00:40 2026 GMT
            Not After : Feb  3 15:00:40 2026 GMT
        Subject: CN=745e33ad2fc2b907a8933fff4220536600392d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f7:70:4c:d6:75:fa:69:0a:1c:31:d4:85:26:
                    a8:f9:d5:c1:f2:81:1e:37:2c:3e:99:51:6a:51:d3:
                    e8:01:71:4c:14:c9:8d:19:2c:76:5d:01:f3:59:4b:
                    24:69:59:a5:e5:a2:e8:1e:f1:3d:fe:e0:b6:61:d6:
                    a4:1d:f0:5f:20:f5:b9:9d:aa:a4:5c:bf:32:59:f4:
                    d9:c3:a2:16:76:51:b7:0e:05:9d:11:92:77:84:99:
                    80:3d:28:3e:c0:54:7e:57:11:8e:e9:d0:b0:1f:ff:
                    81:c9:51:06:b0:74:c6:8e:12:9c:2e:7c:dc:36:ea:
                    62:95:4a:bd:9e:b6:d0:eb:02:d0:c3:39:bf:45:e8:
                    81:22:ca:8b:ec:5c:5e:f2:0c:ff:37:5d:f7:37:f9:
                    b0:83:a5:10:cb:b9:1b:e7:5d:01:6e:ee:02:5f:3d:
                    71:89:44:de:7a:34:9b:b5:a8:62:1e:5f:f3:25:24:
                    50:5f:96:0c:5e:9d:3d:ce:7f:f5:26:06:a3:48:dd:
                    1e:49:54:a0:b3:66:4e:a8:57:a5:c3:9b:5c:97:a8:
                    a0:6e:29:6e:d5:fe:89:ff:86:cc:8f:9f:cc:9c:92:
                    05:e2:e0:02:33:36:97:3d:b2:5d:4b:e6:80:c8:75:
                    89:b8:50:56:1b:85:7c:7a:20:6f:a3:27:c6:7e:27:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5E:33:AD:2F:C2:B9:07:A8:93:3F:FF:42:20:53:66:00:39:2D:5E
            X509v3 Authority Key Identifier:
                keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1c:97:73:8f:98:5d:3f:a7:df:d4:4e:2e:d7:b7:8e:12:cf:
         fa:1c:d2:c7:60:9f:2b:8c:ee:72:04:3a:76:55:78:01:6d:ec:
         ab:39:31:ec:ee:57:f7:23:46:8e:5e:2a:89:66:62:b6:91:53:
         fa:af:09:db:ce:34:30:46:7c:eb:f8:e0:c6:38:97:20:c5:de:
         36:e7:d5:ec:c5:75:d3:ad:fc:23:fe:b9:fb:c9:57:f2:71:10:
         a2:f5:34:55:bc:7d:e2:31:14:72:62:3c:1f:c1:43:53:ca:45:
         0b:5a:9b:6a:ef:55:b9:9e:8f:77:2d:fb:8d:71:aa:68:b2:df:
         e2:cd:15:ee:d8:34:16:6f:d8:df:26:07:62:18:7c:0e:a8:8c:
         86:d3:a5:e3:ce:4a:b8:df:db:d0:67:7e:18:d2:66:58:20:d4:
         7f:b1:5d:1e:f1:54:67:59:f4:9f:1d:44:5c:d2:16:14:4c:18:
         56:a5:a6:66:27:22:2e:bf:76:4d:bc:f9:b5:ef:86:b0:55:16:
         db:dc:53:0f:48:fd:8e:61:fd:8d:5f:aa:96:59:e2:28:3d:3a:
         e1:91:cd:33:62:7a:92:42:c2:83:c5:3f:79:d7:32:54:b8:64:
         23:07:dc:92:75:a8:48:e8:dd:2c:6b:ac:00:29:c5:05:7e:b3:
         72:72:31:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:24:27 2026 by rpki-client