This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File:                     Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier:          u1xrCthOlvb0HG0CFHExsnQP+g1LcoDwQ1iSqpcodi4=
Subject key identifier:   98:3C:22:1B:33:4D:D9:DA:7E:16:15:4B:89:F1:D6:C3:59:82:98:BD
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer:       /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial:       019BF3BE3A12AD84E8B93EDF3E6EED34F396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number:          04FA
Signing time:             Sun 25 Jan 2026 06:01:28 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:28 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:28 +0000
Files and hashes:         1: 23D13zVh0lxnV6wqT9G8OQpIzbk.roa (hash: 9tKZpVV4QTGwDjEBmfC0cE/pR6rIK/y06jjpKw6H3j4=)
                          2: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: NcQtNQ1Ts6I02REgFG5o/CsjL285zOmhxVNG+q0QECs=)
                          3: Oq5-e3AMF4jP9HrvKm3gSfMs37U.roa (hash: CeqGb9Az/dSfLH7D9mfttr9Apk+Dk9lZZYK56kmAN+U=)
                          4: lcT96ZzrgNrjwAQX6YLJUQASpVs.roa (hash: +FyKaAXENUvPnj9qcKJs6oAPI3YhDnrLqCeTNqT1FEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:be:3a:12:ad:84:e8:b9:3e:df:3e:6e:ed:34:f3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
        Validity
            Not Before: Jan 25 06:01:28 2026 GMT
            Not After : Jan 26 06:01:28 2026 GMT
        Subject: CN=983c221b334dd9da7e16154b89f1d6c3598298bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:53:f4:32:83:81:0a:6a:a4:de:3c:13:ff:2d:
                    77:0e:1e:f0:5e:dc:4d:fc:0d:8e:42:92:82:08:49:
                    d4:93:0d:8f:80:18:b7:77:f1:58:34:1d:96:06:c5:
                    3f:f6:37:08:c8:4f:7b:e0:04:92:99:94:dc:39:8c:
                    f3:3a:ed:0d:74:06:c3:37:02:5d:32:ab:77:b5:09:
                    dd:8f:52:47:72:02:da:77:09:c0:25:07:84:57:94:
                    ab:7e:9a:b9:74:12:7e:c3:f1:44:ff:3c:22:cf:9d:
                    18:f5:6f:19:33:60:d7:4f:e5:f0:8f:19:94:ba:df:
                    1d:64:51:8e:4b:f1:5d:bd:1d:46:22:54:6b:55:b6:
                    1c:c8:9b:b3:a6:6c:d2:74:9f:a4:f4:4b:87:45:f4:
                    75:39:33:ed:01:22:e3:6c:c4:b9:51:9d:3d:90:fa:
                    1b:d8:d5:a0:3a:41:1e:ef:1b:71:b8:a7:ce:d2:2a:
                    1b:8c:b8:1c:d2:6c:ce:bb:5b:4e:11:10:d1:3d:5f:
                    b9:19:6f:5c:1a:53:4d:c1:40:7b:0c:8c:b6:25:6f:
                    14:f6:52:3a:9b:ef:56:1f:91:85:4e:d0:e6:3d:d8:
                    28:98:66:48:a3:9f:c9:bb:02:c6:02:65:7e:a5:8f:
                    f7:7c:2a:9a:40:07:2b:f4:7c:93:fc:64:4e:e2:a9:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3C:22:1B:33:4D:D9:DA:7E:16:15:4B:89:F1:D6:C3:59:82:98:BD
            X509v3 Authority Key Identifier:
                keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c5:cd:05:fe:90:c8:7c:d7:d3:eb:48:d3:72:38:9d:b3:24:
         5f:98:be:f9:9a:af:ec:62:a5:ed:6c:a8:8e:d2:d5:7f:22:33:
         9b:78:75:fc:18:da:91:a1:1d:88:0a:d1:86:a9:e7:b1:03:57:
         a4:5e:b5:09:fa:d0:db:25:00:cd:26:26:be:f5:83:39:73:8b:
         0d:3c:63:e7:25:15:3e:ba:33:41:fd:bf:9e:07:0e:fa:a0:3a:
         62:d7:dc:c1:1d:7b:c0:d7:c8:54:a0:ec:ae:44:2d:2f:b2:e8:
         f6:41:07:61:15:36:3f:af:45:62:65:08:44:93:03:7f:c9:dd:
         14:b8:46:06:f0:c7:5e:02:ce:ca:98:1f:ae:45:1f:a8:ec:dd:
         55:e7:d7:26:71:13:99:43:8f:f5:3f:98:c7:88:e7:a4:5f:cd:
         9b:27:83:47:fa:40:d9:f6:ed:08:c2:40:57:00:5f:74:4c:4b:
         f1:b0:d7:61:53:9b:68:f5:9b:d1:47:f2:94:c6:72:ad:5d:30:
         68:70:b8:ac:0e:6e:53:e1:64:bc:09:a6:de:e7:bb:92:3d:c8:
         a4:c9:0a:44:6f:e4:aa:35:ca:ab:74:f3:5b:6a:24:bc:5d:e6:
         19:35:72:7c:9f:80:a4:85:cb:9a:60:28:fe:ad:d5:09:2a:e1:
         11:0e:82:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:36 2026 by rpki-client