This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
File:                     NIMjF9JURDS2WeVpIHHY5MSTiwY.mft (raw, json)
Hash identifier:          Jfj66kySLktuFxwRIf8NftZzc5gnTWmxv4pdOR244QA=
Subject key identifier:   0A:B9:E6:C9:EE:81:09:3D:01:45:B3:11:3A:2D:70:BA:EC:A7:A4:C0
Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
Certificate issuer:       /CN=34832317d2544434b659e5692071d8e4c4938b06
Certificate serial:       019BF79ACB2379FC20765315EFD43FF8A49D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
Manifest number:          055E
Signing time:             Mon 26 Jan 2026 00:01:15 +0000
Manifest this update:     Mon 26 Jan 2026 00:01:15 +0000
Manifest next update:     Tue 27 Jan 2026 00:01:15 +0000
Files and hashes:         1: MtXK992XQ-M-hmv_KStvnyh-x5Q.roa (hash: M8VsnjB/uw1FiI9xmVKpQrIIX0KwLuaKoIKTTuviTH8=)
                          2: NIMjF9JURDS2WeVpIHHY5MSTiwY.crl (hash: xNDvqfj8CbJe5GjFayvqngGHSjj9zS3FOvdXQhEJXBU=)
                          3: S3-C960eDjtkhmLESJEggehwHME.roa (hash: eXKQYhtmCASg+7u8rDqDnt6Fk8AoSBqR8NO1VXIyQ3c=)
                          4: r5VTzB_D--LT6ft6QpgyIKkudbM.roa (hash: 3oNMl/b2gquyHJLZema+rIR0bUrcCM54+yp4fRS/DTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:cb:23:79:fc:20:76:53:15:ef:d4:3f:f8:a4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06
        Validity
            Not Before: Jan 26 00:01:15 2026 GMT
            Not After : Jan 27 00:01:15 2026 GMT
        Subject: CN=0ab9e6c9ee81093d0145b3113a2d70baeca7a4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:d8:cd:63:52:d6:59:9b:21:68:ca:42:8f:
                    ae:e0:59:d6:ea:4f:e3:e6:54:c0:3f:6c:b9:18:6e:
                    fe:c8:b9:73:95:9c:4f:33:4e:d6:b4:c6:13:0b:91:
                    22:f9:d7:ec:be:35:cb:66:0d:f0:f1:a7:54:d1:d2:
                    81:45:4e:05:b8:27:99:65:98:21:5f:90:01:0b:e5:
                    c1:6e:88:80:11:33:b8:6c:f0:ba:03:eb:de:b3:d9:
                    1f:b6:2c:c4:62:13:a6:20:b1:6e:85:22:9a:2e:73:
                    fb:b6:e3:0f:93:bf:1e:61:4a:55:e5:ac:54:b5:d7:
                    dd:c3:2d:5c:e7:18:f4:4b:8c:4d:d2:a4:08:3e:e9:
                    54:8e:be:e1:d5:2c:29:48:dc:b5:3a:ab:af:13:ff:
                    39:07:61:d0:3c:86:33:ec:a2:3e:04:7f:6c:c2:7e:
                    3c:0c:03:d2:ea:19:93:46:1c:70:d3:6a:64:d4:a0:
                    57:ba:a1:90:0c:1f:0b:da:1f:7a:96:ac:0c:99:17:
                    15:3d:04:fe:b5:90:13:00:d9:78:dd:a1:f4:ce:85:
                    d5:21:86:c6:00:7d:6f:2b:6a:01:67:ca:e4:cd:d9:
                    f9:78:35:4d:89:f2:7a:af:1a:4e:77:6e:ac:94:6f:
                    fe:4a:b7:58:7f:5b:b0:f8:c9:e0:58:6b:d5:fa:ec:
                    9c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B9:E6:C9:EE:81:09:3D:01:45:B3:11:3A:2D:70:BA:EC:A7:A4:C0
            X509v3 Authority Key Identifier:
                keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:76:d0:4c:bc:6e:64:e2:7b:8c:f7:f5:dd:2a:28:80:dd:6b:
         02:9d:42:51:69:a0:da:02:05:46:4d:c0:22:7f:1d:88:af:4b:
         31:47:e5:b7:4e:e5:af:b1:07:96:cb:12:aa:98:d4:5b:6d:8b:
         52:58:c8:ab:65:22:ef:ab:5e:90:95:b8:10:ea:79:af:71:9e:
         c8:44:c9:d7:f7:d0:ae:f4:b7:d0:07:d7:78:d2:f6:cb:c2:e2:
         5a:cd:a1:1a:4e:1b:d1:a2:3f:94:35:a3:41:80:db:9a:0f:4d:
         dc:8d:1c:91:5a:41:75:32:40:f6:1f:ec:31:18:ef:2c:0e:1f:
         ab:70:55:cf:5f:b5:80:5d:c2:5d:bb:db:4c:67:c4:ef:2f:91:
         ae:fc:7c:73:46:53:b7:93:45:ea:f6:cc:81:1c:27:02:cb:e2:
         15:ed:73:c8:09:66:7c:af:e0:09:5c:68:21:fd:d0:0d:01:f5:
         23:ee:40:e8:90:51:c8:8b:84:e0:a1:d1:57:d4:e9:76:1f:bd:
         f9:88:9f:91:9b:10:ab:be:f7:04:fa:30:76:8b:c9:f2:6c:db:
         0d:aa:eb:9f:d3:32:36:83:90:9e:00:f7:55:4f:3e:2d:bf:53:
         e6:e6:21:7d:be:83:00:5d:e7:1c:31:dd:99:41:bc:8b:fd:92:
         e0:fa:2a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:10 2026 by rpki-client