This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File:                     N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier:          Rro/fKlc9b+IBrHwHyC5bVu1PzDTaVE8hq/RkzVhWKA=
Subject key identifier:   2C:2F:D2:7E:F5:37:52:32:AF:DD:7B:47:AC:0D:35:39:A5:7F:6E:88
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer:       /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial:       019C42EB6F5451F44A22910FAF759C1D469E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 15:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:51 +0000
Files and hashes:         1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: Oan7KRHo558uyZS1nz0E1EOEDGhTHI5koGrLKaOmAxY=)
                          2: luwzE6T9g1FODC1IWX_092L80go.roa (hash: SmuSPcDUrdZTjJf8gY6ZuzWcL8JammWkXJbrb0xGEHM=)
                          3: pN_RCcBz_c4Yoa4ysWqJTFA6DpQ.roa (hash: +w/OmPrH18ps5DOqBKDKZJibz+NbK5xc+/wpQsN34+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:6f:54:51:f4:4a:22:91:0f:af:75:9c:1d:46:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
        Validity
            Not Before: Feb  9 15:00:51 2026 GMT
            Not After : Feb 10 15:00:51 2026 GMT
        Subject: CN=2c2fd27ef5375232afdd7b47ac0d3539a57f6e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:08:4f:de:8f:13:a0:60:84:bf:60:cd:65:
                    af:2b:af:53:0f:64:de:ac:b5:22:36:73:34:ab:d1:
                    64:ee:56:dd:d9:67:d8:ee:49:84:dc:54:28:d6:1e:
                    31:fd:67:c8:c5:0c:56:cd:ad:df:f4:86:7c:a6:b5:
                    4e:6e:ff:3f:b7:fb:d1:20:49:f1:fd:cf:c6:89:57:
                    91:c7:6f:af:1a:d4:89:4e:5c:9c:6e:39:49:63:7d:
                    77:f9:31:31:57:11:7d:54:52:8b:a2:03:5d:29:f6:
                    70:17:e8:7d:3b:26:45:5c:86:64:4d:61:78:28:31:
                    46:10:c6:6a:fe:f8:7d:a0:c1:20:c5:81:9b:0d:56:
                    63:68:8b:28:50:6e:63:98:96:7c:32:f4:6f:b7:2e:
                    3f:dd:17:a6:30:31:31:62:26:06:48:a0:3a:fb:89:
                    a8:12:61:39:01:59:3d:37:27:bc:d5:40:59:38:d4:
                    92:14:49:e3:0a:c7:a4:b1:33:1a:40:0f:db:d1:d0:
                    a6:2a:f8:6d:06:f6:7d:27:4f:73:15:2f:33:3c:3c:
                    25:7f:c8:aa:e2:8f:bc:cc:d6:3e:d1:d6:64:9d:de:
                    0d:a7:d0:e3:b3:25:f5:37:0f:ce:7a:44:a2:b7:89:
                    de:ce:94:4a:9b:88:32:4b:22:74:fc:de:8c:3c:10:
                    89:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2F:D2:7E:F5:37:52:32:AF:DD:7B:47:AC:0D:35:39:A5:7F:6E:88
            X509v3 Authority Key Identifier:
                keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7a:ea:bd:04:5b:bf:bd:e2:6b:1d:d3:14:54:b8:11:9a:e4:
         8d:c3:69:1a:dc:38:3e:cb:0c:3b:d4:78:b9:26:ba:28:dc:9a:
         da:2a:8a:de:76:51:d4:65:f4:e7:0a:4b:68:b6:2d:2d:e7:8d:
         18:61:49:d0:75:d3:d1:4b:22:b3:4f:6d:32:6a:cf:97:21:d7:
         68:bf:49:0a:73:be:43:09:34:91:12:83:e5:ff:fd:56:88:82:
         8b:5b:3b:03:65:7e:9b:3d:40:27:3c:14:eb:66:fc:96:23:96:
         ef:fc:c3:33:81:77:35:df:64:8e:d6:e4:f8:0e:38:c7:07:75:
         a5:60:b5:b6:90:dc:25:dc:b4:4a:a3:8a:d6:f3:f4:cd:ae:37:
         e0:c4:9b:a5:ed:41:93:bf:82:f0:18:da:a5:6c:e6:7a:41:d5:
         be:df:1a:d0:17:a9:b3:29:18:8c:a3:a2:e9:d7:d7:64:41:c2:
         db:bd:ad:e8:43:0e:ed:34:7e:9e:f7:e5:ce:b7:9a:6a:fa:c1:
         0f:89:d3:87:fc:05:59:33:1d:23:0c:74:49:f4:dc:56:10:55:
         de:db:ea:d0:6c:89:21:02:eb:f5:66:0f:07:12:7d:8c:86:d0:
         b6:86:9a:64:53:83:cd:d5:95:c2:37:70:53:7e:7b:fe:21:7e:
         f0:24:8b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:34 2026 by rpki-client