This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File:                     N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier:          JA5LcE0rhYswryqSZ2fuuLxF//yViZF6AezCe4p816M=
Subject key identifier:   92:22:61:E7:A0:9B:EE:78:CB:89:A8:E4:A3:38:A0:0D:B1:1A:AA:58
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer:       /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial:       019BF3F529A05741FD0E45FB56E2B674DE43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number:          0A70
Signing time:             Sun 25 Jan 2026 07:01:29 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:29 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:29 +0000
Files and hashes:         1: DU_TVKVtm6bTmyTDO5PD_oikETo.roa (hash: C0IdbVzuo1dJM8VCnuKPp17eM0Ch9xsqhnJeVL29u1A=)
                          2: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: eKmExtwBNC9Y1CnJOHHdXHMfDBbQVm+tjMl0rOR9vSA=)
                          3: P9oU8l4hJSdNb2cRdixd2FnzViw.roa (hash: CgDo7X7BhUNB3k1XMsCieKRq+wkse0U7IlgpY0Oyr+4=)
                          4: X30d4L9HwoFcQSCZOPGT8fzFSUk.roa (hash: RqJT0G3LIofj7mqU4OcHwIwo8yHwTlkJsfy4x6YteKE=)
                          5: YTl2wkQfDFdQtN71h5K-qw3EztM.roa (hash: z25IOf5DaazAZ0jaAF7FfOCUfonWoXfC3l+JaU4GRgc=)
                          6: fBEXs-dTnmKjIiNwEfni1rhj8-0.roa (hash: tYbmFJdA3qGjmuXRVTxySeGXojO7ROAd1nbv5cqUyhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f5:29:a0:57:41:fd:0e:45:fb:56:e2:b6:74:de:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
        Validity
            Not Before: Jan 25 07:01:29 2026 GMT
            Not After : Jan 26 07:01:29 2026 GMT
        Subject: CN=922261e7a09bee78cb89a8e4a338a00db11aaa58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:57:7c:1c:30:d0:77:ce:34:4c:3f:d9:58:
                    fe:60:f1:34:47:6d:33:b3:ff:1e:5a:b8:d5:13:2d:
                    ce:0c:2e:e7:0a:db:47:79:bd:02:34:5e:42:eb:62:
                    72:26:42:25:f6:bf:4b:6e:fc:70:82:4f:57:f3:aa:
                    3a:a8:87:f9:f2:97:af:f7:31:98:20:73:2b:1c:a2:
                    61:38:c9:33:d3:0d:18:a3:bf:f1:8d:38:e8:40:f1:
                    24:2f:7c:94:c9:4c:20:35:bb:06:c0:60:92:23:ab:
                    b9:30:29:6c:84:6d:da:28:3e:92:ca:08:de:22:d7:
                    9c:df:05:75:c0:ca:12:e5:59:0d:b6:e9:94:2c:ec:
                    78:55:4b:47:d9:18:54:05:7d:df:3f:08:5e:d0:e3:
                    b2:e7:7e:ca:06:c0:a1:c3:f8:a5:50:c6:5f:8e:05:
                    b6:67:63:bc:e0:57:a4:f8:20:d0:b9:d0:c1:33:25:
                    2e:90:e1:52:18:39:f9:46:18:67:5f:64:54:c2:68:
                    df:d5:31:a4:d2:20:a2:7f:3c:d3:05:31:ba:3c:33:
                    80:0d:c7:ce:ca:15:ba:0f:3a:9b:8b:3e:0c:b0:51:
                    22:08:ef:48:e9:f3:fe:5a:34:f0:4d:47:b8:26:37:
                    30:b3:dc:3f:b1:10:fd:61:e3:be:30:df:0d:ba:52:
                    ac:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:22:61:E7:A0:9B:EE:78:CB:89:A8:E4:A3:38:A0:0D:B1:1A:AA:58
            X509v3 Authority Key Identifier:
                keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b2:dc:43:ab:52:5f:9b:cd:f7:10:e3:f0:b9:84:e9:20:1a:
         f1:f8:60:cc:57:48:75:e1:55:83:84:6f:2a:be:f6:43:50:3e:
         ab:7f:16:14:f2:c8:0d:8d:19:10:28:49:01:6b:af:d9:f0:96:
         a5:f2:7e:e7:41:5c:5a:2c:da:3c:8e:52:e7:71:bd:39:70:7d:
         8e:cb:8a:d4:88:b2:15:2b:36:c6:d8:13:82:0b:a6:76:6f:27:
         dd:2e:fd:7b:6c:84:16:d1:56:12:da:72:c1:85:64:ff:9e:ba:
         6b:5b:0e:05:a7:e2:bd:3a:73:c8:9c:ba:46:11:76:e9:08:f4:
         98:68:f6:46:75:c9:ff:71:e3:2a:ac:ca:ee:cf:e4:78:4f:a1:
         53:c5:a3:e9:c6:10:1e:39:7e:e7:04:7a:43:66:18:01:6c:87:
         75:64:4d:f6:87:22:a8:e3:92:23:11:4c:c2:dd:e3:b2:85:ba:
         5e:99:dc:b4:14:9f:2e:31:0e:45:43:5e:cc:ec:d4:fa:8d:c2:
         24:f2:9d:b8:0a:43:08:81:49:89:66:41:b5:ba:10:a2:13:4f:
         4d:53:45:7a:3a:07:f8:ed:8f:ad:12:12:1c:e8:9b:cb:da:16:
         30:1e:aa:0a:93:27:57:a2:73:3e:da:a6:14:ea:16:db:67:a3:
         f0:1a:0b:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvz9SmgV0H9DkX7VuK2dN5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NDMxZjFiZTlmZGMyNDE5MDk4NDc5Y2RlNDU3YmJmNzk1
NzE3NTkwHhcNMjYwMTI1MDcwMTI5WhcNMjYwMTI2MDcwMTI5WjAzMTEwLwYDVQQD
Eyg5MjIyNjFlN2EwOWJlZTc4Y2I4OWE4ZTRhMzM4YTAwZGIxMWFhYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrNXfBww0HfONEw/2Vj+YPE0R20z
s/8eWrjVEy3ODC7nCttHeb0CNF5C62JyJkIl9r9Lbvxwgk9X86o6qIf58pev9zGY
IHMrHKJhOMkz0w0Yo7/xjTjoQPEkL3yUyUwgNbsGwGCSI6u5MClshG3aKD6Sygje
Itec3wV1wMoS5VkNtumULOx4VUtH2RhUBX3fPwhe0OOy537KBsChw/ilUMZfjgW2
Z2O84Fek+CDQudDBMyUukOFSGDn5RhhnX2RUwmjf1TGk0iCifzzTBTG6PDOADcfO
yhW6Dzqbiz4MsFEiCO9I6fP+WjTwTUe4Jjcws9w/sRD9YeO+MN8NulKsNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIiYeegm+54y4mo5KM4oA2xGqpYMB8GA1UdIwQY
MBaAFDdDHxvp/cJBkJhHnN5Fe795VxdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYt
NjE1OTYxMzEyYjUyLzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYtNjE1OTYxMzEyYjUy
LzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7LcQ6tS
X5vN9xDj8LmE6SAa8fhgzFdIdeFVg4RvKr72Q1A+q38WFPLIDY0ZEChJAWuv2fCW
pfJ+50FcWizaPI5S53G9OXB9jsuK1IiyFSs2xtgTggumdm8n3S79e2yEFtFWEtpy
wYVk/566a1sOBafivTpzyJy6RhF26Qj0mGj2RnXJ/3HjKqzK7s/keE+hU8Wj6cYQ
Hjl+5wR6Q2YYAWyHdWRN9ociqOOSIxFMwt3jsoW6XpnctBSfLjEORUNezOzU+o3C
JPKduApDCIFJiWZBtboQohNPTVNFejoH+O2PrRISHOiby9oWMB6qCpMnV6JzPtqm
FOoW22ej8BoLXw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:16:35 2026 by rpki-client