This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File:                     nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier:          yoR4PCGbvg9TO4jtYeNUSrPZ6f5/7kbbCi4yNi0Oa+I=
Subject key identifier:   3A:CE:58:09:67:D7:F7:05:43:29:45:A2:F7:36:85:CE:09:22:00:95
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer:       /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial:       019BF79A3554F73CB12A0269C20C6D45EB0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number:          17F6
Signing time:             Mon 26 Jan 2026 00:00:37 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:37 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:37 +0000
Files and hashes:         1: 3bVeZ4jtU_nod0fE248hvJ8HwmE.roa (hash: tZeUGg3uohbozp0AKzn9i/jwYgDahKq/WKKbSHnm6EE=)
                          2: 4_3T9oqdjGNdYvgcmhfdmg2_xFk.roa (hash: C4ZhYpcFum0fbS3tRySUhTlzAuq5N1/9WgaAqXp5T1k=)
                          3: FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa (hash: oaE/hCDrQO5MgjbWzRph6lVm2avGrrJhXBmUB4OGEJY=)
                          4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: Bz6jW63ya6WC6lw8AZQ+OK0tQ0P06Nl7ivkVOxQvtQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:35:54:f7:3c:b1:2a:02:69:c2:0c:6d:45:eb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
        Validity
            Not Before: Jan 26 00:00:37 2026 GMT
            Not After : Jan 27 00:00:37 2026 GMT
        Subject: CN=3ace580967d7f705432945a2f73685ce09220095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:11:88:2d:45:fe:f5:c6:ac:b6:c5:84:d8:af:
                    6c:ae:27:c8:e9:08:2d:da:72:db:4f:aa:58:4a:87:
                    05:c4:02:ff:c1:b9:9b:61:e7:e1:0f:be:b3:bc:5d:
                    12:e1:68:65:4d:3c:76:91:5d:7f:e9:24:d9:57:5d:
                    18:c5:b9:e2:e9:e3:52:30:c5:a1:bb:8b:e4:e4:df:
                    30:2a:2a:2a:b6:3d:1f:c2:00:45:e2:d9:c5:4d:db:
                    83:ee:19:35:54:38:0c:b1:82:97:04:48:22:98:73:
                    5e:c4:5a:07:31:30:79:b9:61:b7:ab:b7:35:b9:4a:
                    15:11:38:3a:50:88:9d:71:35:86:65:47:8c:32:72:
                    eb:aa:69:4f:22:5a:e6:0d:5c:c0:04:ac:a9:8d:c1:
                    05:a4:a2:4e:da:0a:6f:86:3e:0a:e3:6e:6e:09:ce:
                    c0:77:7e:e6:4e:34:31:ff:13:8e:6d:f1:7a:a6:40:
                    06:4d:2a:99:19:26:61:c7:c7:31:de:aa:7c:bd:a2:
                    ed:c3:89:08:61:b9:14:84:3e:77:ef:bb:a1:64:e0:
                    d4:a0:cf:a0:57:fa:ba:b8:03:f6:41:22:04:71:34:
                    c0:d2:15:5f:2b:bf:5f:37:3d:7b:7b:02:d2:ca:ff:
                    e6:23:e1:0a:89:98:94:ac:5a:e6:94:e1:ea:c8:85:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CE:58:09:67:D7:F7:05:43:29:45:A2:F7:36:85:CE:09:22:00:95
            X509v3 Authority Key Identifier:
                keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:31:a6:e7:2a:79:09:4f:68:49:42:26:94:70:75:f8:f8:
         8c:a0:67:5d:6a:04:e9:2d:89:b3:a2:25:3f:d3:3a:bb:d5:a0:
         20:76:30:46:fb:c7:4c:ea:ea:af:8a:cf:6b:43:a6:a5:75:df:
         91:da:c0:46:b9:79:cc:b9:0f:b5:3d:56:9b:bf:97:ca:27:37:
         40:b3:f5:83:c0:e8:42:e6:4d:a9:0d:38:d7:2d:6b:f8:0d:1d:
         93:3a:9b:ac:79:d2:54:fc:21:8d:a0:9b:0f:a4:16:2b:f7:cc:
         fd:68:12:b6:6c:96:97:46:b9:59:ae:41:4b:cb:1f:93:6c:b6:
         69:5b:d5:c1:53:05:90:e8:fa:20:b3:8e:b2:62:cc:ff:8a:90:
         b2:5b:fb:5e:04:9c:47:90:a1:71:b5:47:3d:4d:ce:24:07:77:
         2f:1c:df:be:61:6b:da:24:e6:78:a9:cd:a4:d0:69:f0:64:cd:
         9d:30:e3:83:e2:b9:a6:58:85:88:88:1c:e9:c2:45:1e:d7:45:
         33:d2:d7:97:e1:37:f4:d4:27:06:93:1d:61:7a:20:89:a9:55:
         2b:a1:95:0d:65:ff:49:d9:39:d4:49:48:48:a4:b5:1e:21:b3:
         50:3b:a4:12:7e:f2:30:b5:08:24:c1:5f:2e:4f:5d:a1:18:7f:
         61:5c:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:51:54 2026 by rpki-client