This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File:                     NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier:          /R8sMOTX4z58COGz8Z8qwJcWLCs+Etmh/547dJZvyPc=
Subject key identifier:   81:36:0F:D5:58:00:6D:64:4B:23:8B:5E:25:24:FD:55:A9:0D:B7:12
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer:       /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial:       019BF42BA9F27593614CBA84E829125CBCAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number:          1805
Signing time:             Sun 25 Jan 2026 08:01:00 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:00 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:00 +0000
Files and hashes:         1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
                          2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
                          3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
                          4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: oTDJj7Yn+anpJNm3fHvLMRpetRDh2uvUr7Rj6LF3u8c=)
                          5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
                          6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
                          7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
                          8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
                          9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:a9:f2:75:93:61:4c:ba:84:e8:29:12:5c:bc:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
        Validity
            Not Before: Jan 25 08:01:00 2026 GMT
            Not After : Jan 26 08:01:00 2026 GMT
        Subject: CN=81360fd558006d644b238b5e2524fd55a90db712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:3c:47:43:92:f5:eb:41:86:21:6a:a8:78:
                    0c:6f:14:e3:b0:b4:a2:46:77:ef:2e:fe:df:1d:a5:
                    a0:9d:ad:65:4e:79:0e:34:9b:66:19:bf:03:d3:c9:
                    d2:f9:4b:01:7e:1e:bd:b0:28:bd:3d:0c:6a:8a:49:
                    38:72:be:57:ae:f3:ad:98:84:96:34:e2:2b:3e:5f:
                    38:6b:ab:e4:48:d3:60:57:f7:a1:47:72:4a:71:df:
                    7a:a8:b0:60:68:04:24:8c:da:28:4a:a0:db:28:43:
                    06:4f:0e:70:41:2b:a4:b9:16:97:29:52:2f:51:e0:
                    d7:51:e3:ce:c1:cf:57:83:ed:44:7a:a0:fc:1f:4e:
                    49:2f:2a:de:1c:03:2d:79:a0:99:a7:ec:31:07:27:
                    2c:1c:8b:4f:af:06:a1:5b:5a:aa:b5:ef:70:35:86:
                    ca:fe:ff:69:9f:77:90:0a:82:4c:51:8b:18:bf:33:
                    f9:51:04:f7:f0:3b:92:7a:eb:f4:b3:7c:c4:32:e8:
                    25:13:0d:7d:b0:41:eb:c2:c6:9a:14:00:ec:e5:35:
                    53:b4:7e:42:69:e5:07:ab:83:b1:1f:30:2f:7c:8a:
                    a9:cd:77:85:32:2c:ee:20:c3:89:71:5a:58:41:5f:
                    a6:58:ae:d2:43:6a:e4:d8:9a:12:9f:41:52:f2:2b:
                    e4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:36:0F:D5:58:00:6D:64:4B:23:8B:5E:25:24:FD:55:A9:0D:B7:12
            X509v3 Authority Key Identifier:
                keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:54:82:ff:db:90:81:8f:17:6d:2d:19:83:8f:a3:23:ea:f9:
         03:e2:db:48:c4:6e:6c:3a:51:5e:fe:20:4e:d4:e3:ff:7d:85:
         19:c3:58:28:bd:95:27:af:cc:f6:1a:c7:8e:e4:91:c7:18:e4:
         82:fa:eb:c9:c8:0f:59:0a:bb:5c:6c:a0:1e:1e:5c:b7:79:32:
         22:6c:6e:0d:50:fc:45:68:e1:e7:05:fd:db:05:5b:bb:16:2a:
         3c:73:a1:ad:ab:f4:db:f1:49:90:23:84:39:60:ae:f4:35:d5:
         5e:11:58:8e:27:41:20:9d:94:2f:8f:b0:3c:a7:c7:ad:09:d4:
         62:ca:24:ca:81:ad:0c:47:02:49:77:cd:e1:31:de:45:05:40:
         8f:fc:da:70:15:37:c5:a8:82:2f:7c:d2:0c:3d:b6:ea:c7:83:
         28:61:cc:ed:35:3e:5e:d3:9b:d1:8c:dc:ca:e1:58:91:36:65:
         96:f9:1e:9e:16:ee:10:70:78:b9:78:17:27:87:5e:d6:26:cd:
         84:a1:d1:e9:07:05:a2:d5:b2:f0:7f:1e:6c:f6:0a:09:8a:a1:
         23:a3:11:b3:38:78:15:4c:82:9e:0a:93:61:60:d1:10:91:e0:
         2e:85:11:99:27:79:b6:b9:b9:84:aa:8b:61:c1:d5:6c:59:23:
         04:f9:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:55 2026 by rpki-client