This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File:                     NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier:          e41SDXVvRh2Je7C588Fs34NuJe8mxawBn3Z7jDUROlc=
Subject key identifier:   79:79:31:C5:10:58:CC:09:BA:BF:EA:3F:B1:0B:39:C1:81:93:57:98
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer:       /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial:       019BF8AD04FA2BE81D1BBB607967CB0538B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number:          14EE
Signing time:             Mon 26 Jan 2026 05:00:47 +0000
Manifest this update:     Mon 26 Jan 2026 05:00:47 +0000
Manifest next update:     Tue 27 Jan 2026 05:00:47 +0000
Files and hashes:         1: J_4NzbDGUWUtUAumAH4qhCEqHsM.roa (hash: zTyN8GQ8cWKwKUCuNPDPg8iSNZAxxiGcvMlzHM9FFkU=)
                          2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: ycFIqpENuW/hfErDDYuoX/v+it7t/AnWpcalM+T0i1I=)
                          3: tG8ZG_dCQOkYNHsjd01rJ4jtgF8.roa (hash: TPv62uZMhjn9awPA5VdIoi2Udqm+OYn/wfPIL+U47B8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:04:fa:2b:e8:1d:1b:bb:60:79:67:cb:05:38:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
        Validity
            Not Before: Jan 26 05:00:47 2026 GMT
            Not After : Jan 27 05:00:47 2026 GMT
        Subject: CN=797931c51058cc09babfea3fb10b39c181935798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:10:12:a6:e7:00:ba:c1:f1:20:1c:55:e3:
                    14:d2:eb:ba:8a:8e:1f:f2:85:be:96:c3:9b:ed:e5:
                    ab:58:27:8a:87:e4:00:0a:bc:c8:4b:3d:25:2e:6d:
                    30:ae:a4:bf:af:02:e9:4f:22:84:8a:45:e3:26:b8:
                    8b:2c:34:d8:b9:78:06:f3:cd:5d:df:fa:8d:dd:e3:
                    de:d3:1a:91:6f:c3:db:4b:ef:5f:c2:15:85:47:8e:
                    70:d3:97:66:b4:3d:f0:78:07:77:58:a7:6c:de:a6:
                    9b:55:2f:d2:fa:17:f3:7e:54:e2:38:b2:42:41:52:
                    d9:98:3a:b8:9d:9d:4f:3d:0c:db:35:e9:25:05:86:
                    76:77:7a:4e:e2:46:7e:7d:ec:a1:20:62:87:9a:3f:
                    22:63:c6:69:25:d1:ee:b0:07:19:c2:6d:47:02:76:
                    27:f2:e4:3d:93:11:62:9a:28:f6:37:9a:cb:4d:89:
                    52:28:96:c1:61:cb:2d:e9:87:40:8c:d4:c0:56:d0:
                    63:2d:cc:93:bd:b4:27:d9:41:08:db:a8:b7:17:d3:
                    08:d3:c4:ba:89:9f:aa:18:11:f1:b1:ef:0b:7e:c8:
                    db:bf:19:be:9c:6c:41:03:82:f9:c7:6d:b4:4e:6f:
                    66:89:49:2e:8f:75:b7:bf:6c:23:8d:d3:b8:72:b7:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:79:31:C5:10:58:CC:09:BA:BF:EA:3F:B1:0B:39:C1:81:93:57:98
            X509v3 Authority Key Identifier:
                keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:3a:d8:d8:14:c5:98:1d:91:f9:08:35:f0:87:49:a5:bc:93:
         08:de:92:c7:17:8b:81:7f:44:5f:57:85:e4:26:6e:15:74:35:
         a4:ff:d0:1b:30:ce:bc:ac:80:8f:c3:09:31:2d:61:a9:0f:2b:
         c8:09:c9:73:43:1f:75:28:59:c0:35:89:ff:aa:44:35:41:a5:
         32:a9:cf:f1:85:4e:03:99:13:89:b9:e9:3c:ba:f8:71:9e:c5:
         6c:8b:aa:d8:8f:b3:ca:97:cc:48:60:f7:9d:b5:fe:cc:30:84:
         37:37:93:84:70:f0:71:d9:7b:f9:06:f6:6d:7d:33:d6:ed:5b:
         2f:bf:36:7d:31:0a:d4:f3:39:54:3a:97:07:fa:bf:66:ba:97:
         c4:d5:5b:db:87:02:79:cc:9e:fd:5d:90:c7:14:99:b1:bb:a6:
         9f:c5:af:05:6a:26:60:51:55:a9:66:51:95:3c:15:14:3a:69:
         6d:ce:13:1c:c7:4c:42:05:8a:fc:e6:6b:df:07:e9:6a:72:e0:
         7f:da:83:83:cb:b5:1c:48:ba:5e:87:ad:f2:ba:0c:e5:47:03:
         44:7d:1c:56:44:98:b6:0a:9e:b6:21:4e:0a:24:c4:50:f8:29:
         e6:47:66:e3:78:f5:31:d9:93:54:16:86:f1:58:77:88:c4:c7:
         3f:03:a3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:12:43 2026 by rpki-client