This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File:                     NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier:          BTOLnwhGf67ec+WVwNyzPO4drIDTPUyRCRgKwpSP4i4=
Subject key identifier:   23:6E:13:CB:B2:67:6E:D1:85:4B:4A:95:3A:24:7E:FD:31:97:77:DA
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer:       /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial:       019BF2E231A1FD70C37FB1B4636F0EF16C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number:          1551
Signing time:             Sun 25 Jan 2026 02:01:08 +0000
Manifest this update:     Sun 25 Jan 2026 02:01:08 +0000
Manifest next update:     Mon 26 Jan 2026 02:01:08 +0000
Files and hashes:         1: 5FGHLdK72qHzzMVR761PYkr0_B8.roa (hash: UFVl1rQ+AMtmM2jj8l8YxQbgnT/lIb1Y+3O5KmViWAw=)
                          2: AaFb4BxfuUv5NeajfZzyZ_pKzC8.roa (hash: nTI1O9abgRlXav6e6wF4qbfd1OvGtpWjUhjV79Bt2Cg=)
                          3: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: 46DX/62OZK4SJAypgrpfJ3jL8FsnRt1ryuRb04bFE6M=)
                          4: wTpGtpvYbgK_vun8v_p94uvYUWw.roa (hash: MlwFMoA+ixOAYhXtfytpmcxvQgdxjqKkv8yoqTSG6+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e2:31:a1:fd:70:c3:7f:b1:b4:63:6f:0e:f1:6c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
        Validity
            Not Before: Jan 25 02:01:08 2026 GMT
            Not After : Jan 26 02:01:08 2026 GMT
        Subject: CN=236e13cbb2676ed1854b4a953a247efd319777da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:c4:3e:e5:f3:b3:84:29:75:91:2f:a2:61:
                    6f:ff:20:aa:da:ff:78:1a:01:f7:1c:cf:1a:4b:a4:
                    e7:a0:5b:55:2a:cd:f2:4f:e8:7a:a4:e8:54:3d:fe:
                    15:df:b3:82:17:19:f3:6a:48:7f:5c:99:b2:2b:d4:
                    f4:4a:78:91:05:51:72:c3:3b:cc:d9:65:96:2d:76:
                    55:ab:9d:10:d2:a0:3a:42:4f:2f:62:53:6f:db:2e:
                    cc:a4:62:50:62:0f:99:4b:ba:b6:7f:53:3b:93:4c:
                    2b:9e:79:57:c1:72:9c:1f:83:9f:dd:52:dc:a0:bc:
                    2d:23:8e:ff:6c:28:b6:4d:72:0c:9a:7b:f5:99:80:
                    c5:7d:d6:34:43:b7:40:d4:6e:ca:dd:69:b7:d6:75:
                    31:20:f0:33:69:0f:4b:ad:81:a2:99:84:28:78:f7:
                    07:c8:cb:58:ad:25:41:f5:4c:03:e0:51:57:0e:df:
                    6f:5c:96:f8:05:c6:88:d3:37:79:1a:ff:5b:17:ed:
                    71:2c:ae:cc:af:68:8c:95:33:11:b0:5e:76:66:04:
                    02:30:37:4c:5e:72:ec:cb:90:80:ec:79:39:63:ba:
                    19:8b:bd:7f:7a:0b:fa:91:a9:9b:f7:37:49:8c:a6:
                    33:c0:f8:85:58:0f:14:74:e4:bf:62:04:65:49:37:
                    25:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6E:13:CB:B2:67:6E:D1:85:4B:4A:95:3A:24:7E:FD:31:97:77:DA
            X509v3 Authority Key Identifier:
                keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4c:0d:e3:e7:04:3c:1c:28:fe:b5:ca:32:df:7f:09:9e:98:
         26:7b:ff:30:74:26:97:77:ea:65:99:a8:16:2b:80:02:31:37:
         af:c7:70:21:26:ae:b1:be:04:e4:aa:4d:d1:e0:b3:49:45:74:
         ba:ac:e0:c9:5d:8a:d3:97:ec:28:36:f1:26:09:3e:70:27:30:
         09:ca:50:0b:3d:d1:83:a9:5d:3a:0e:87:76:f0:48:01:b3:0f:
         da:50:cf:d3:26:ee:fd:8e:c4:2a:41:79:db:5c:d0:11:e5:b7:
         4b:1b:5a:d4:ef:3c:09:3f:2c:61:26:f9:f5:e9:6e:32:f2:49:
         5c:a7:dd:f8:9d:32:2a:5a:44:b2:4f:1c:4e:f8:69:54:ed:0c:
         78:b5:82:e6:89:9d:65:df:e0:dd:6d:53:11:11:18:44:c9:46:
         06:45:46:37:61:87:b4:43:53:e1:da:28:b0:e7:b1:57:7e:cd:
         74:65:6a:1c:85:25:bc:2d:1e:a3:f0:2c:e7:da:78:0a:b7:d7:
         41:fb:c8:ab:39:75:61:d2:ba:28:54:4c:fa:85:04:f8:a0:ee:
         41:b9:f8:45:ba:f7:80:8e:97:4e:3d:4e:d6:9c:34:0c:b2:98:
         87:7f:c7:92:2b:27:01:f3:ef:34:c1:1e:21:12:05:f9:2a:bb:
         c3:36:77:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:13:39 2026 by rpki-client