This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File:                     Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier:          l17xrEqGsJrOhsM1XYdq43OIpSdA8lnNC4In+eNmbig=
Subject key identifier:   2C:01:5C:88:69:F8:D3:12:FA:B7:F6:5D:CE:FC:2E:D7:6A:AA:17:6B
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer:       /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial:       019C43590B467C180C2CE4C9D917800C2DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number:          0450
Signing time:             Mon 09 Feb 2026 17:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:34 +0000
Files and hashes:         1: 3wSaSYb8mS_PxjqSremVf1ZN0IQ.roa (hash: VopVFdZw3ER/r0OJ1FIpefADgp91rKMDyFpDZmkW2g0=)
                          2: 8ZMRwkEAvgLf-7B6O5A6wTZkvko.roa (hash: +hr7aCwMyU++eEfbB0MkOVyBHh1rbHvZF3Q4bAp/McY=)
                          3: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: 2mcmuo/nh+L8S9poP8VkixsbUBfdnwXUXzC0JK6M4k0=)
                          4: gJmI_5fYS8JzyNNjOJBdX1HDjTA.roa (hash: EdEmewULenr5hBiIM0aL0Nom8Wp5BQw1JYCWC8ExBCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:0b:46:7c:18:0c:2c:e4:c9:d9:17:80:0c:2d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
        Validity
            Not Before: Feb  9 17:00:34 2026 GMT
            Not After : Feb 10 17:00:34 2026 GMT
        Subject: CN=2c015c8869f8d312fab7f65dcefc2ed76aaa176b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3b:50:2d:f1:9c:d2:2e:81:04:11:dc:5b:58:
                    a7:1a:af:3b:46:c8:36:aa:75:af:98:cc:dc:99:2a:
                    90:ba:f6:3f:53:a6:de:d3:c5:12:94:1d:ce:92:94:
                    0f:f5:de:24:b9:ff:10:1b:74:01:ce:86:bd:f3:a4:
                    ac:0d:64:40:90:8c:36:5f:63:00:ae:b6:c5:53:89:
                    83:12:47:f1:2f:c0:89:1a:5d:05:42:78:07:59:76:
                    63:80:6a:16:91:98:92:79:b3:09:92:cc:ae:42:0e:
                    71:6f:b6:89:03:9c:6e:23:3c:f6:dc:7c:fc:9d:d4:
                    96:98:eb:98:85:12:3b:5c:d7:1c:4d:dc:65:3a:8a:
                    c7:7b:72:d3:7d:c8:24:b3:a0:2d:dc:75:74:5a:3e:
                    e1:a1:8c:0b:5e:30:9e:d6:6c:85:15:d5:cb:d3:ea:
                    a3:e4:f9:28:23:bd:0d:1a:18:a1:f0:90:b6:33:c5:
                    c8:dd:63:c0:76:a1:a7:0e:55:07:5c:36:20:9b:b3:
                    7e:09:4c:a3:29:65:71:9e:f0:84:fc:4c:87:0a:6f:
                    bb:40:e4:9f:17:df:63:04:a8:39:3d:c2:da:bf:ea:
                    c7:28:bb:56:2e:cc:c5:c0:0c:2e:f2:a8:e6:34:d9:
                    a1:ea:59:4a:d2:e6:ad:08:21:06:52:b5:8e:f7:ee:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:01:5C:88:69:F8:D3:12:FA:B7:F6:5D:CE:FC:2E:D7:6A:AA:17:6B
            X509v3 Authority Key Identifier:
                keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a8:12:43:8e:20:c0:eb:df:15:c9:a5:96:d5:8a:88:6b:24:
         73:44:65:1e:1d:e5:71:7b:f5:57:a3:67:8b:84:c6:c8:fd:a0:
         a2:83:82:da:fe:6c:80:7e:b0:da:4c:90:34:35:ac:bb:69:50:
         da:6b:60:c1:9d:b0:e7:04:dc:a5:1c:92:8a:02:85:bf:d5:1c:
         d7:a9:48:88:a8:a9:3c:a6:a6:85:30:9c:bc:64:fd:51:23:bc:
         4d:4a:9e:ef:7f:34:94:e7:ea:24:f0:ce:41:21:30:f2:9f:37:
         10:89:9a:6a:ad:37:39:ce:d3:42:6c:80:bc:95:02:8b:e0:1e:
         1e:60:c8:87:7a:7e:5b:53:b8:26:10:ca:a4:6e:61:80:05:75:
         81:a9:9e:79:a8:26:1b:15:b9:a5:d4:64:3e:13:02:72:4a:cd:
         7f:d7:f2:b1:83:2b:01:26:7f:fc:03:e3:a2:9d:99:05:94:87:
         c2:59:80:85:82:88:9a:eb:fc:f4:b5:4c:60:26:3f:ae:2c:63:
         7b:0a:ea:47:f0:2c:da:08:7c:05:26:7d:f1:37:aa:27:6a:0f:
         fb:a8:10:e2:17:10:b5:b6:3e:ab:e9:27:06:b2:29:09:81:dc:
         37:50:4b:41:2f:c0:1d:d7:03:2e:6c:36:5b:e7:0e:68:d5:a7:
         f7:0f:ff:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:47 2026 by rpki-client