This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          kjrKs24NIu654ojZHHwjPNABsL0QxZ42yYDLPX9DAsI=
Subject key identifier:   2D:EE:7A:84:0F:05:2A:0B:02:46:7E:B0:6E:47:5A:CD:A1:BB:71:C0
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019BF3F4ACFF9476993731D573499C085535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          14E5
Signing time:             Sun 25 Jan 2026 07:00:57 +0000
Manifest this update:     Sun 25 Jan 2026 07:00:57 +0000
Manifest next update:     Mon 26 Jan 2026 07:00:57 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          4: 5lQ9rixfmqRXxii30JKkmR03sr8.roa (hash: iF1NyTDi0aWK3rGC4FTsYT+Tf9o3Dfjcwz99TIaRhHY=)
                          5: 6zhEBi2rGIO6yvp94BAc87oo8NE.roa (hash: buQwiuRKOBq+4oEs1t78Z05UhT+uvb28X3BhlGXBURY=)
                          6: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          7: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          8: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
                          9: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          10: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          11: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          12: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          13: Mb53TN6yKD50A2de1Ozhdge4mrQ.roa (hash: 2V1e3M/tFnuzlchzZk/LCxvBGVvryU2uaQdSfsUPEKA=)
                          14: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: CJVsUrvCfl6VJf2wDgzV/mxYTbs7fWH/2FIsEKQn2go=)
                          15: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          16: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          17: VeCa-Ckkq__lR9QH3Ze2zeXxtZY.roa (hash: z3M9hw/6DVnPJ1fUBiq/zT/J4PJzGrigNcCqmL3N2ec=)
                          18: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          19: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          20: ZG3wywvA41qfbz9i4FHPo7ZoiQY.roa (hash: D9m8ewpfk0R2qV4OYq5Yah9WUER9Xli2U4ySGQlIqKI=)
                          21: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          22: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          23: laoq5W7HYkYx_OxTQ0mAaU-nLuU.roa (hash: DnEkXC+hsSS//DzJYtB8xpxphGulUc/FEkbBxzWWEJs=)
                          24: niUr6FHPmgY6CtuAz4gWdWka0MA.roa (hash: IuoDMTxSe/qrJgdwIn4nlwn1wmvo4BWmMWaqX2zRdbA=)
                          25: q5nWFGJRWtF973Oh4L4NdFyWU7w.roa (hash: cPGcwwvhLGFvvVWvZDvkrAQGcbfROxYZMG3UWVyN8E0=)
                          26: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          27: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
                          28: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          29: yahooYiiSKT8dlBscEstH-nI9OI.roa (hash: RcEtlFbNKbbd1b6Xpa9kAha5hDxT8dHcRWCjbQbLdrA=)
                          30: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f4:ac:ff:94:76:99:37:31:d5:73:49:9c:08:55:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Jan 25 07:00:57 2026 GMT
            Not After : Jan 26 07:00:57 2026 GMT
        Subject: CN=2dee7a840f052a0b02467eb06e475acda1bb71c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:02:cb:3c:54:ad:05:15:58:40:3c:02:c2:
                    55:7d:ae:4d:9e:6c:d1:08:ef:a3:51:8e:09:69:85:
                    cd:2c:dc:62:2c:c1:76:c0:0d:c4:d3:9f:86:62:14:
                    6f:0f:79:d6:92:b8:18:f9:62:e3:87:bd:31:ae:68:
                    4e:c4:b5:66:cc:be:72:65:27:27:a4:83:d7:45:a1:
                    76:77:89:a3:f3:5f:e7:41:76:7d:c3:19:f7:40:8f:
                    1f:eb:c0:09:27:70:81:01:05:dc:49:fb:9b:77:01:
                    e4:1a:b7:96:ed:5b:54:48:22:b9:a7:99:5b:c7:64:
                    c1:8e:e5:6a:1d:f1:55:24:76:e8:85:a1:78:a3:48:
                    5f:29:ac:7b:34:70:12:6b:b0:46:a1:44:36:7f:a1:
                    a5:a3:94:67:ef:72:8b:8c:23:8e:ae:ca:ec:50:b3:
                    d6:40:d7:cc:00:ed:76:fb:0d:17:81:af:88:4e:38:
                    a1:c0:e0:64:f2:c9:fa:b0:b3:12:3d:4f:80:a4:66:
                    77:44:e9:40:4c:c3:70:d8:95:90:4d:70:42:9d:8d:
                    78:fe:b2:31:2f:b6:5c:5b:14:8e:a4:15:b9:05:9d:
                    23:25:9a:f3:e6:57:94:85:17:98:5e:a1:1e:71:c0:
                    47:75:48:d9:71:ff:a1:37:23:30:ad:d9:ec:f4:2b:
                    4f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EE:7A:84:0F:05:2A:0B:02:46:7E:B0:6E:47:5A:CD:A1:BB:71:C0
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:76:29:9d:ed:2b:91:ca:38:02:4a:7a:9e:3a:16:d5:3b:
         2c:29:63:bb:7a:f4:ba:20:f3:4b:83:38:42:a4:a7:ad:02:16:
         ce:b3:4b:9a:cf:78:70:92:60:e7:a2:cb:81:6f:fc:72:81:db:
         5d:af:4e:93:7b:b3:8c:e6:a7:c8:df:58:aa:34:78:ae:53:bc:
         b1:27:79:2d:f8:90:5a:fd:20:ce:41:92:a7:d9:3e:14:50:6e:
         bc:f0:31:be:47:c9:63:50:b7:a9:a6:d6:d6:f7:e0:34:e9:3a:
         05:63:38:a3:3f:6b:29:d7:26:b1:b4:fe:69:91:97:d7:53:b0:
         01:1c:68:58:36:5a:3d:ef:ef:8d:5a:52:c5:f8:22:b3:72:e5:
         69:59:f1:5c:dc:1d:d0:dd:19:f6:12:90:fd:93:1b:5b:1f:a2:
         5a:64:73:98:92:8b:7a:ba:52:ee:3d:26:45:1f:4b:4e:ee:60:
         af:9a:55:9b:43:7f:1a:3f:c3:cf:07:8a:c9:90:b6:4b:39:3b:
         7f:46:39:6f:e0:44:43:df:33:da:cb:30:75:8a:d4:34:56:84:
         d2:a5:64:2a:fe:57:64:b1:15:46:cc:a2:df:7f:56:06:c2:c4:
         db:2b:68:23:68:42:f9:58:ae:f0:b8:b9:b3:8c:d3:eb:ad:ab:
         68:bb:6c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:51 2026 by rpki-client