This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File:                     NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier:          90KR8miw+afsifAf09UyXBJr01KB41Y0VeRhD/akhKM=
Subject key identifier:   4B:04:41:EA:63:7E:74:EE:71:D3:F6:E1:6B:8C:07:AF:D4:89:A0:30
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer:       /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial:       019BF72CFAB0BE564E6FE11DCD63CC6C37F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number:          080A
Signing time:             Sun 25 Jan 2026 22:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:18 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:18 +0000
Files and hashes:         1: 4OrfC0gESmi91J763IQoNP33VaY.roa (hash: UOBol6M5aYlHh1KzK/jjTCQLc+/4wpm6CbL5n4iAyts=)
                          2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: ohp/MPTlUspWqYpe1L1JIKYZQUxHZxqYSEj9IsTgyNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:fa:b0:be:56:4e:6f:e1:1d:cd:63:cc:6c:37:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
        Validity
            Not Before: Jan 25 22:01:18 2026 GMT
            Not After : Jan 26 22:01:18 2026 GMT
        Subject: CN=4b0441ea637e74ee71d3f6e16b8c07afd489a030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:9f:5d:de:22:f0:cc:60:86:a5:40:49:ee:
                    64:47:3e:63:55:e5:a1:84:d2:72:0f:cb:b7:74:74:
                    0e:6e:b0:23:87:cd:f9:2b:05:3b:99:d9:14:14:fb:
                    fe:17:37:5b:ff:f2:d0:95:1a:70:3b:c0:e1:c4:84:
                    ad:b4:2d:a8:ef:71:ef:89:6c:ca:cb:7f:08:b0:56:
                    7e:4a:ed:d8:0e:5b:4a:da:30:0e:17:2a:15:b3:c6:
                    bf:00:d8:53:ae:27:54:3f:9e:a0:44:c9:99:39:4f:
                    da:83:ae:8f:3d:63:8e:74:b1:f8:71:9a:07:9f:23:
                    4a:8b:8a:ff:c6:a2:e9:ad:ad:9e:80:59:05:bb:e0:
                    b3:26:cb:37:e1:52:bd:45:30:99:e1:09:c4:b5:f0:
                    a8:93:39:6c:a3:e6:07:76:a4:34:ac:4d:68:1c:4e:
                    c2:f2:56:ac:ac:8d:83:eb:39:6e:d9:09:17:c1:b5:
                    17:a6:f6:a0:26:ff:d8:24:2b:c9:bd:2e:88:4f:fe:
                    47:51:33:7e:bf:aa:87:cc:e0:10:26:39:3e:7c:f1:
                    09:c5:b0:9b:aa:a4:4a:82:5b:c3:6c:a5:26:88:7d:
                    b0:93:d4:48:d3:d2:10:1b:ab:85:90:3e:00:9b:ec:
                    93:f9:fa:ef:98:f1:96:4e:e5:95:e4:12:61:03:b9:
                    a1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:04:41:EA:63:7E:74:EE:71:D3:F6:E1:6B:8C:07:AF:D4:89:A0:30
            X509v3 Authority Key Identifier:
                keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:fd:a5:ab:86:47:e4:3d:a9:a0:a9:74:50:5e:c8:98:03:00:
         99:fa:18:ef:0c:7b:7b:97:1d:e9:af:b7:df:d9:43:d0:d5:d6:
         2a:86:a6:36:df:73:c5:a5:fe:e0:dc:15:b3:1c:1f:92:6b:ab:
         5e:85:55:bc:bd:83:b4:08:e5:be:e7:c4:7a:68:63:b5:5b:54:
         2d:4e:e5:95:78:c8:e5:77:39:87:ca:09:d8:6b:2b:1c:6c:3c:
         c2:0b:03:96:21:01:7c:13:45:7f:a4:06:6c:35:8e:4b:53:7b:
         6b:7f:49:f2:1c:95:f5:75:5b:99:c6:13:7d:cd:5c:a6:18:03:
         fa:25:fb:e9:39:c5:37:bb:9c:07:e2:78:e5:d3:7b:99:04:8b:
         c2:de:ab:26:8e:41:1f:f1:40:3e:bc:d3:ac:d4:ba:ca:ae:1a:
         d6:29:e5:26:36:68:83:ab:f0:06:84:b6:59:b2:89:f4:3c:9d:
         6b:35:94:94:4e:4f:35:10:68:01:95:ad:48:f8:63:5a:61:17:
         55:64:fc:23:87:8e:c5:1c:83:da:9b:b0:35:49:99:e7:46:93:
         a6:da:be:01:b2:f4:aa:c0:b7:57:0d:4b:5f:27:69:72:5e:ee:
         99:73:f0:8d:b3:fa:7e:56:a0:29:4d:a5:af:84:69:4e:f1:5e:
         72:6c:df:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:12:05 2026 by rpki-client