This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File:                     NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier:          LQ7mTS0n8qUqz55jRS0zQCRZ8VdLhJpDgEHZi4ncTOY=
Subject key identifier:   16:33:D4:30:EC:C4:6A:E9:14:94:ED:99:9C:45:8F:94:2F:5B:1F:B8
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer:       /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial:       019BF53E32BF7646F6F36FB6F115B1996015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 13:00:52 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:52 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:52 +0000
Files and hashes:         1: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: YfKvbCRLTLCHElK2vBpX3SwrNU+9ti7EgLcK6qreuqk=)
                          2: QfDaTqEZy0AZpjIs6KlDWZbx2F4.roa (hash: DlzQ3oNq+bXhL7oq0Jjx/ov7Jd52H5qtMQKXHUKsDOk=)
                          3: e8AkVECUuKOgcmMXLVvwqxq-ICU.roa (hash: 87UxDTnvUvYKuy7X0JuYSpmhlBrNlCBps8wPFZXpg0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:32:bf:76:46:f6:f3:6f:b6:f1:15:b1:99:60:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
        Validity
            Not Before: Jan 25 13:00:52 2026 GMT
            Not After : Jan 26 13:00:52 2026 GMT
        Subject: CN=1633d430ecc46ae91494ed999c458f942f5b1fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:94:6a:dc:a9:84:94:ba:a3:26:ac:33:fa:60:
                    b4:4f:f9:03:b2:4a:b4:b1:ef:4f:be:09:fd:d9:63:
                    57:de:84:57:52:db:d1:d8:ec:fe:85:7b:09:6f:83:
                    76:ce:9e:9f:a8:e4:4e:13:85:4a:58:f5:d3:d1:66:
                    b8:4d:36:1f:ed:e0:dc:4f:42:de:35:fb:15:26:d7:
                    f1:5a:3a:4e:44:42:dd:da:1e:8d:7f:4c:a5:46:0d:
                    a6:1f:aa:d6:49:52:32:21:ff:c4:f8:ea:dc:35:fa:
                    c5:aa:70:6c:c4:8f:7c:2c:94:43:8d:3c:34:3e:4b:
                    3a:51:b0:7e:e2:ee:ba:52:f0:c4:39:3b:3d:95:64:
                    6a:c8:62:88:86:17:42:2c:e4:74:0f:c4:e5:9a:f7:
                    84:2f:90:0a:66:9e:d8:93:b2:5f:70:21:43:1a:c4:
                    b8:10:1a:fd:76:77:0b:e8:c1:30:f9:17:fc:44:77:
                    0e:8e:a7:e9:84:3d:0b:5f:74:a8:0b:5d:28:8b:15:
                    42:7c:5a:e8:5d:6d:a6:d6:01:d7:cc:f9:87:ce:9b:
                    e7:3d:7d:91:62:a5:a0:f8:a8:6e:cd:a6:46:62:e5:
                    16:b5:37:5e:6b:51:a0:0f:1e:e1:58:1a:59:5b:6f:
                    4f:af:ce:0f:c5:e7:84:5b:42:59:81:9a:b8:61:70:
                    c0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:33:D4:30:EC:C4:6A:E9:14:94:ED:99:9C:45:8F:94:2F:5B:1F:B8
            X509v3 Authority Key Identifier:
                keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8e:ca:77:8c:37:d9:05:31:c2:20:bd:5c:84:e5:79:e2:66:
         b2:d6:d4:0b:b4:0d:9a:99:c6:bf:48:ad:13:61:6f:c8:1c:e2:
         04:1e:32:f1:3b:17:c7:b3:b6:fb:81:5b:59:cd:ab:f2:c8:f4:
         db:45:f0:7d:b3:0f:e0:ee:7c:c6:c0:55:81:57:c1:42:b7:14:
         e2:33:4b:c7:f8:d6:26:ed:32:56:48:1a:c0:1d:30:f4:b4:a9:
         a7:8d:3f:d4:5b:be:97:88:f1:57:14:c1:98:56:06:2d:76:b5:
         01:1a:1b:22:2d:59:64:d9:e6:bd:6a:1c:62:92:20:ad:d7:c3:
         c2:33:a9:2f:a2:69:14:5f:3d:f6:1b:35:39:13:81:b9:cf:59:
         a2:f8:c3:f2:8b:84:cc:96:ea:df:58:0b:13:b3:3c:79:3b:50:
         6d:05:42:3a:c3:69:90:46:f3:d5:8a:03:1b:e9:3e:ac:cf:db:
         07:77:4e:fd:a8:80:6f:87:7f:7c:12:77:ab:f2:4e:5c:b9:48:
         eb:aa:ff:e1:45:98:d6:c5:a8:5c:bc:ab:a8:ad:14:5a:38:4a:
         ab:ca:23:bd:4e:11:e4:11:b4:30:53:66:03:97:f6:18:9f:a3:
         93:38:f1:4f:b7:63:b7:67:81:85:fe:5d:30:22:24:e2:7e:57:
         d0:b4:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:41 2026 by rpki-client