This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
File:                     nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft (raw, json)
Hash identifier:          0QYFIUvZIqwhAJXC/w71+2hjACkzIawCJhq94ZSBf78=
Subject key identifier:   83:32:82:70:8A:A2:FF:47:83:8E:FF:DE:B0:16:CA:4A:DB:4F:E4:A3
Authority key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
Certificate issuer:       /CN=9d8ada352982a319b54d5e483d34426346733ea4
Certificate serial:       019C43FE81746B4850E37AB13A1F929EB1AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
Manifest number:          1701
Signing time:             Mon 09 Feb 2026 20:01:18 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:18 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:18 +0000
Files and hashes:         1: fPpcTKJECfYoksYEZEcUM_j0qkQ.roa (hash: E5+q7rc6m3t9onZOzrQMasG/CbDzH+1hOPd2cCu+nT4=)
                          2: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl (hash: Ckmc6+57xFwQhTWeLg89VPI6PbJejO96SbJA1IViRAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:81:74:6b:48:50:e3:7a:b1:3a:1f:92:9e:b1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d8ada352982a319b54d5e483d34426346733ea4
        Validity
            Not Before: Feb  9 20:01:18 2026 GMT
            Not After : Feb 10 20:01:18 2026 GMT
        Subject: CN=833282708aa2ff47838effdeb016ca4adb4fe4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:7b:bc:15:a3:14:fe:11:5f:01:6a:8d:bc:
                    20:56:93:19:75:40:c4:73:19:26:fe:7a:bf:1c:91:
                    95:d1:2c:02:8f:8b:0e:32:a1:6a:46:0d:98:3d:32:
                    17:cf:62:8b:09:af:3c:10:1a:a4:59:9a:17:0d:c1:
                    75:3c:12:bc:85:85:1e:45:6f:c9:b3:8c:33:49:f9:
                    b6:07:c1:c2:22:9b:73:1e:05:9b:3c:72:65:8f:d4:
                    59:36:64:13:b2:07:42:4b:39:e7:df:52:be:3f:21:
                    ac:c8:d8:95:ad:4c:31:b2:5e:65:3e:da:63:9e:77:
                    ee:31:81:d9:af:e8:e2:3e:7f:13:c0:14:69:b9:fc:
                    51:c7:8a:12:a6:e2:e6:07:e5:7a:a0:34:06:79:09:
                    93:4f:51:58:8e:8e:42:8f:f3:a0:e0:45:1b:3f:d3:
                    72:49:7c:5b:10:1b:0b:85:e5:94:4e:cd:43:2a:60:
                    1d:12:70:b1:2c:69:57:42:93:96:95:8c:d9:49:40:
                    d5:c4:49:80:62:07:4a:e5:d4:ee:d9:a2:6f:42:31:
                    84:4c:db:34:4e:e7:7f:ec:cc:6a:10:25:06:9f:72:
                    d2:ad:d4:6b:18:f4:34:db:7d:a4:86:b0:30:4e:21:
                    b4:eb:60:ec:49:31:2a:07:90:eb:d8:f3:3d:12:ac:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:32:82:70:8A:A2:FF:47:83:8E:FF:DE:B0:16:CA:4A:DB:4F:E4:A3
            X509v3 Authority Key Identifier:
                keyid:9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8a:58:05:ad:5b:0b:47:77:6e:f6:85:bb:92:03:21:19:21:
         84:b3:25:21:79:f0:0d:4f:dd:6a:0b:a3:d3:99:9b:a3:32:5c:
         bd:c9:18:b2:cb:9d:87:4c:f3:09:9c:e0:7a:b9:39:11:cd:ff:
         30:5c:a1:68:6c:f5:76:b4:8d:24:cc:36:47:ae:4b:b7:45:3a:
         fc:58:d7:9b:31:ea:19:e5:82:ce:3b:09:ec:18:ec:8c:34:5d:
         7e:e9:e4:c7:bb:07:3f:9d:21:c0:92:92:97:5d:69:3e:a9:d2:
         13:96:a4:73:ab:b7:4d:3d:b6:68:c4:1c:28:94:49:0c:f4:fb:
         b5:c8:1f:7f:53:71:29:e3:6e:39:e5:5b:e4:d7:4c:22:b3:0f:
         ad:31:3b:2d:4e:d5:db:5c:7e:c7:01:4e:8a:82:2f:9b:02:c5:
         07:7c:30:20:3b:b2:99:59:54:0c:95:24:86:53:80:ab:7f:d6:
         72:b4:de:c8:a1:93:f9:35:8f:8b:4d:cf:d2:81:81:51:b3:2c:
         6e:d9:bd:a8:8a:af:1b:ee:0c:3e:39:87:a7:7e:23:2e:3a:a4:
         78:4c:f7:45:22:b3:42:26:21:81:8d:8d:4f:c6:42:12:f7:d2:
         e6:0a:fd:2a:03:b8:29:54:9e:66:19:40:95:63:94:d1:96:36:
         a5:d1:f5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:52:28 2026 by rpki-client