This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File:                     aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier:          aV01NscqCFyGSrcIS6Ps8KWxg0mPGeFt4dXMo7W3xI8=
Subject key identifier:   61:4B:43:0D:74:00:18:27:42:47:0E:8D:35:B4:86:54:F1:65:F2:FC
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer:       /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial:       019BF574CC6DD04942980F37B8FE19214332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number:          14E0
Signing time:             Sun 25 Jan 2026 14:00:30 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:30 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:30 +0000
Files and hashes:         1: 3YSDswVguWbvrvj4E3sCx_uL70g.roa (hash: ja7wL0FwxnohJuxFrehQHPScGACnDNS5Cog9I6ahHZE=)
                          2: 9NyFHYTj3seW0uDQ9d-qMgihTFQ.roa (hash: 2XDA2KE71Iz1cppVJlV/1O+Z0hd+0MetH5FlOTLgBBc=)
                          3: CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa (hash: cvOnYEAZf07u8Yg8vFOi6MSfTj+LKt401Iv8GxS5fdw=)
                          4: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: /rRAIhthv1A81/YgeSz4tpzSdzrWTzzBiTj3rRkOrik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:74:cc:6d:d0:49:42:98:0f:37:b8:fe:19:21:43:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
        Validity
            Not Before: Jan 25 14:00:30 2026 GMT
            Not After : Jan 26 14:00:30 2026 GMT
        Subject: CN=614b430d7400182742470e8d35b48654f165f2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:2c:e8:ef:82:1b:4c:26:f2:26:51:17:db:
                    37:88:ae:ca:8e:da:99:79:09:30:29:13:38:4d:69:
                    9f:76:a6:53:1e:3d:0d:0a:f8:19:24:9f:be:13:86:
                    14:ab:43:06:21:5a:a9:f4:e1:e8:1c:21:48:9d:06:
                    03:df:93:28:90:de:34:d4:f6:1b:d5:c8:82:b1:10:
                    61:a7:e0:cc:a0:d3:10:e8:1e:33:3f:36:c9:88:dd:
                    5f:07:72:36:84:e6:1c:c6:95:fc:c8:c3:74:64:1f:
                    46:32:7e:e4:c7:c9:d4:fc:24:70:d9:f2:d1:b9:c0:
                    ae:61:db:c4:9d:1c:aa:c4:d3:80:5c:36:72:de:ee:
                    77:41:2d:e6:d0:a9:fb:16:88:28:a2:32:e8:81:71:
                    b1:1f:06:93:9e:51:68:34:8f:f2:b4:fe:2f:4b:de:
                    38:8e:4f:c8:c3:7f:43:0f:2e:b5:e7:69:32:aa:ec:
                    94:db:60:13:34:54:25:2a:62:df:1a:6b:74:86:d8:
                    b8:37:31:61:ac:c2:6a:a3:8d:03:43:bc:a3:7f:10:
                    fd:e0:93:0d:1b:ac:3d:ad:5e:5a:05:1d:5d:22:5d:
                    81:39:5b:cb:4b:1d:97:1f:7a:d3:e4:e3:d1:51:ba:
                    04:bf:f2:eb:72:4a:7f:49:6b:19:1c:a0:06:e3:56:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4B:43:0D:74:00:18:27:42:47:0E:8D:35:B4:86:54:F1:65:F2:FC
            X509v3 Authority Key Identifier:
                keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:57:43:61:00:28:12:a9:c5:65:c6:2a:6b:00:cf:f5:db:b3:
         7f:3f:66:51:95:9a:bc:32:3f:15:86:da:23:71:01:22:ad:e2:
         ad:6d:6c:7b:e9:cd:8b:73:a8:25:7a:a6:e7:7b:af:a0:97:54:
         a5:84:d2:a2:03:66:47:e6:8e:cf:a4:21:76:53:7c:21:ed:bd:
         4b:62:64:91:17:ce:da:6d:60:1b:d5:7e:af:5b:1d:7f:53:db:
         79:9b:2b:9a:6b:21:4c:5d:6d:8a:a1:3a:9e:8f:f8:7a:23:7b:
         89:5d:03:81:93:0f:e3:74:16:6a:15:be:19:db:17:19:a5:28:
         5a:6d:42:fb:f3:aa:b9:c0:bf:7d:af:93:24:8c:83:e5:43:fd:
         11:f8:67:4b:f2:18:46:18:9c:4e:64:1c:d4:eb:3a:31:a4:a7:
         36:41:c3:dc:d2:f9:78:8c:2b:ec:fc:b1:7f:b7:aa:83:92:02:
         0e:a5:7c:f7:75:80:d0:af:36:45:9a:b9:cb:f1:1f:6c:e7:4e:
         a0:d3:bc:66:30:7b:e8:32:ac:c9:f4:9b:e2:a5:1d:43:e2:9c:
         5d:af:b5:8c:38:56:7f:b8:c2:8f:f8:ad:de:27:35:31:b2:8c:
         2c:d5:10:23:ac:15:65:5c:48:8f:09:dd:74:dc:cf:99:00:fe:
         45:47:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:09:50 2026 by rpki-client