This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
File:                     nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json)
Hash identifier:          +qgig/9F8Lr7nBAglYc9CvOcPACj+XbJueZweDzfj7k=
Subject key identifier:   82:47:3C:0C:35:5D:21:96:96:B0:F0:4C:67:19:26:97:5D:F6:89:26
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Certificate issuer:       /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial:       019C435968FE203834AB0EAFECACF7EB65D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
Manifest number:          0E01
Signing time:             Mon 09 Feb 2026 17:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:58 +0000
Files and hashes:         1: UyjG7mUKw_csY7SyBZFvUhkSaPc.roa (hash: n9HYRjqT7Yx/CpHx7zXXC15FE0G/joD1gI9dynyvC54=)
                          2: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: P8MNblZEZImgZm33iJFlElkalgoOvLZftMaH7XpqKQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:68:fe:20:38:34:ab:0e:af:ec:ac:f7:eb:65:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
        Validity
            Not Before: Feb  9 17:00:58 2026 GMT
            Not After : Feb 10 17:00:58 2026 GMT
        Subject: CN=82473c0c355d219696b0f04c671926975df68926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:66:49:c9:76:21:8f:10:56:15:e0:ff:4a:
                    8a:3b:9a:3b:2f:34:57:5e:ab:9d:1c:3c:85:c4:82:
                    dd:a3:18:eb:47:53:94:2f:36:4f:d1:fd:6e:29:ad:
                    72:8b:bd:8e:94:2d:ac:97:6a:48:3a:d5:f4:24:2d:
                    bf:92:d6:ae:4f:5a:ed:5f:99:98:d7:4c:4f:85:3c:
                    5c:e5:72:e1:1d:f0:9f:b8:97:57:5b:bb:be:9c:82:
                    8f:1b:93:9f:6c:6f:ba:e6:68:06:65:2d:b7:6d:52:
                    6e:45:b5:6e:c7:d7:36:f1:11:79:16:a1:7f:8b:6e:
                    08:87:eb:7a:88:ab:d4:cf:56:db:a1:01:2d:e4:08:
                    dc:d7:cf:76:84:a5:44:2e:a4:e1:b5:a2:25:56:e1:
                    08:5e:47:81:fd:e4:87:d5:f8:64:71:a1:2a:80:76:
                    13:43:a1:88:07:bc:de:41:ea:a0:80:e1:f9:b2:f9:
                    1a:d2:4d:6d:3e:41:7c:d4:14:bd:a4:3e:86:9c:7d:
                    4f:38:f4:3c:55:99:25:ba:c9:a5:2b:7b:61:f3:4c:
                    48:24:08:63:4a:0d:c4:28:b5:9f:c6:0c:bd:0a:53:
                    85:cf:1d:f5:3c:fe:00:1b:f3:eb:af:77:1f:f4:97:
                    ee:5c:f2:18:0a:c5:c6:3e:6b:d0:31:80:1d:b4:91:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:47:3C:0C:35:5D:21:96:96:B0:F0:4C:67:19:26:97:5D:F6:89:26
            X509v3 Authority Key Identifier:
                keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d2:07:94:61:0c:7b:c9:37:50:2d:65:5c:17:2b:91:80:19:
         95:92:dc:3d:de:61:bc:33:9b:e2:a9:21:05:ee:05:21:16:97:
         a4:6f:a1:3b:a8:74:cf:9f:a8:9f:f9:4a:2b:b3:ae:ac:e0:bf:
         be:ae:93:b0:8a:36:c8:92:11:cd:9f:89:34:59:cb:eb:ca:8c:
         47:fc:f8:0b:cf:f6:0e:94:d9:cb:68:ce:e0:ee:ea:1b:14:e7:
         d7:2b:24:90:06:b3:25:d7:19:3f:53:ca:7e:56:7c:e8:e2:b5:
         c3:05:8f:7a:77:96:20:fd:a5:50:64:82:89:27:fe:00:27:20:
         18:c7:1f:a5:36:a8:9e:17:84:b0:54:a3:ee:2c:80:d9:b4:27:
         35:da:6d:6c:c6:89:4d:f3:d5:8d:dd:cf:76:88:c4:09:25:39:
         20:b8:a5:a5:a7:a2:17:b0:16:82:91:ba:09:b2:f6:f5:ba:3c:
         e8:80:e4:13:71:67:a4:43:e1:17:16:1b:af:90:27:5a:f5:9c:
         57:af:cf:6f:6d:37:ea:dc:ef:fe:34:b7:05:f1:83:96:13:ef:
         aa:e1:bf:3c:9f:17:f5:f6:05:b8:1c:a9:9f:b5:63:c0:32:7f:
         3d:ce:ea:d5:92:5e:2c:8b:de:84:89:75:3a:4d:99:16:27:fb:
         8f:4d:9e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:33 2026 by rpki-client