This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
File:                     nHPZRT--37gMRUO7Up_DMMH4wc4.mft (raw, json)
Hash identifier:          SixiwTNbBarumyCTmxx3FHOflr0mb+qo7W2Yk18bkJ4=
Subject key identifier:   93:A7:46:9C:8D:75:AB:2C:5D:4F:D3:93:FD:2A:AE:14:E4:BF:B6:A8
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Certificate issuer:       /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial:       019BF61A164FA162916BBC4AC063125F36F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
Manifest number:          0DA0
Signing time:             Sun 25 Jan 2026 17:01:03 +0000
Manifest this update:     Sun 25 Jan 2026 17:01:03 +0000
Manifest next update:     Mon 26 Jan 2026 17:01:03 +0000
Files and hashes:         1: MuR4aEGFWe7wl3Vh052cNYMzM2g.roa (hash: eJ30VAn7X7leuPQPqFb0aOSFx4e32kdxI4xgek8Nhr0=)
                          2: WAj8AC6cZrbept-Nm9z-z_zHUD4.roa (hash: P3ihNDztpQFazGFe+CWzMgjczagukwmAc6Qo3EggvCQ=)
                          3: gGP5a4m9bqAKT7-QVYaan-KR00I.roa (hash: mPbwa7sA/SB0OJubO3AAY0Oa/zRc0RaIx2vSZkJEB4w=)
                          4: nHPZRT--37gMRUO7Up_DMMH4wc4.crl (hash: HxkOx8vDh2zOPpiSzpsEs3/Y2c4YoNIQ2GlD0ezzAU8=)
                          5: piHfYItCMRZJoIEsDJ__Qf2pGaA.roa (hash: RezZZPRB2YkkE5M8DiOZbDxcJLsNR31nGSqMJCGciug=)
                          6: rkgYpLaSooeAeaPc6HeDMNwsGSE.roa (hash: dwK5xzYUrSSoaqAtejdAj3gsVAadyZPLwc0zD6SmFNo=)
                          7: xG7DXHJDVjNk9kPfRoD--_ZHu-c.roa (hash: i8nmPH8ECpbJgdaxdjOGq7PZ1dfP/YgPF/IPT9Hb4to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1a:16:4f:a1:62:91:6b:bc:4a:c0:63:12:5f:36:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
        Validity
            Not Before: Jan 25 17:01:03 2026 GMT
            Not After : Jan 26 17:01:03 2026 GMT
        Subject: CN=93a7469c8d75ab2c5d4fd393fd2aae14e4bfb6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:99:e8:48:7e:ed:7c:53:35:53:67:be:cc:
                    65:67:fb:90:6e:b6:c3:2b:a8:87:7f:ac:2a:04:b9:
                    50:90:24:8b:62:63:cb:10:8d:e3:63:d6:b7:f4:93:
                    fc:22:81:7f:4b:17:43:c6:60:77:39:92:1e:dc:bc:
                    2e:f1:5e:83:b8:fb:d4:c2:75:95:9f:ed:48:82:33:
                    93:9f:da:ff:7b:9d:f0:1e:70:00:31:36:8d:63:7d:
                    21:8f:1e:4c:cd:95:24:2d:88:72:4b:e2:8c:3e:ad:
                    a5:38:ef:a3:d3:6d:46:54:e6:39:68:15:0e:d8:66:
                    1b:0a:d0:d8:79:2e:f1:25:16:72:5b:34:79:b5:3e:
                    3f:ab:c1:26:e3:26:9c:f1:8e:e6:a1:87:f1:ff:99:
                    6a:78:9a:60:48:7b:66:aa:4a:b4:23:ab:8e:b5:1b:
                    bf:c5:cf:2f:ae:3b:49:77:d9:ff:00:d8:19:1e:f5:
                    0d:06:b6:0e:70:7a:79:0b:31:c2:69:07:69:c6:6e:
                    b8:44:b0:09:36:b3:07:57:39:18:ec:66:5e:17:14:
                    7b:b2:a4:41:09:76:8e:d9:24:ca:19:08:1f:46:c0:
                    60:45:78:0c:fb:83:95:09:fa:d8:51:93:e4:9f:0c:
                    fc:2d:42:bc:57:ac:32:88:53:87:8f:62:8e:b2:23:
                    f5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A7:46:9C:8D:75:AB:2C:5D:4F:D3:93:FD:2A:AE:14:E4:BF:B6:A8
            X509v3 Authority Key Identifier:
                keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:6e:d4:cb:66:36:6f:98:c0:a3:bf:12:5c:cf:85:ab:29:d0:
         ee:47:20:04:d0:1e:8c:33:34:7c:ef:49:1b:fa:76:74:f0:55:
         d9:12:67:67:d9:14:03:22:df:0f:37:90:3c:58:f1:e1:5e:bb:
         06:da:ad:b5:0d:ae:c3:5e:82:27:da:57:c4:10:11:c6:73:31:
         37:3a:f9:a0:f2:48:b2:3d:e0:69:bd:5e:54:3a:3d:3f:33:2e:
         6d:41:ab:04:0c:6a:53:00:bc:48:e1:0b:0f:1b:ac:14:19:42:
         7e:b4:ef:97:e2:86:cf:c4:90:94:8f:7e:e6:b9:b0:95:f4:31:
         05:76:79:b8:61:38:43:8d:47:42:f6:71:e0:9f:3e:95:57:98:
         b5:da:dd:98:77:78:25:51:04:c6:88:32:98:53:7e:4b:f8:c5:
         d0:d0:d8:dd:49:11:d9:06:ee:49:26:cc:54:ad:19:b3:a7:09:
         34:93:c9:85:4e:5b:a8:97:6e:03:96:5a:88:ce:c8:90:3a:19:
         d0:ee:10:59:bb:ea:6f:63:b2:bb:8e:f3:90:6f:6b:d6:bf:3e:
         e6:79:e7:88:ea:e1:63:12:1d:0b:5f:ab:e0:31:99:37:41:59:
         6e:bf:33:ba:0d:05:2f:61:96:50:b1:2b:81:a9:9a:ab:97:38:
         32:8a:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:09:48 2026 by rpki-client