This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File:                     nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier:          8R4sJnM2eiuQzWje+gMDOzMHfNw62yyNfFBJSag1Rh0=
Subject key identifier:   EA:3C:41:74:C0:9E:20:56:21:75:42:57:D8:5F:34:4C:08:E8:8A:52
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer:       /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial:       019BF875EDCE10D148EB8D64F76C53651F05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number:          10AA
Signing time:             Mon 26 Jan 2026 04:00:36 +0000
Manifest this update:     Mon 26 Jan 2026 04:00:36 +0000
Manifest next update:     Tue 27 Jan 2026 04:00:36 +0000
Files and hashes:         1: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: eX4R+l3Bu9bPzrSDfHBcg9ybxUdr5C5pzveFQMhVS94=)
                          2: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (hash: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=)
                          3: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (hash: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:75:ed:ce:10:d1:48:eb:8d:64:f7:6c:53:65:1f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
        Validity
            Not Before: Jan 26 04:00:36 2026 GMT
            Not After : Jan 27 04:00:36 2026 GMT
        Subject: CN=ea3c4174c09e205621754257d85f344c08e88a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:bd:c0:0f:2a:ae:79:9d:e0:df:21:35:77:
                    71:40:a5:d5:22:53:44:80:52:0c:79:60:75:4d:3a:
                    1d:48:52:e2:ad:39:ad:b9:7c:41:e5:0c:10:55:af:
                    ae:e3:95:57:66:6e:bf:5d:98:a5:15:fd:07:49:18:
                    81:ee:0d:8e:15:28:c1:2d:63:c5:9f:97:2a:c9:fe:
                    0d:91:a0:1c:2f:8a:98:d4:37:f7:01:96:40:37:a7:
                    e0:e1:56:eb:66:27:ec:e7:39:c7:f2:47:c3:61:0c:
                    9d:5a:ca:e9:ef:d7:31:28:07:ad:de:3a:74:31:3a:
                    bf:57:c2:19:81:de:71:f1:6e:73:e5:37:04:df:66:
                    e1:ca:79:4d:72:3f:db:5c:cf:39:42:d8:d7:b3:a6:
                    0b:98:45:ce:6c:6c:18:71:ee:cf:dd:4d:b9:ba:79:
                    fd:c3:00:6f:32:14:f9:7e:33:bd:cc:57:9f:71:8e:
                    28:8f:e3:70:0f:67:b5:98:ec:f1:ee:e8:38:c1:f4:
                    b6:4a:64:3a:18:5f:4d:9b:35:7c:a7:9f:09:86:da:
                    ad:31:cf:17:a1:06:19:bc:41:63:b2:58:ad:1e:02:
                    aa:76:c1:80:61:7a:91:89:d0:c3:55:0e:21:a5:68:
                    75:07:83:ff:28:8a:bb:c0:c8:35:59:4f:b3:7d:7f:
                    55:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3C:41:74:C0:9E:20:56:21:75:42:57:D8:5F:34:4C:08:E8:8A:52
            X509v3 Authority Key Identifier:
                keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:5a:2c:24:da:61:19:8f:82:53:d3:7d:60:2e:23:62:6b:a8:
         f3:90:08:97:24:f9:e7:f3:91:fb:65:5d:df:5d:f3:f2:28:c3:
         ad:a7:53:9f:7d:cc:10:c8:11:ce:1b:a7:20:a2:3a:0d:db:e9:
         12:af:1a:88:f2:15:f5:23:f0:5e:6a:fe:78:cc:cf:9a:9e:12:
         65:5a:e1:11:00:1e:e3:08:14:18:a6:54:ea:47:24:56:4a:fb:
         d2:18:00:e7:5c:03:63:46:f7:0d:f3:91:d5:73:b7:b9:1c:c1:
         90:82:68:a3:d3:2c:a5:f4:bb:f8:0b:ac:31:ab:66:ad:47:44:
         89:73:ba:50:59:8f:e1:17:53:4e:05:16:d8:a8:5a:8a:91:08:
         a7:5d:8c:d8:a5:19:c7:54:55:e6:29:1d:82:9c:5b:b5:78:d0:
         50:01:38:77:d1:70:22:92:dd:bb:74:81:f6:d4:bb:d1:d8:2c:
         21:10:c6:46:1d:23:9d:f4:93:c9:ca:24:6a:65:be:76:6d:ed:
         f9:06:c8:f5:79:ad:a6:0e:30:da:06:ae:54:70:26:9b:96:b7:
         bc:f4:d5:45:50:0d:23:da:e9:b7:75:d9:ea:2f:78:25:4a:6f:
         71:46:e5:51:45:84:9c:fb:b5:a8:3b:54:c8:e9:bc:2e:10:3d:
         0b:ba:f3:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4de3OENFI641k92xTZR8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGQ4NmFmYjU5ZjFkOWRkMTZjMTEyNTAwOWI5OTgzODJl
MzZlZDMwHhcNMjYwMTI2MDQwMDM2WhcNMjYwMTI3MDQwMDM2WjAzMTEwLwYDVQQD
EyhlYTNjNDE3NGMwOWUyMDU2MjE3NTQyNTdkODVmMzQ0YzA4ZTg4YTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVG9wA8qrnmd4N8hNXdxQKXVIlNE
gFIMeWB1TTodSFLirTmtuXxB5QwQVa+u45VXZm6/XZilFf0HSRiB7g2OFSjBLWPF
n5cqyf4NkaAcL4qY1Df3AZZAN6fg4VbrZifs5znH8kfDYQydWsrp79cxKAet3jp0
MTq/V8IZgd5x8W5z5TcE32bhynlNcj/bXM85QtjXs6YLmEXObGwYce7P3U25unn9
wwBvMhT5fjO9zFefcY4oj+NwD2e1mOzx7ug4wfS2SmQ6GF9NmzV8p58JhtqtMc8X
oQYZvEFjslitHgKqdsGAYXqRidDDVQ4hpWh1B4P/KIq7wMg1WU+zfX9VcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOo8QXTAniBWIXVCV9hfNEwI6IpSMB8GA1UdIwQY
MBaAFJxNhq+1nx2d0WwRJQCbmYOC427TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgt
ZjRmMDU2MWI3YTU3LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgtZjRmMDU2MWI3YTU3
LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1osJNph
GY+CU9N9YC4jYmuo85AIlyT55/OR+2Vd313z8ijDradTn33MEMgRzhunIKI6Ddvp
Eq8aiPIV9SPwXmr+eMzPmp4SZVrhEQAe4wgUGKZU6kckVkr70hgA51wDY0b3DfOR
1XO3uRzBkIJoo9MspfS7+AusMatmrUdEiXO6UFmP4RdTTgUW2KhaipEIp12M2KUZ
x1RV5ikdgpxbtXjQUAE4d9FwIpLdu3SB9tS70dgsIRDGRh0jnfSTycokamW+dm3t
+QbI9Xmtpg4w2gauVHAmm5a3vPTVRVANI9rpt3XZ6i94JUpvcUblUUWEnPu1qDtU
yOm8LhA9C7rz2w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:24:11 2026 by rpki-client