This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File:                     npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier:          4rJfO6RedjM1gMGBhVc8Uwj7+WfTcP5tFNbhak0/K2U=
Subject key identifier:   FE:DC:84:A2:01:5C:2F:23:F5:E3:28:C3:41:58:5C:9D:E4:C9:EF:AB
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer:       /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial:       019BF53EA7D3D469AB8753819DFB14B291A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number:          08A6
Signing time:             Sun 25 Jan 2026 13:01:22 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:22 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:22 +0000
Files and hashes:         1: npTVvz231nNNzxvmItX97i_sO48.crl (hash: xrTkH65OOc6uiV7o1H/2aP6vwb5c+FAm3dXa4Ig/E4Q=)
                          2: zcxoOaYQZVz0kyNkbAvoL7_cGOo.roa (hash: cbQCnBDpdRHmtA6XlyYrBSpV92ISXXC3TjEjSfaVLUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:a7:d3:d4:69:ab:87:53:81:9d:fb:14:b2:91:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
        Validity
            Not Before: Jan 25 13:01:22 2026 GMT
            Not After : Jan 26 13:01:22 2026 GMT
        Subject: CN=fedc84a2015c2f23f5e328c341585c9de4c9efab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:73:c9:e7:6d:0b:dd:d4:32:1e:d0:7b:3d:53:
                    83:d2:fd:51:f5:8f:38:7a:d7:c1:b2:ef:95:fb:b4:
                    07:0c:df:ff:28:e2:b6:08:2d:ec:54:92:95:c0:ba:
                    0c:9b:9e:fe:8e:08:f2:62:21:64:26:6a:77:80:90:
                    1f:7a:d4:dc:d3:42:b2:d3:58:bc:34:cb:c9:77:47:
                    8c:52:a7:e1:57:79:45:0a:4f:49:bd:34:9f:8b:30:
                    7b:f1:25:0c:d9:45:c8:d4:a5:51:0a:28:12:30:07:
                    d9:08:ca:80:f8:1b:30:e7:3b:54:10:a8:ef:e7:8c:
                    f0:8d:3e:c6:82:99:6b:6d:2a:60:d3:82:4b:41:38:
                    a9:f5:06:12:48:ae:07:28:ac:76:26:f0:8a:06:69:
                    1d:fc:62:7d:32:47:b4:91:4c:fa:61:8f:3e:20:80:
                    3b:d2:ad:2e:ad:21:57:e0:33:f2:3c:c6:c3:29:74:
                    11:96:50:8d:1a:80:73:a1:83:16:79:49:8b:bb:24:
                    19:58:e1:47:33:98:9f:63:4f:90:13:00:43:90:06:
                    04:6f:2a:0f:a3:d3:2e:66:fb:93:a2:97:0f:0f:1f:
                    06:6f:8f:f7:ac:0f:5a:a8:a2:a3:f2:a7:f0:4c:1a:
                    e7:6f:1b:17:18:c2:05:8e:be:14:24:0f:5e:cc:32:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DC:84:A2:01:5C:2F:23:F5:E3:28:C3:41:58:5C:9D:E4:C9:EF:AB
            X509v3 Authority Key Identifier:
                keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f1:82:44:4b:88:4c:2c:1b:c5:bc:ed:9e:34:a6:ae:c1:b8:
         8e:79:7c:45:c0:af:91:d4:a5:b4:f4:58:bd:0a:46:9f:47:1d:
         95:77:fc:94:80:0f:b1:bb:98:90:42:f5:00:ef:ca:4b:30:78:
         22:b3:ed:8d:aa:b7:de:69:63:b8:ac:49:63:5e:58:fc:c3:02:
         ae:b4:f9:86:10:4e:51:2f:2c:4b:07:f9:47:45:6e:f8:dc:74:
         2a:99:39:5e:43:be:b8:44:8d:c1:86:fa:70:f6:17:98:71:cc:
         a6:ac:d9:5f:58:19:e2:75:a7:49:73:7f:b0:23:23:a8:d4:e1:
         ee:0e:4b:87:3e:73:53:ab:3b:07:c1:7c:22:cf:e9:e2:8e:73:
         83:69:97:4f:e4:9f:35:04:10:2b:04:91:68:ab:6c:f1:af:65:
         fc:5f:c6:a7:47:3c:4a:a1:07:6d:34:e5:fe:ce:b2:f0:4b:90:
         b5:e7:fd:3a:26:eb:eb:10:0c:61:29:bf:db:1c:61:35:c5:30:
         6b:98:8d:63:2d:d6:80:42:ed:f8:ef:07:7a:56:53:ab:ce:b8:
         26:1d:94:8d:c1:0b:60:c3:bf:dd:9b:6d:e4:21:6f:b7:9a:c8:
         f9:53:2e:69:ce:f9:88:65:fc:cc:e1:79:a9:e8:e2:c6:47:3e:
         47:42:e4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:23:59 2026 by rpki-client