This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
File:                     n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft (raw, json)
Hash identifier:          moSa5l9FyoaJF0cenhQVgdt8N1HVkrrOX09Q/FVrh2M=
Subject key identifier:   69:B5:45:33:D6:B2:D7:4B:5B:83:65:25:B6:BD:EF:23:E3:9F:BE:0B
Authority key identifier: 9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
Certificate issuer:       /CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Certificate serial:       019BF5E3B71950763BEBDD9E64C76A68FE70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 16:01:39 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:39 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:39 +0000
Files and hashes:         1: dCyZ9Pf_BM16QCKCTZBWurk5tes.roa (hash: igMWMbqYVYQOf++wz4/c/zhgP+nD+9kvBZJquJqrWeo=)
                          2: n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl (hash: izzjMphE7nhyzlttrEP6P4Ze+CmOVFWQ4ezDAgbI6oE=)
                          3: nGxIqADkVb_mNggVwJxi_XzzMLg.roa (hash: AeNpYVfAfsiZNoHvge0sBO6h6Hi0L8OmJkT5GmZUJAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:b7:19:50:76:3b:eb:dd:9e:64:c7:6a:68:fe:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fac2fdddabf20ea449870e1dcc0915e60148346
        Validity
            Not Before: Jan 25 16:01:39 2026 GMT
            Not After : Jan 26 16:01:39 2026 GMT
        Subject: CN=69b54533d6b2d74b5b836525b6bdef23e39fbe0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:c0:d1:44:81:85:67:69:9d:62:06:16:67:
                    46:15:fd:ff:e1:69:f4:7e:ce:27:df:c9:a2:f5:02:
                    01:c2:6d:cf:74:39:7b:d4:67:09:6e:a3:e9:4a:58:
                    d0:8a:77:09:c7:00:30:01:cd:b7:f5:4f:dd:85:ff:
                    9c:9a:aa:8f:25:2e:c2:f5:cf:b1:f3:6b:ed:19:22:
                    3f:f4:36:79:ee:2d:f0:5e:e8:19:a5:9b:be:9f:18:
                    f5:70:ef:28:3c:b4:9b:1a:9b:6e:5b:8b:17:8d:9a:
                    7a:25:d7:95:ea:16:61:5d:80:c7:9f:d8:db:f4:bf:
                    40:56:e2:82:1d:5e:f8:5d:1f:41:df:72:a9:a6:5d:
                    0e:13:91:f7:a2:2f:16:f3:6e:9c:70:cd:5b:47:1a:
                    11:51:56:f1:16:ea:0c:46:84:12:3c:f2:7b:06:45:
                    2f:46:68:c8:87:bf:3c:2d:ab:45:85:79:98:8b:e2:
                    a1:58:70:a0:ed:50:dd:dd:04:d2:95:3a:dd:85:4f:
                    62:9e:a6:00:b8:73:84:7b:62:3d:e0:11:fa:20:37:
                    c2:23:54:dc:27:e4:57:d9:2e:51:8d:13:18:6b:d2:
                    c9:b8:6c:e9:76:4c:9a:df:56:cd:b9:f6:60:2f:7d:
                    86:36:80:15:51:22:ed:07:a0:11:eb:ed:0d:48:68:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B5:45:33:D6:B2:D7:4B:5B:83:65:25:B6:BD:EF:23:E3:9F:BE:0B
            X509v3 Authority Key Identifier:
                keyid:9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:16:30:75:d2:f8:1f:77:41:0e:4f:7a:70:c0:d3:18:b3:1c:
         3a:60:1b:2d:66:98:6b:fb:6b:c1:aa:7b:45:ad:32:40:e2:5f:
         2f:7a:95:48:96:3c:bc:65:e4:8e:b5:60:3a:af:7d:21:73:34:
         a7:da:bf:d4:a7:cc:51:a0:f9:23:77:28:fc:aa:6b:f7:7b:ea:
         16:31:9a:17:3f:f6:35:b6:fc:de:32:03:6c:0b:03:3b:80:ae:
         22:3d:b3:91:54:44:67:bb:8d:e3:f8:99:f5:2f:20:f4:02:d2:
         a1:f1:28:31:c6:78:f1:4a:6d:3f:37:6e:34:63:ad:e6:3c:3e:
         c6:24:e4:ea:a5:11:cc:f1:a9:f6:b6:b2:60:71:36:e1:5f:5d:
         7c:13:5a:f2:d2:32:b4:5c:98:52:0c:4e:0f:bc:9a:9e:75:db:
         72:76:8b:e7:c5:c2:8d:72:fb:db:54:b4:a0:0b:6e:f7:e6:13:
         21:3d:36:67:46:7e:ba:ec:70:1c:5f:e5:c5:65:33:4d:87:40:
         67:e8:49:05:0b:b4:2f:32:0a:ea:bd:1b:f7:9e:dd:b5:ba:10:
         34:d0:b8:22:19:b3:a5:ec:02:4e:83:a3:74:d2:5b:a0:d1:f2:
         c6:35:60:09:57:88:49:3e:12:1b:6b:f9:f3:2d:54:39:b5:e8:
         4c:bf:b0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:19 2026 by rpki-client