This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
File:                     nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json)
Hash identifier:          u4v3RY7wbWWbxU5/Xn3xyQ/JZWakdmOUFOR72DwcyTw=
Subject key identifier:   22:EA:C8:7A:02:F5:5C:0D:B5:12:0C:13:26:77:19:1A:A3:FD:56:B9
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Certificate issuer:       /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial:       019BF3F4FD7FCA1DF86582E31EFE407F6156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
Manifest number:          11B6
Signing time:             Sun 25 Jan 2026 07:01:17 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:17 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:17 +0000
Files and hashes:         1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=)
                          2: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=)
                          3: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=)
                          4: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=)
                          5: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=)
                          6: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=)
                          7: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=)
                          8: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=)
                          9: hd0YhlJ9IDoyXw3U8pgJ3ceuKRI.roa (hash: /lIMMHgK4zk88anoXyRyBTEvoIowJEiVJJvaW0LTkSw=)
                          10: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: oVlALISEsg5hZQrjHL0HT3IsLLDN62ilEcYdU385DFs=)
                          11: ran8AN3AZ4R2r49zo9zOMgljp88.roa (hash: VSrPvf3ym2RdveR02NWlYwS27b6vZOatiWbKlgNRz08=)
                          12: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=)
                          13: uCc138TA6I8oKDd9GfZ4DDo3vbk.roa (hash: 9QywaX+xNWWX8/eIoZHqrPbZhEsxSCi5Zlf0wOs/po0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f4:fd:7f:ca:1d:f8:65:82:e3:1e:fe:40:7f:61:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
        Validity
            Not Before: Jan 25 07:01:17 2026 GMT
            Not After : Jan 26 07:01:17 2026 GMT
        Subject: CN=22eac87a02f55c0db5120c132677191aa3fd56b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a3:f7:7c:bd:62:c8:43:1f:3e:d3:81:c2:8f:
                    5d:fe:8a:13:a3:04:db:a3:82:98:00:54:82:43:20:
                    8c:b7:fc:76:31:24:fa:a8:65:84:60:9f:be:b9:15:
                    9c:18:b7:05:4e:71:ef:cc:6a:0a:81:cf:a3:45:23:
                    6e:72:cf:bf:c2:ca:aa:2e:72:d6:6e:68:28:91:e9:
                    fa:4e:4f:a8:4b:41:58:94:96:c8:89:fb:39:50:04:
                    49:55:40:b2:21:1f:fa:c7:83:33:a0:22:5f:c5:71:
                    df:68:81:8c:35:0d:92:fa:da:4a:22:f9:e4:8e:31:
                    b0:1f:7d:29:63:4c:a9:fd:a2:47:55:6c:7d:0d:44:
                    55:4d:2a:62:4f:14:e5:d1:ca:fb:3c:10:27:c9:ee:
                    aa:c4:d9:eb:53:ba:d9:2e:d0:32:4b:9f:48:e8:ed:
                    bb:66:5d:c8:58:ae:e9:c4:ec:10:94:b5:d1:8d:5a:
                    c3:83:ac:a8:f7:05:96:8c:19:cb:fa:af:8b:69:46:
                    53:4e:40:fc:bf:72:92:5a:f0:be:50:f7:74:fb:51:
                    68:e7:96:21:3c:b9:a5:ec:ba:7a:e9:b3:0e:15:b7:
                    99:cf:61:b8:9c:9b:65:52:d3:a5:d0:ec:17:62:61:
                    7a:af:37:00:f6:17:a9:fd:66:bd:58:f6:c3:82:29:
                    b4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EA:C8:7A:02:F5:5C:0D:B5:12:0C:13:26:77:19:1A:A3:FD:56:B9
            X509v3 Authority Key Identifier:
                keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:6d:19:0c:11:0f:4e:b6:4d:0e:33:5f:87:47:79:45:6e:09:
         5d:b2:00:73:bf:15:8f:a2:54:8c:72:88:00:68:7e:0e:a1:11:
         9c:16:56:d8:33:f5:2f:41:23:6c:59:b9:78:71:d2:58:03:43:
         37:93:44:6f:dc:bb:c0:51:e0:09:0e:78:61:97:02:b1:e6:23:
         2a:e7:55:81:e0:65:37:69:ab:5b:e6:4c:a6:eb:97:0a:7f:7e:
         08:8f:c5:e5:49:f6:5a:84:0b:33:ca:d2:fc:8a:72:eb:98:24:
         56:ed:74:6a:52:11:1c:26:da:58:e3:2c:57:15:f4:fc:73:21:
         da:90:d6:2f:3b:67:36:9f:5e:dc:49:64:cf:b8:82:85:4a:97:
         9d:5b:48:95:12:32:09:e2:b8:89:bb:2c:d2:4c:c5:f7:0c:11:
         68:dc:8c:10:da:37:86:d7:d6:a3:bc:54:d4:0e:be:45:26:bc:
         b1:95:55:d9:13:1f:f0:51:76:f2:b9:b6:bf:11:f9:35:3d:46:
         de:7a:0f:5f:6e:15:39:17:de:3e:7d:14:32:1f:a3:f6:4a:26:
         8a:d8:8f:14:74:1a:32:c0:47:3e:c0:87:41:00:07:fe:bf:d3:
         93:1e:e3:f5:fd:25:f1:2c:7c:af:33:67:27:40:6d:d7:bc:13:
         92:5d:9e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:57 2026 by rpki-client