This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File:                     nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier:          fdJcAJn0R+wZhacAC0ave/mQFKMO7rxY0051qF/dKNE=
Subject key identifier:   04:EE:9E:4D:86:8F:85:35:34:6B:78:7D:7A:28:7D:C0:8B:78:6E:4F
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer:       /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial:       019C41D89391E6275F93D93D4B70ED7C2293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number:          09D7
Signing time:             Mon 09 Feb 2026 10:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:38 +0000
Files and hashes:         1: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: niy3v5E1stj2UtS6wtzQ55Gxg31NHBgJdmRubgty8NI=)
                          2: njOWzyw6BPbysiyLRcVX59-q4hc.roa (hash: vhZ8qAXL4RUIeajsso+zjNGjDXDgCoWsrZSWesPHRWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:93:91:e6:27:5f:93:d9:3d:4b:70:ed:7c:22:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
        Validity
            Not Before: Feb  9 10:00:38 2026 GMT
            Not After : Feb 10 10:00:38 2026 GMT
        Subject: CN=04ee9e4d868f8535346b787d7a287dc08b786e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:7b:d6:cf:82:1c:66:ba:d6:b9:76:2d:a7:
                    59:26:2f:22:fc:9d:f1:d3:be:96:37:17:ec:a4:13:
                    55:29:c1:66:a3:05:44:1d:69:7f:83:3d:c9:3d:f7:
                    0d:0b:80:be:6c:be:8c:95:35:82:be:20:c1:07:0a:
                    b2:1c:14:f3:4b:ec:17:77:8a:ff:f3:52:ef:12:74:
                    c1:2b:34:e6:d0:09:c3:36:0f:00:97:5a:81:15:d0:
                    c8:f2:4f:55:02:dd:19:a0:bf:5c:43:6e:31:5f:59:
                    a3:a0:a1:bd:f2:5c:90:19:91:48:2c:b3:cd:30:9e:
                    c6:4c:b6:f2:ad:46:f6:e5:33:99:3f:6b:6d:c2:fd:
                    cd:25:4f:21:d8:7d:49:5d:4f:f3:c4:cc:b6:30:d9:
                    c1:2e:c3:5f:24:06:6a:f8:89:e0:83:36:23:a8:53:
                    db:d2:bd:0a:b3:55:8e:e2:99:a1:c8:5c:72:9d:6d:
                    61:49:91:74:9f:4f:89:bb:14:82:ab:11:9f:21:d4:
                    d3:d1:e3:57:31:a9:f9:a6:8b:8f:51:9b:57:95:ae:
                    c9:bb:b6:b0:58:62:9d:8a:8b:45:89:d0:f8:e7:2c:
                    c5:b2:99:7c:c3:4f:47:e2:35:cf:62:c0:7d:fe:a1:
                    5f:68:85:47:bd:32:9d:56:28:e7:d4:1a:d7:1f:e8:
                    c0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EE:9E:4D:86:8F:85:35:34:6B:78:7D:7A:28:7D:C0:8B:78:6E:4F
            X509v3 Authority Key Identifier:
                keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a8:3a:75:47:ce:d7:7a:ed:c8:0b:06:03:cd:18:3d:fb:04:
         fd:b1:f2:62:9b:9d:d1:e9:b9:90:e8:2b:a3:69:f4:aa:69:18:
         0f:32:7e:2a:a2:73:04:57:2c:b4:92:19:41:02:37:87:c9:06:
         87:9d:ec:e3:02:77:8f:6e:e3:ec:94:84:12:09:15:c9:8c:48:
         fb:6a:ec:e5:28:5b:3b:e9:f9:59:37:0b:8a:d2:0e:b2:93:e3:
         8b:b3:5e:17:8d:77:01:af:d6:4d:2f:e2:91:b4:76:e0:25:5d:
         12:00:fa:ac:44:86:13:30:6a:0d:55:2d:f9:40:ec:05:c3:a0:
         cc:38:ce:b7:7d:c2:94:0a:8b:7f:72:d1:9e:c1:ac:f6:51:1a:
         b0:56:26:f5:fa:cd:7e:08:48:34:58:12:6d:f0:d1:ee:1f:d2:
         f5:5e:27:6d:56:dd:9e:87:e6:33:eb:2b:67:71:a2:11:81:46:
         54:eb:9c:d1:43:af:a0:75:11:f4:b2:d4:fe:24:54:53:bb:58:
         49:01:ab:d0:b9:5e:55:d7:fd:00:83:56:b6:ca:de:16:26:c3:
         e5:70:23:da:c3:76:61:79:bd:7f:dd:94:b4:16:79:fd:42:04:
         cd:a5:07:ef:80:0e:34:16:a9:0b:63:20:4c:19:fa:a6:6e:ef:
         f2:a0:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:19 2026 by rpki-client