This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
File:                     NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json)
Hash identifier:          wK277IM8tss1vhmgkUWVI9Sb32gD4dcPdR7cnhLHV3o=
Subject key identifier:   61:13:2F:FD:F3:91:D3:30:DB:E9:72:CC:45:11:3D:68:31:12:14:59
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Certificate issuer:       /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial:       019BF507A3AF82CA243AC60A3A30B42BDC85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
Manifest number:          1808
Signing time:             Sun 25 Jan 2026 12:01:17 +0000
Manifest this update:     Sun 25 Jan 2026 12:01:17 +0000
Manifest next update:     Mon 26 Jan 2026 12:01:17 +0000
Files and hashes:         1: 1bmjaNGaI2UWie6zoQTb39HFS_s.roa (hash: +AxNVqmR9VnywOpnEpWpK60msZlPvTmRqEnJ2TvVddQ=)
                          2: 2UTsdBqwcGY6WLPGQu2AQnmmQaw.roa (hash: N0cgvop2VFVQVWMu1UTzJj1ZcUJzTX91lueVGv/YOHc=)
                          3: ByKSk6_PCk0jKVqec0OJjbAcRcU.roa (hash: t1f1S4C1okYWwtKH8np/6yMDAc9jaCyFzuNOyR5oQYc=)
                          4: E102IN0_Ach777PDZCjDRyGfr5s.roa (hash: P+fFTKuiYJQ7KTnCl15w1gtiWXSxbhhwZtpqSiAeOhM=)
                          5: KWyOaYXmmuGpMkmFhWfxqNZLpEQ.roa (hash: 6Db2CprWj64Ewe8dVzSinC3cNdAaSLoS6Dq+erianYM=)
                          6: LEiLLq9r1VO5_Ov5I6DYkNeJuIQ.roa (hash: mWIOH513v2gZLS9HWDfHNsxzxtZFG4eZXAkIgOJaQVg=)
                          7: N0ib0MGeP5d7uD5SMGNzR5xRzaA.roa (hash: wX5k06wd7UCg24rImU3sW3f/cm2llInrYc9+0zZZkLU=)
                          8: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: 2LsbFV58YicGprkuC5viSVaFthLRNz4xt8VBOTN6Fp8=)
                          9: TM5VkZiuCQFhlCTuTDiqt2hHOiI.roa (hash: Uj+s0ytc6HH2YJFkDxTD9d5q1+tOjVsh1FxTZk6i+wg=)
                          10: WqZxU21CXk9II8O2lF6Y-ketCJI.roa (hash: JoRrtKwoZC20Q/QLA/mOv68NwCQSWJ+6cWt4rKxvqxY=)
                          11: YUKRTZrZKbMQuj1koHZDnPDdKkc.roa (hash: 5JLtSmX5xrQ29vGLGR8NuSK/OU2HfwUbgSXICbmnR28=)
                          12: aiZn6kgS43qbYGzLkAmQKdo6gA4.roa (hash: G/KuL+VXWSSvavjd4cxqh2acdQDd5A1ry4sWQqi5S1E=)
                          13: cbo9ZPmxQz5ojNzo3NLp3qPAq5U.roa (hash: WhZWAza+BOUN2V/ul+PIwoOcyAHFyg4fNWTLRfkjfEQ=)
                          14: falskHkEzmFDpE1q8O1AQezFfTs.roa (hash: ZJ3mncJicjqu8JmD6aJ/BH6oEnyHrxSao3V9TboLsMI=)
                          15: k3ayP4DiWUp9a1MNUSDdf93Vz8M.roa (hash: QfCyKwRzJHu3kJc4+Hlfq/pjF8bZH2qQwXvmpvH6rS4=)
                          16: lIy9zQMHNpi1v4RKAbwfpcq16JY.roa (hash: GuxM6yqJlPjVIDlbR8g1Fv5lkMvj//jwJnCdhjFyz9M=)
                          17: pEACykvZyRBjnuYUwUstZ7_jCVk.roa (hash: G94UHZh9tGtYRGHSoldyBITvAVDdXDRBRDBjeMrYPmE=)
                          18: pQE_sWOxAXv4LzF_hnEEzRVKjkU.roa (hash: r8BJ41cxYxyL7WV91ylso2pXKBwYsMCQMjQeRq8IwbI=)
                          19: rVyXgVyYp5rnr4oV3loTRO-57j0.roa (hash: U1gvzfizC5IaJxRnfZJGhEooOdvqsMkE+qdUPQBcx04=)
                          20: sUzc4i-qF-Qw6c5EDaaa0l-fnQI.roa (hash: SGebinu36YaRTF6AF3Dm3RGfWPUH9spaYcSgX0QinqQ=)
                          21: xsb80TsEg5gDhvG_dHnY_wiD7IU.roa (hash: U+IWtUZRr/JdO94gP5xDKETp0qxV29NQDKF3SavkJR4=)
                          22: yEq1d-Y9jhIC-ExVD8i3JnQfKWI.roa (hash: v/lSe2YGn/r4aMCpDUpUTQFRfYfqsJBd8pftAtwMWz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:a3:af:82:ca:24:3a:c6:0a:3a:30:b4:2b:dc:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
        Validity
            Not Before: Jan 25 12:01:17 2026 GMT
            Not After : Jan 26 12:01:17 2026 GMT
        Subject: CN=61132ffdf391d330dbe972cc45113d6831121459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:84:b4:e2:8a:d2:0d:8c:e9:59:4c:2d:3a:
                    67:1d:0b:22:b2:0e:44:a6:a3:18:15:5c:f2:ba:ff:
                    9b:a0:28:cd:bd:d0:56:c5:3f:6d:54:1b:83:ad:ac:
                    35:c3:be:1b:c9:f4:df:17:d2:10:b2:e0:f3:9c:61:
                    66:0d:b0:33:f0:95:3f:5b:08:ac:31:e2:3b:f1:3b:
                    08:39:1a:c5:7f:91:09:5d:0a:fa:76:8f:e1:95:8b:
                    78:9b:08:d6:55:95:21:77:93:b3:81:76:29:7a:26:
                    0f:2b:7c:ce:57:ef:3f:ca:39:6c:87:5f:c9:17:5f:
                    18:0f:10:9b:5d:8b:9f:2c:6c:f7:8a:72:97:73:af:
                    3a:36:d3:06:2a:66:f8:38:5a:e6:85:06:27:62:00:
                    13:cc:61:9c:b2:3a:bc:7c:65:3d:65:f5:cd:6e:bf:
                    51:a7:f8:14:cb:f9:b9:9a:d8:4b:e2:7d:2a:6a:1f:
                    6a:df:5c:68:a5:d0:e5:78:25:88:56:d8:2c:08:44:
                    75:51:08:38:6c:1e:1a:21:82:01:3e:5c:61:92:74:
                    3c:6b:b0:99:66:3f:de:89:a5:f7:1e:e6:e0:94:ef:
                    75:51:98:18:73:3f:eb:95:1a:ac:7f:e6:57:30:ac:
                    6d:c3:58:02:5e:da:09:7c:86:5f:43:a2:22:7d:16:
                    ce:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:13:2F:FD:F3:91:D3:30:DB:E9:72:CC:45:11:3D:68:31:12:14:59
            X509v3 Authority Key Identifier:
                keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:85:83:3e:68:5a:46:c1:e5:e9:b3:b7:6c:2b:cf:f1:f6:ad:
         79:f2:96:a6:5e:c7:5b:e7:7e:e0:e1:6d:e0:b5:12:a1:d2:6b:
         1f:62:ad:28:3f:e5:1a:4f:8c:65:f2:97:48:a8:0b:21:90:dc:
         3f:a3:6f:cf:e4:bc:e9:d2:92:aa:a2:9f:c0:37:5d:30:f8:e7:
         04:7f:cf:0b:bb:da:96:8b:08:af:c4:26:0f:44:e4:d2:7c:16:
         c5:7a:06:e9:0c:b5:98:13:51:a5:18:5c:ab:dd:3d:b9:9f:0f:
         0b:ba:52:bf:26:d9:3b:d0:89:5c:1c:2e:fd:a7:f2:19:54:48:
         e5:0d:6a:c3:88:a1:a4:a2:f5:d5:a2:74:75:b2:ae:ce:d8:e3:
         69:ea:34:de:de:2a:86:69:5b:50:20:11:75:d0:9c:48:6d:46:
         f2:6e:b1:2e:cc:91:da:87:8d:94:74:9e:8b:1a:ad:7f:7f:e0:
         4c:7b:ed:a3:c5:d8:a6:77:b3:8f:cd:b3:33:b7:4f:64:97:cd:
         b1:bc:a6:4f:3c:f8:97:a6:de:22:d4:2f:5d:f5:2b:0a:e4:83:
         29:3c:65:58:6e:89:73:cf:0f:35:dd:04:4c:44:5f:d2:dd:7d:
         57:29:22:ed:a9:e5:8c:5f:89:b1:32:1b:9e:9c:40:1c:9e:93:
         65:08:38:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:35:01 2026 by rpki-client