This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File:                     Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier:          wUmsXbJEiPO8KYh+4w8Kp7H4WWFCYb1/1h5JSdMpnt0=
Subject key identifier:   75:8D:E2:B2:4C:31:16:86:EA:E3:D7:8D:BA:06:81:9A:6D:E9:3E:02
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer:       /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial:       019C4246149171FB8EC28487893052EF1605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number:          0ED1
Signing time:             Mon 09 Feb 2026 12:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:14 +0000
Files and hashes:         1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: FCZ9eVlLn5ZHxNaFZHvCwH9yEEBReSjLxxAGpxq2iT8=)
                          2: ujsftfvLfUwDJ11Q7jqPTwZHvjs.roa (hash: b27HdQ5e99kb9xI2IR4xtsvZ4mT9ALpQe3hu34f+Ci0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:14:91:71:fb:8e:c2:84:87:89:30:52:ef:16:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
        Validity
            Not Before: Feb  9 12:00:14 2026 GMT
            Not After : Feb 10 12:00:14 2026 GMT
        Subject: CN=758de2b24c311686eae3d78dba06819a6de93e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:10:e2:05:bc:a3:e7:c1:38:b0:fa:17:33:4a:
                    68:c3:c6:19:e6:47:25:1f:8e:e8:f0:5b:44:b5:42:
                    a0:d0:6e:e2:5e:b4:6e:47:5e:1d:de:73:1d:04:a5:
                    ed:aa:9e:68:95:f4:7e:e5:a5:d6:4a:ea:1a:91:07:
                    9d:be:9a:e9:9c:dc:a9:6e:f0:fd:4d:31:61:af:37:
                    67:39:07:45:ed:86:27:4e:3c:ed:88:fa:b1:0f:28:
                    97:6b:c6:01:c0:85:63:d2:ec:b5:22:14:9c:7c:06:
                    8b:b3:32:ac:60:21:a2:b6:8c:50:34:98:35:b7:09:
                    8c:e5:d0:1e:0b:2c:3b:52:97:ae:95:7b:db:f3:2b:
                    3c:dd:12:be:4d:e2:3b:7d:49:43:3a:cc:d7:02:b5:
                    0f:ed:37:3a:15:dc:01:1b:6d:33:bf:e2:04:a9:5f:
                    97:df:b3:b2:df:b5:54:ca:b4:44:ad:2f:d5:13:4e:
                    b3:ec:3b:c9:cd:5a:37:41:19:23:d5:94:ed:f0:87:
                    53:ae:73:c4:bb:14:f5:a3:42:57:de:ac:d6:85:3c:
                    a0:7d:69:36:17:dc:eb:24:6b:5e:d7:30:a8:85:4d:
                    d9:ba:7d:a3:3f:85:cb:63:d5:3b:2a:f8:2f:5a:e2:
                    f9:0a:6c:2c:18:f4:5b:51:34:65:3e:4d:a6:90:54:
                    2f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8D:E2:B2:4C:31:16:86:EA:E3:D7:8D:BA:06:81:9A:6D:E9:3E:02
            X509v3 Authority Key Identifier:
                keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:bc:69:af:3b:e3:d5:26:d1:a1:4e:18:6a:c6:17:c0:87:54:
         17:69:c4:00:ca:74:d5:60:50:23:47:82:a5:70:8a:12:3d:29:
         4f:83:43:6e:68:dc:c5:52:57:7d:ba:3e:dc:ba:e1:63:ae:83:
         47:b9:cf:f7:8a:b9:bb:8d:fd:af:19:d6:75:9e:48:c3:ce:49:
         42:40:b7:e4:b8:0e:da:21:4d:c4:84:79:04:00:7b:75:99:d0:
         6f:c6:d7:78:63:b0:22:01:bb:ea:41:c9:0d:d8:46:d6:ff:fb:
         42:d6:51:b3:ed:08:3b:32:ba:4b:ef:1e:52:02:4b:af:bd:ce:
         90:5a:cb:97:5b:38:a6:fb:77:bf:f1:8b:52:ad:7b:33:bc:8f:
         b7:fc:75:cd:e4:c9:59:6b:5b:be:d3:bf:bd:1b:03:5a:d7:ae:
         a0:f8:fb:12:ba:fc:2d:51:b7:d9:4b:ac:55:53:63:be:4d:44:
         94:3d:48:36:06:e8:ee:44:e6:0a:4f:7e:8d:b7:ac:5d:d1:b3:
         31:1f:9d:be:09:95:fb:cc:eb:a9:49:51:48:00:d6:58:9f:04:
         44:18:80:0c:64:74:e2:78:fd:52:2c:98:98:36:12:18:77:ed:
         64:8d:ac:25:93:b2:1a:1d:06:57:c4:b5:d6:da:e5:07:e4:47:
         c3:2a:b9:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRhSRcfuOwoSHiTBS7xYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3M2Q4ZjU1N2NhZTE4ZTIzNWQ5MzhiYWQzY2ZhZTE3Yzkx
YjlkZTYwHhcNMjYwMjA5MTIwMDE0WhcNMjYwMjEwMTIwMDE0WjAzMTEwLwYDVQQD
Eyg3NThkZTJiMjRjMzExNjg2ZWFlM2Q3OGRiYTA2ODE5YTZkZTkzZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BDiBbyj58E4sPoXM0pow8YZ5kcl
H47o8FtEtUKg0G7iXrRuR14d3nMdBKXtqp5olfR+5aXWSuoakQedvprpnNypbvD9
TTFhrzdnOQdF7YYnTjztiPqxDyiXa8YBwIVj0uy1IhScfAaLszKsYCGitoxQNJg1
twmM5dAeCyw7UpeulXvb8ys83RK+TeI7fUlDOszXArUP7Tc6FdwBG20zv+IEqV+X
37Oy37VUyrRErS/VE06z7DvJzVo3QRkj1ZTt8IdTrnPEuxT1o0JX3qzWhTygfWk2
F9zrJGte1zCohU3Zun2jP4XLY9U7KvgvWuL5CmwsGPRbUTRlPk2mkFQveQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWN4rJMMRaG6uPXjboGgZpt6T4CMB8GA1UdIwQY
MBaAFDc9j1V8rhjiNdk4utPPrhfJG53mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MTc0MTEtMGM0Mi00ZDE4LTkwMzkt
Yzk5ZGQzOTBhN2Q2LzEvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MTc0MTEtMGM0Mi00ZDE4LTkwMzktYzk5ZGQzOTBhN2Q2
LzEvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArxprzvj
1SbRoU4YasYXwIdUF2nEAMp01WBQI0eCpXCKEj0pT4NDbmjcxVJXfbo+3LrhY66D
R7nP94q5u439rxnWdZ5Iw85JQkC35LgO2iFNxIR5BAB7dZnQb8bXeGOwIgG76kHJ
DdhG1v/7QtZRs+0IOzK6S+8eUgJLr73OkFrLl1s4pvt3v/GLUq17M7yPt/x1zeTJ
WWtbvtO/vRsDWteuoPj7Err8LVG32UusVVNjvk1ElD1INgbo7kTmCk9+jbesXdGz
MR+dvgmV+8zrqUlRSADWWJ8ERBiADGR04nj9UiyYmDYSGHftZI2sJZOyGh0GV8S1
1trlB+RHwyq56w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:42 2026 by rpki-client