This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
File:                     Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json)
Hash identifier:          /RvPT89ihWijf7LiyaSrk9jUThNwnfwKc+UFEOgseCI=
Subject key identifier:   19:FA:C7:AA:9E:0C:B8:3A:72:E9:A5:F1:8E:8E:32:8F:68:D9:EF:79
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Certificate issuer:       /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial:       019BF3BDF249E269D61EFA95039483A7E514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
Manifest number:          143A
Signing time:             Sun 25 Jan 2026 06:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:10 +0000
Files and hashes:         1: 1Tp5jbagpbP3bBosGJzl-vHNwTQ.roa (hash: i9HeQV78oqCuZb5raO//KiH1IAj0HTvvTkgPI31BqfQ=)
                          2: KTJFZr1xtpQ8-frT_jFT89SQ72c.roa (hash: WbWct24W8oqzng3bdQSTUDncPy4VwnTdLlu7fw9RLZ0=)
                          3: LivM5lzLDSqnTiCIS8JQUOg-kPY.roa (hash: vHdlRvY+/RNvoYO8n7qGZrjxG/8e8ox6/YqQnek6wG4=)
                          4: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: RmAI9KoXNzznXjkTlnDk82iuyT4ZgT4zblI8mdv5+Og=)
                          5: O5osv3DjuzH13zfgVnDH1QiAYBs.roa (hash: g4/oo0ufVfbT9VkbjHiy8bTeHsZgO5XCr3NOXd63NBY=)
                          6: Sq2F_2MHygjFpi07suhBUa1R_68.roa (hash: ZG5062dDlxQJwdav6+4ilTyJp7ZFq4AHU9MeUnd4pII=)
                          7: TTCwApiEQAeKWTc5BiOUMPL6Ik0.roa (hash: fI6BVqo8RniHbiOVWZbTUBpJZ0C+Wx1WVAjNDB9Eti8=)
                          8: VHn5fbgK9TT163CBWJTv5V844m4.roa (hash: TPUdDfw5uVSRkDAl0XMbSNV4hlR+3H658TMXtO+hKqQ=)
                          9: c4YRVrrYx--dsVjGMZzmOagHjlw.roa (hash: hrL5enlq2a1V/HselJlnzGeZ8x6quh8vP1eKrV5uojA=)
                          10: eUOZgV76QaRXLmPL7aDDL3sUxZk.roa (hash: kGucB56GSQLPJJxVequzzGvYl0NeOQ53k+5PEv+Z9RM=)
                          11: fYaeUMWEkAvz96xxBdazFB21sEA.roa (hash: L6NiwK6X5YK9VisN8/EtYmbWZywh9IQ9ZUBfOb02fSY=)
                          12: fhyLY9yJmwIhlgdl0r_eC4s6raM.roa (hash: oTh1Q6WnZkhhrxgjEjjzthbMNdzSpywy2PEB3YpQ5UM=)
                          13: igwMdaPVeZq3u3a2W5jJS_b0L5M.roa (hash: C9ttpwY5RPzDqWX4XDQVwla5pbbO0G/VsUYqR1jcOSI=)
                          14: p6jyfQcKh_7urtZCXFFZHxQLNAU.roa (hash: 17hXAcCpVFiA3XxPVxSAF84J11pXBVVEl5UnV5vUWt0=)
                          15: piiqlTI956md5esUYEMv2zHnNtM.roa (hash: Nk456LdgPEgcZyErXy4N8gG+NYFmzf8zfElBf1LUQWo=)
                          16: rK5QYt727S_N217kOz5a7i6vJ3I.roa (hash: oTY6skhXO9LqbfVvKq/PNI/5wPYntdfhba8E6tbWr80=)
                          17: rVHx6Pke-1-J_coPbRofT3X1WBE.roa (hash: cs7tRyRz+7+LNYFhgQ605831LjS0egooa3rWx2g/DuI=)
                          18: v-byi7__tAGSfpc0KLzrbUQNmHM.roa (hash: LsA0lCodRUKqd0B/Z87PBzTIKKAf5j4kKwJmm6jdV3o=)
                          19: yHA0HvBqPYWnWTRkB4ImgxFstEw.roa (hash: xadPdgKWj0tNuPjFa+N1kM0Efwyv535SVC0Xmv8Ej3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:f2:49:e2:69:d6:1e:fa:95:03:94:83:a7:e5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
        Validity
            Not Before: Jan 25 06:01:10 2026 GMT
            Not After : Jan 26 06:01:10 2026 GMT
        Subject: CN=19fac7aa9e0cb83a72e9a5f18e8e328f68d9ef79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a0:9f:a9:f3:16:6b:cf:72:5e:67:28:59:11:
                    f6:33:97:82:20:9c:0b:be:30:ee:66:69:92:64:39:
                    6b:80:28:22:bf:50:11:dd:dd:e3:53:62:0a:70:cd:
                    5e:7a:08:15:d7:71:17:82:64:9c:fb:eb:8b:9e:50:
                    5e:69:6f:b4:4e:d1:99:1e:0c:b3:92:36:aa:62:4c:
                    67:cc:f8:f1:18:2e:b6:1f:89:78:3d:c4:2b:af:ce:
                    aa:4d:e6:85:5b:f3:da:60:f5:17:44:c0:6c:05:c7:
                    c9:47:c6:38:69:b2:da:61:fa:56:fe:ea:ac:d4:20:
                    fb:3b:de:e7:e4:f3:99:a0:96:6e:68:3a:49:a0:82:
                    5b:20:e9:4b:71:21:b0:9f:c2:61:08:cc:d0:13:cf:
                    d1:29:68:8f:88:58:5a:a9:17:f3:49:1a:e5:20:b3:
                    f0:74:62:01:c2:0f:26:0b:c6:da:66:5f:c1:22:1c:
                    09:69:84:0d:74:b4:be:25:38:11:b8:94:38:ba:83:
                    e8:17:8a:ad:01:f3:3f:56:71:8a:ec:45:4b:cb:52:
                    0e:af:76:9c:ea:9d:61:98:a3:35:ff:ee:04:85:1a:
                    9b:16:e4:ba:bb:ee:28:a6:e5:e2:34:43:76:3c:5b:
                    23:55:2e:83:fd:74:a3:e7:a1:21:eb:7b:2c:ea:f0:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FA:C7:AA:9E:0C:B8:3A:72:E9:A5:F1:8E:8E:32:8F:68:D9:EF:79
            X509v3 Authority Key Identifier:
                keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f8:47:b1:da:eb:9d:8a:e2:33:0f:ec:e7:b4:a5:55:97:29:
         b5:a4:7e:88:7c:55:e7:1d:a0:72:0a:a0:83:7d:a8:b3:13:b8:
         37:e0:d9:3a:ce:ca:7f:15:38:94:55:67:5f:2c:88:c5:a8:a7:
         3a:92:71:70:9c:93:6f:7a:52:c2:36:8a:06:71:59:c6:48:b5:
         d7:39:71:07:40:f5:a8:ba:5f:0f:12:f8:5e:93:f9:9a:05:48:
         e4:5d:28:7a:38:ae:74:7b:42:b5:1e:50:12:c8:e5:98:46:d5:
         e7:14:7a:cc:e2:8e:c9:45:46:0f:d9:d1:83:75:62:80:1b:48:
         37:7e:b1:56:71:cb:db:d5:dc:33:eb:b8:99:39:7e:da:99:e0:
         3d:45:5f:44:00:ad:e4:15:e0:17:b5:3f:f7:f7:e2:3f:1c:40:
         87:3e:5f:8d:75:0f:cc:81:6b:ce:9a:8c:cd:29:f8:ee:ce:c4:
         dc:76:eb:6a:df:0e:2c:7c:94:d7:44:30:25:41:96:28:6a:ec:
         7d:82:31:0c:3f:b8:9c:c1:62:22:44:57:ba:f9:4e:58:48:93:
         77:7d:f3:69:1f:6e:10:42:53:22:0b:41:d5:ff:b0:d5:55:36:
         8e:5c:a8:56:df:79:db:90:96:46:0a:57:4a:4e:6e:85:54:3b:
         f3:4c:88:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:23:29 2026 by rpki-client