This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File:                     N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier:          pFz/9R+Yy+iju5Z/veG2BKU/w0RJMmS1eP2T1yqIu0s=
Subject key identifier:   AE:22:14:30:33:75:F4:48:80:25:15:FA:51:60:1C:4B:20:22:09:F0
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer:       /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial:       019BF3F4D4DAD94748141F4E951FBD11B2F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number:          17F5
Signing time:             Sun 25 Jan 2026 07:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:07 +0000
Files and hashes:         1: Bn04BFcMPFN1TqHi3csM-ALPIfs.roa (hash: +INhzeZUw2CmtEj9Af/bdJ+8Ap6m7pDf8RJiS9DpoYM=)
                          2: DQfM8H6WtevT9OTpqjzrSvRshz4.roa (hash: XQFiObFKRxqaZwBbqwYCnX/4N71hlkX9gE2Ecl5B+eM=)
                          3: Ifvi8Rkz_RCT_kQAOoUbVtgRD7U.roa (hash: GmJT3KMSt6Tc17lIuj5c/Jso9piZJloJhb9qCB+XTkU=)
                          4: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: vv+u692Gzlvkg/Se/OGHfk3kJgeui8StMLhcSX+vdUs=)
                          5: PUKkt35cHiKGiJvSjqXEn6uVP7Y.roa (hash: Bmwa3jnfP0hJvyVvtY0byaw0ncITKSVJhGUCxBAyHJ0=)
                          6: eRkG__v-agv3NMIcUwrG_j0F1S4.roa (hash: qxtO1OQQFM2+lJPuzN9yMsque6yNP09ybveH8spKwIw=)
                          7: g6ci3WfJTG-Y86iSe60tqhYMX8g.roa (hash: YfCrk+xs8TI3rk14RXIEUL8LFbz6foR+U1kA+FdbRuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f4:d4:da:d9:47:48:14:1f:4e:95:1f:bd:11:b2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
        Validity
            Not Before: Jan 25 07:01:07 2026 GMT
            Not After : Jan 26 07:01:07 2026 GMT
        Subject: CN=ae2214303375f448802515fa51601c4b202209f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:8d:1c:df:db:02:7e:50:83:33:af:56:91:
                    7c:3e:0f:93:9d:87:96:7f:6d:63:04:90:da:7d:b9:
                    00:08:0f:4d:e6:28:09:02:ee:bd:e1:b0:85:0c:9c:
                    13:5e:04:57:e5:f8:40:7e:ae:7e:aa:ea:6e:3a:c5:
                    54:3c:13:01:59:0b:c1:50:45:15:82:dd:6f:d0:e0:
                    0d:4a:ea:c3:82:1a:b0:41:54:b9:0b:3a:44:df:e4:
                    bb:21:3d:c3:63:d9:40:f9:d8:f9:3c:87:f5:53:64:
                    f8:2f:24:86:b8:df:f9:a8:1d:19:e0:7b:24:ee:ce:
                    d6:95:25:78:e5:60:41:b0:fd:e5:2b:9a:99:3a:90:
                    91:fe:6a:d5:d8:91:5f:62:6d:bc:43:55:e9:bf:1a:
                    00:11:cf:ec:96:d2:61:d6:bd:00:36:0e:26:dc:e9:
                    a9:d7:db:71:58:9e:cf:16:f9:0e:f7:46:01:30:5f:
                    50:fe:3d:f4:f4:9a:66:de:c8:31:8e:09:29:21:ea:
                    dc:e6:89:5d:f8:8d:57:1b:60:8a:92:1d:99:d4:ca:
                    9f:9f:c2:91:76:15:07:c7:d1:5e:13:09:09:5a:b0:
                    22:e4:d1:05:b4:17:67:1d:3a:02:5e:e4:a7:19:50:
                    9d:06:15:6d:5b:9e:f5:67:6e:bc:49:95:de:da:c9:
                    13:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:22:14:30:33:75:F4:48:80:25:15:FA:51:60:1C:4B:20:22:09:F0
            X509v3 Authority Key Identifier:
                keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:93:37:65:8e:0b:e4:e4:30:f5:29:49:2d:d8:91:70:04:1f:
         fc:9e:9a:f4:e8:59:6b:97:ce:87:f8:81:c7:74:7f:7c:1e:10:
         81:3b:b2:9a:f8:7d:9f:39:a0:90:39:47:80:c3:64:99:fe:0f:
         30:45:7c:5f:3d:aa:a1:c0:e1:8c:ee:41:cd:c6:ec:56:6c:f5:
         c9:97:c0:14:6b:27:bc:c5:09:39:55:ef:51:fa:45:9c:e9:b5:
         b8:3d:b8:93:6f:ee:60:df:95:39:4a:56:c2:cb:ad:1d:41:f7:
         a3:1d:4f:a7:1b:73:15:22:ce:c4:87:04:bd:76:90:1d:03:8b:
         91:03:05:b7:9a:93:ca:68:b9:82:8f:7f:c0:a4:0b:59:64:31:
         6e:b9:94:fc:a2:1d:80:cd:26:62:4b:79:2a:8a:58:e8:83:45:
         74:1b:fb:92:84:d0:fe:83:74:bb:4a:f3:89:47:e8:a1:2c:00:
         87:43:cd:16:ab:12:0f:a0:66:9f:9c:ec:f9:3d:7c:75:7d:6e:
         5c:5f:1f:ee:c7:92:24:ea:cd:f4:de:c5:fa:0b:8c:2e:b0:44:
         19:ef:90:c7:4e:df:dc:d9:43:77:8f:c3:6e:32:24:f1:fa:a5:
         27:75:b5:b9:af:a9:50:1f:d9:cd:02:96:4b:ea:53:3d:c8:2c:
         e9:d2:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:42:45 2026 by rpki-client