This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
File:                     NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json)
Hash identifier:          EsuknvnEYFG4LTFY+dv++dfvrPqXAzYpdiLuBH9gydQ=
Subject key identifier:   37:89:D4:3A:DE:52:12:CA:75:E7:BF:8E:64:49:21:86:89:84:8E:89
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Certificate issuer:       /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial:       019BF763BCFE4DC053672F316C547D186531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
Manifest number:          1810
Signing time:             Sun 25 Jan 2026 23:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 23:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 23:01:07 +0000
Files and hashes:         1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=)
                          2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=)
                          3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=)
                          4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=)
                          5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=)
                          6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=)
                          7: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=)
                          8: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: TteXeepcobmxbXTeUWKs4XxCfKjydhXppJbharxjMfg=)
                          9: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=)
                          10: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=)
                          11: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=)
                          12: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=)
                          13: Y717qVS96YjYgAZkrscDp7OEvWY.roa (hash: bvdM3ELPzWVbs/s6wCevWXdZqt/DIba2BD86BPGfAIQ=)
                          14: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=)
                          15: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=)
                          16: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=)
                          17: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=)
                          18: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=)
                          19: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=)
                          20: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=)
                          21: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:bc:fe:4d:c0:53:67:2f:31:6c:54:7d:18:65:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
        Validity
            Not Before: Jan 25 23:01:07 2026 GMT
            Not After : Jan 26 23:01:07 2026 GMT
        Subject: CN=3789d43ade5212ca75e7bf8e6449218689848e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:35:06:61:dc:e5:11:fc:67:3e:a6:96:9f:
                    cc:59:95:87:a5:a0:28:ee:25:a0:c6:0d:a0:7d:b9:
                    74:5a:2d:6d:18:1f:26:26:14:a1:c2:81:bd:2b:ca:
                    8e:37:67:dd:81:58:02:7e:2b:a2:70:0a:a0:61:89:
                    9c:29:00:5b:8a:e5:05:49:2a:41:66:d2:6c:48:4f:
                    78:ce:ac:81:1d:82:db:16:55:24:81:54:a3:99:b4:
                    b8:98:48:9d:d9:59:b5:a5:79:93:13:a9:8f:de:cd:
                    da:76:97:5b:cb:6f:da:6a:dd:be:8e:08:90:f5:83:
                    16:75:df:a0:f2:da:05:37:5a:c8:84:4e:d8:b4:77:
                    23:6f:7d:23:f9:42:03:17:4e:3b:1e:49:04:e1:80:
                    9f:56:a0:25:a6:fd:3f:31:41:37:2a:9f:8f:3c:04:
                    58:5e:a3:ab:83:e9:b0:8d:5c:8d:74:16:4d:81:79:
                    d2:b3:9b:41:3f:c3:1c:a4:2e:ad:0d:67:89:7d:e3:
                    79:3d:13:10:3e:31:08:3f:33:55:ac:f3:89:d3:52:
                    48:da:8c:61:57:67:b7:10:b7:78:c0:26:e0:48:b8:
                    50:b5:65:77:45:a8:b3:a0:78:0a:e7:3e:1d:90:76:
                    06:b7:9e:cb:63:9e:87:db:d4:92:23:da:3c:78:e5:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:89:D4:3A:DE:52:12:CA:75:E7:BF:8E:64:49:21:86:89:84:8E:89
            X509v3 Authority Key Identifier:
                keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ec:5f:a3:db:3b:33:2d:a7:51:7e:3a:1d:42:ed:c8:8d:7f:
         e7:7d:f3:e7:54:0c:52:89:a9:c4:a8:5d:ff:4e:bb:b0:e5:7f:
         4b:f2:32:9c:0e:24:5c:95:cc:ff:79:37:c8:d9:94:a4:eb:67:
         1a:ea:a9:15:b8:e6:c9:aa:e4:02:ef:bc:8a:e1:f5:af:bd:41:
         62:36:20:47:5f:bd:c4:b2:59:f8:4e:1d:6c:ea:52:ed:51:63:
         6c:65:57:59:ab:7a:30:3b:a4:c4:0e:dd:40:e5:38:76:df:e8:
         24:7f:e2:13:e4:ae:84:a0:a6:01:fb:ef:6f:be:f6:22:73:90:
         84:b8:67:ba:d3:91:1b:01:62:6e:a1:f9:93:90:49:6c:04:a6:
         6f:cb:8e:61:50:e0:20:d8:39:59:a7:e5:cd:8e:2e:87:0f:6c:
         16:fd:3e:3c:0e:f4:49:17:9a:82:16:34:49:8c:fb:52:a3:30:
         63:15:e2:88:04:53:29:ae:5c:f9:62:02:08:1f:53:e6:2e:6b:
         69:42:5b:3d:32:5e:21:d7:8a:46:55:65:9d:75:97:bb:30:30:
         0e:bc:90:17:1d:c4:91:83:1d:a9:4b:d9:95:d4:3b:16:f0:f8:
         f8:cd:90:ec:79:ba:62:de:9b:14:0b:09:3c:fd:be:57:99:9d:
         23:1d:00:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:26:00 2026 by rpki-client