This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File:                     Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier:          IeuK7C+3c8++jJdvEqRBtf/VAtLwMH/Q+2Ho+iq+Vz8=
Subject key identifier:   DE:E5:C1:77:66:67:7E:B2:0B:93:13:DC:11:76:84:E2:F1:71:EF:E2
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer:       /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial:       019BF7637E89D6BF9C1A28264E605F64C523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number:          0E1C
Signing time:             Sun 25 Jan 2026 23:00:51 +0000
Manifest this update:     Sun 25 Jan 2026 23:00:51 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:51 +0000
Files and hashes:         1: 3Ego7qA5ogxcgXSX7Iy2Jk2QvKA.roa (hash: AcX2UY2fKx9ShP8jKiTUZk0gum0BmvVpyfodQGjOdcQ=)
                          2: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: vTzqmYm+INwo0hS6QNNaWAmKdtmklAkK4mP3p+cIsIo=)
                          3: YayJGV1AhdhT_2jmvro3f1vZJio.roa (hash: ZSfRyhmj0GGAqXcOqtLbroZWUuhIqN/tBzww51XfKiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:7e:89:d6:bf:9c:1a:28:26:4e:60:5f:64:c5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
        Validity
            Not Before: Jan 25 23:00:51 2026 GMT
            Not After : Jan 26 23:00:51 2026 GMT
        Subject: CN=dee5c17766677eb20b9313dc117684e2f171efe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:8b:42:06:45:ed:06:30:b7:b9:5b:f4:ab:
                    5f:13:0f:0c:d9:cc:ea:db:2e:e8:c9:06:8d:df:d8:
                    39:a4:60:cc:1f:a0:60:a8:f4:0f:17:d6:1c:bb:6d:
                    12:9b:b8:aa:2c:a3:4f:f8:e3:e6:ed:eb:b2:61:b1:
                    f8:9e:2e:fb:1a:0f:76:e0:cc:7e:c7:b7:6e:ff:8e:
                    7c:65:dc:31:32:22:3c:64:ba:7e:32:4b:cb:a6:9c:
                    d6:f5:52:6d:95:1b:31:d0:20:24:34:bb:f5:0f:15:
                    67:68:0f:6c:f9:c7:c8:c3:85:d4:ab:02:45:c6:6d:
                    0b:62:bb:ab:eb:a5:50:06:fd:29:19:7e:10:f5:3d:
                    96:9f:37:19:ca:98:9b:b8:c4:2c:26:5d:6d:6b:f0:
                    8d:2c:ba:59:7c:4f:09:d8:0e:46:4d:a2:7a:85:b1:
                    45:e5:d8:a3:50:8e:b4:3b:d2:6c:1c:77:cc:bd:7b:
                    44:36:df:73:eb:5c:d4:45:18:d6:80:80:10:d1:12:
                    b1:7b:65:98:4a:7c:5b:f8:25:6f:94:74:9e:f8:b0:
                    4a:2d:c7:1f:9a:fe:b0:bd:e5:e8:45:f7:77:59:ba:
                    77:61:68:10:c5:de:e4:90:63:9d:d3:0a:d2:dd:62:
                    20:67:0b:da:07:c6:86:ca:af:0d:c3:5c:9d:7c:6e:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E5:C1:77:66:67:7E:B2:0B:93:13:DC:11:76:84:E2:F1:71:EF:E2
            X509v3 Authority Key Identifier:
                keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:07:23:2a:8a:6f:68:bb:d3:8e:83:29:a6:32:cc:45:e2:60:
         8b:8b:d2:07:aa:d5:c6:f8:ea:08:71:ef:9b:d1:22:bc:f1:93:
         2c:a8:64:98:3b:b2:93:8c:b9:ca:73:c8:20:78:2a:6b:5f:da:
         24:1b:e8:b4:f9:ec:b5:e9:33:38:1c:e5:7a:03:7d:a2:66:82:
         c6:fc:3d:65:6c:c0:3c:38:28:25:a7:5c:af:73:9f:a8:9c:74:
         8f:85:8d:51:0e:ee:e1:87:59:4a:c9:10:19:1d:f6:6b:be:e1:
         b3:fe:f8:2b:f9:d5:9f:5b:95:3a:7b:2d:78:ce:3d:30:d3:13:
         57:0d:85:9e:3b:4d:d5:6a:9e:2e:e5:18:04:0b:dd:6c:97:17:
         23:8b:6f:33:6d:3b:a4:9c:67:71:51:31:e3:ea:29:3f:f6:17:
         0a:33:f1:d7:2d:ec:15:a0:d8:25:13:62:8b:ef:a1:08:b6:95:
         bd:68:12:f6:67:34:94:f1:d4:a4:28:86:7e:8e:a4:e0:e2:16:
         de:69:17:ef:e8:74:1c:94:f8:19:0e:0c:85:90:87:42:77:cc:
         07:da:72:b9:fc:e2:ab:7d:e3:9d:81:ad:06:8f:fc:71:5c:c8:
         c9:40:dd:6c:6b:d0:55:4b:21:49:59:bd:43:c8:da:b0:86:a5:
         d9:13:13:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:24 2026 by rpki-client