This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File:                     n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier:          NvfYZnFbZArhRryflzB4nVmjz0aj4jkTgC6o7XMrsRI=
Subject key identifier:   24:F6:11:0B:81:EE:20:83:FB:25:F8:B9:11:12:85:10:C5:1C:7D:57
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer:       /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial:       019BF5AC3B9976B148776C1FC78343F80775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number:          0EBC
Signing time:             Sun 25 Jan 2026 15:01:03 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:03 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:03 +0000
Files and hashes:         1: Qqa4Xw7uDETbeUhxEJYV1RcGxGI.roa (hash: jln1MbdeKaOyBgT7+wfLZLWLANQbRohXKREO1JAvQQU=)
                          2: j6yoIF9AWUp9UFDKXH65rXLEiss.roa (hash: YAXw+V8+kO2QpRAGh9PLZOBVimIgU4loSZgv6+jbYAg=)
                          3: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: sHsN1psW0ATyRnvLAyEoRPkymlEXDK3Xeq0RnX2d5iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:3b:99:76:b1:48:77:6c:1f:c7:83:43:f8:07:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
        Validity
            Not Before: Jan 25 15:01:03 2026 GMT
            Not After : Jan 26 15:01:03 2026 GMT
        Subject: CN=24f6110b81ee2083fb25f8b911128510c51c7d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:17:9e:b7:23:f5:0d:be:bb:d5:5d:af:a3:
                    7e:3c:48:54:8b:a1:a2:bf:a2:9d:b1:7e:7f:bd:81:
                    f7:a6:23:33:87:55:c0:87:5c:53:d9:0b:c3:77:b4:
                    53:99:69:0b:44:09:08:7f:84:9b:19:8e:21:1c:8e:
                    3a:4b:c8:ac:81:64:e0:0f:ae:01:df:ce:92:5a:37:
                    43:f1:83:a3:c7:44:7d:44:81:08:e9:6d:04:78:92:
                    70:d8:7c:c2:ce:5a:16:a3:81:9a:4c:91:ea:18:83:
                    83:a1:35:e1:be:51:82:1c:4e:37:85:14:4e:37:4a:
                    7d:b0:04:59:dc:69:55:cc:9b:0b:ab:52:2b:c8:5c:
                    ad:41:5c:bb:b3:9c:ad:17:27:0d:e6:7e:cd:57:f6:
                    50:d6:68:0b:96:a5:5e:22:38:44:0f:eb:ef:b9:76:
                    c2:a6:6d:12:27:fa:8b:d7:34:f9:1d:09:3e:8a:c1:
                    d8:50:15:b2:68:82:24:d1:bf:aa:08:60:43:63:e5:
                    47:f3:f4:8e:f6:db:f5:17:6d:c7:be:c4:08:55:71:
                    89:72:d5:77:db:75:e0:0e:fb:99:57:13:b9:71:bd:
                    51:5e:ce:c1:ba:64:42:38:a8:f8:8d:6b:27:e4:96:
                    5d:87:98:26:95:d1:5e:3e:1c:fd:a6:b9:56:37:88:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F6:11:0B:81:EE:20:83:FB:25:F8:B9:11:12:85:10:C5:1C:7D:57
            X509v3 Authority Key Identifier:
                keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fa:ca:ab:b2:8e:7b:40:6c:04:2d:95:e2:b0:51:93:bf:03:
         34:83:d4:14:6e:94:f9:37:0a:46:4c:df:09:7b:d1:66:52:5b:
         f8:4f:cd:66:ae:ae:71:6c:4c:3b:5b:99:79:73:f9:fd:0a:6a:
         c0:a4:bd:ee:dc:3e:f0:7f:28:5f:72:c2:e5:3f:50:00:c9:43:
         18:b8:86:5f:76:b0:ba:cc:a3:93:4a:11:67:8e:27:e5:74:6b:
         63:ac:0a:61:ff:64:cf:bf:5c:69:f1:64:75:53:55:c8:77:e2:
         92:a9:6e:21:79:9b:72:d6:e8:bd:25:ca:29:10:f9:07:f8:7e:
         61:9d:56:9f:77:82:ee:1e:96:3d:d1:67:e7:20:ec:f3:f8:e7:
         53:6f:e3:64:e1:d8:fb:62:f1:44:5f:b5:09:fc:33:b7:07:84:
         b8:da:e4:8d:5b:21:8d:dd:02:b0:cc:a1:10:7c:23:c5:dc:67:
         13:fb:37:ec:28:79:a6:9d:ba:81:7c:2a:cd:60:73:0e:f5:7c:
         a9:db:7d:3c:12:d9:8f:d3:39:30:70:05:2f:4e:86:50:b9:05:
         a6:f4:04:0d:93:54:45:cc:2d:21:18:70:d1:0b:c5:25:bb:85:
         d3:0c:ec:8e:86:fc:68:9c:13:94:27:b3:98:51:4e:9d:1d:b9:
         bc:8c:7e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:19:51 2026 by rpki-client