This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File:                     nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier:          6ahtAmYMQA+MSKyN3y/VlrcNvcZNL4JRdKeII0eL3Ok=
Subject key identifier:   D1:12:CB:CF:36:8F:3C:EE:6E:1E:A2:83:46:56:5A:1F:A8:2C:7F:A6
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer:       /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial:       019BF8ADA6BD01EFE647CDB9278DCBE1B94B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number:          030F
Signing time:             Mon 26 Jan 2026 05:01:28 +0000
Manifest this update:     Mon 26 Jan 2026 05:01:28 +0000
Manifest next update:     Tue 27 Jan 2026 05:01:28 +0000
Files and hashes:         1: aEsAz-RDqEznuIbxt7y2qnbw6Wg.roa (hash: MGY1l5IuLzWSoi1tizbmZg/Thwy4jCozOM2pGrkUxNc=)
                          2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: DlN8Y2OX8gI3CZcYbUAG1LlB+Drq5mk4+nkoPhmD3gQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:a6:bd:01:ef:e6:47:cd:b9:27:8d:cb:e1:b9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
        Validity
            Not Before: Jan 26 05:01:28 2026 GMT
            Not After : Jan 27 05:01:28 2026 GMT
        Subject: CN=d112cbcf368f3cee6e1ea28346565a1fa82c7fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:a9:64:38:4f:56:bc:94:37:f8:13:91:19:
                    76:ff:3c:a1:04:77:aa:e5:72:bf:f9:6e:6f:20:0e:
                    ee:66:2f:ef:c9:46:2f:a0:7f:e0:e5:ca:17:20:27:
                    a2:a6:7f:01:4e:27:df:ce:75:b4:27:96:5d:e3:6a:
                    cc:f4:0d:10:da:34:79:b8:ae:57:e0:d4:47:10:96:
                    3a:c1:91:0e:17:28:ae:ef:dc:c5:41:36:28:c1:b9:
                    0e:3e:84:9c:ea:cf:95:89:70:cf:db:99:ab:ab:6a:
                    83:40:4f:a1:c7:3f:03:b4:7e:2f:fb:93:f2:76:e8:
                    f3:4e:f7:32:24:a3:dd:c0:de:c3:9b:d8:27:f2:d2:
                    7b:0f:de:7f:0c:33:c1:aa:56:eb:1f:df:7a:c4:93:
                    fe:b0:59:b5:60:9c:64:1b:8a:7e:0c:da:a2:7e:6f:
                    ca:d0:f5:ac:23:39:4d:c0:07:a0:85:21:45:ce:d4:
                    f8:2a:1d:1a:e5:72:ce:6f:9c:53:86:d9:0e:ea:6b:
                    29:1e:9b:6b:2a:8b:d8:7e:08:e7:da:36:ea:d6:f8:
                    c1:74:e7:df:96:74:9d:0a:1e:9e:fd:01:07:6a:92:
                    bf:d3:97:08:c3:40:0d:b0:1e:14:e4:47:0e:c1:3f:
                    c9:02:2c:55:3f:0e:44:30:84:9f:cc:44:2a:35:fe:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:12:CB:CF:36:8F:3C:EE:6E:1E:A2:83:46:56:5A:1F:A8:2C:7F:A6
            X509v3 Authority Key Identifier:
                keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0c:10:3a:b8:f7:c3:91:a1:13:0c:28:70:8e:93:45:d4:a0:
         cb:0a:1f:a8:f5:89:4d:c6:37:76:ef:9d:18:18:d3:ea:9e:71:
         99:1d:e0:21:5e:28:da:fc:23:c7:d8:2a:4e:91:c9:f6:4a:dc:
         b8:3a:d8:28:ac:99:cc:4c:f0:0b:c7:83:1b:8a:36:cd:61:c7:
         6a:9c:cb:10:c6:ba:e5:62:26:a9:2c:0d:f7:ed:b7:5c:72:d4:
         d9:a1:8a:40:10:7f:1c:d5:0b:8e:1d:c5:93:01:8d:2a:26:f4:
         f1:ca:fb:ec:ba:35:b7:02:68:6e:a7:44:63:85:0e:0f:1f:b9:
         ce:2c:32:b7:1d:ee:7c:d4:67:76:c7:5a:37:4e:b1:85:c9:af:
         21:9f:7d:c3:b3:63:d9:9c:c1:a0:99:0b:66:75:b1:ac:eb:2e:
         d9:ed:40:25:3c:6b:e1:a7:77:5f:a7:23:60:f4:a8:82:ed:92:
         2c:b8:c2:76:c5:c5:66:23:5f:df:b5:5a:aa:4f:15:c0:de:c0:
         34:57:3d:8a:28:86:47:22:e0:9b:ea:68:2f:b1:c1:8a:05:5e:
         7d:73:f6:a2:a6:2a:be:5a:ef:f4:d3:91:2b:e2:37:2f:f2:6c:
         7e:03:c1:a3:5d:bd:71:cf:83:d1:16:1e:08:99:40:6a:69:4d:
         69:95:bb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:46 2026 by rpki-client