This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
File:                     NIMjF9JURDS2WeVpIHHY5MSTiwY.mft (raw, json)
Hash identifier:          bLoc/YQ0jVShobNdq13+c5UqWtqbMYRRHsnIynvQNqU=
Subject key identifier:   6A:CD:68:35:F3:5B:06:26:63:C3:87:8C:8C:A0:BD:FC:9B:CF:0B:6D
Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
Certificate issuer:       /CN=34832317d2544434b659e5692071d8e4c4938b06
Certificate serial:       019BD6C5F0B77A69673D708F854505180B90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
Manifest number:          054D
Signing time:             Mon 19 Jan 2026 15:00:54 +0000
Manifest this update:     Mon 19 Jan 2026 15:00:54 +0000
Manifest next update:     Tue 20 Jan 2026 15:00:54 +0000
Files and hashes:         1: MtXK992XQ-M-hmv_KStvnyh-x5Q.roa (hash: M8VsnjB/uw1FiI9xmVKpQrIIX0KwLuaKoIKTTuviTH8=)
                          2: NIMjF9JURDS2WeVpIHHY5MSTiwY.crl (hash: nqlecU5bsQxR7JTd6sTxprBqyF8KdoFESbkrwnzcilw=)
                          3: S3-C960eDjtkhmLESJEggehwHME.roa (hash: eXKQYhtmCASg+7u8rDqDnt6Fk8AoSBqR8NO1VXIyQ3c=)
                          4: r5VTzB_D--LT6ft6QpgyIKkudbM.roa (hash: 3oNMl/b2gquyHJLZema+rIR0bUrcCM54+yp4fRS/DTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d6:c5:f0:b7:7a:69:67:3d:70:8f:85:45:05:18:0b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06
        Validity
            Not Before: Jan 19 15:00:54 2026 GMT
            Not After : Jan 20 15:00:54 2026 GMT
        Subject: CN=6acd6835f35b062663c3878c8ca0bdfc9bcf0b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:67:4b:8d:bc:01:17:1f:dd:bd:74:36:8f:45:
                    da:f6:d1:44:d6:44:f9:87:73:d8:32:a8:8f:26:6c:
                    eb:67:fc:41:ac:0b:ed:2a:46:ea:dd:00:ae:30:5d:
                    7a:2d:69:dc:69:e5:70:4d:81:f1:12:09:59:e3:77:
                    fd:58:2b:f5:b1:b8:ae:86:33:97:f4:05:b7:2d:60:
                    67:4d:8c:28:bf:d2:bd:74:9e:ee:7e:64:98:0d:06:
                    d4:f1:80:3f:88:72:3c:bd:7a:9a:96:f8:fa:f3:6d:
                    de:3e:24:79:c0:83:ae:bb:b9:7f:9f:cc:3b:4e:6c:
                    15:f2:18:db:0e:7b:9e:5b:39:ee:2a:0f:de:3b:2c:
                    3c:50:fc:b7:16:51:81:e5:b9:89:b3:5b:91:33:7d:
                    66:e8:b1:cd:83:cc:c0:ea:37:da:95:46:de:8b:d2:
                    35:79:8e:11:0b:08:ba:1b:61:a5:a9:a3:55:3a:99:
                    0e:d8:b2:f2:51:09:21:12:5f:7b:d4:3b:03:09:32:
                    79:6d:e3:53:c2:ee:c0:d3:ca:92:f9:0f:4a:21:2a:
                    61:9c:57:9e:7a:ce:fc:ac:60:2b:79:65:cf:f7:6a:
                    5e:fc:91:a6:f4:02:79:41:a5:41:67:11:58:cf:b9:
                    8a:4f:43:0f:c7:3e:cf:d5:47:cc:98:fc:da:9c:24:
                    b8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CD:68:35:F3:5B:06:26:63:C3:87:8C:8C:A0:BD:FC:9B:CF:0B:6D
            X509v3 Authority Key Identifier:
                keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:40:b8:6f:11:17:72:8c:ce:53:7c:cf:d6:26:a7:d3:3b:92:
         7a:40:ed:4e:1d:b4:f0:83:b5:e0:d0:22:32:fb:fd:7b:37:12:
         f0:16:8f:b7:1e:4b:1f:23:3a:d5:a5:06:70:6e:c7:8d:d8:5a:
         f0:7c:85:c2:f8:9e:55:1f:15:be:04:4f:29:0d:de:4c:25:8b:
         8b:b4:9f:37:f0:86:2a:88:d3:55:15:12:c5:37:8f:8a:be:2f:
         bd:c9:c7:f0:1b:c1:62:06:ff:81:89:57:d9:a3:8d:55:d9:35:
         76:b4:87:9e:eb:cc:52:83:72:92:97:fd:5c:23:db:30:1e:c0:
         dc:a2:03:7f:01:39:a0:06:d0:8e:65:ac:e1:7a:88:7c:29:be:
         0f:89:e1:2c:68:e7:06:ec:68:c5:fb:39:89:ef:c9:97:d6:39:
         95:04:d2:8c:e6:24:6c:bc:27:a8:a4:12:ea:6f:bb:e9:59:18:
         d9:22:d0:5e:ca:75:1a:9c:a0:47:4e:4f:00:3d:07:84:0d:1a:
         d2:1a:39:d7:62:9f:96:f4:2d:49:1b:0e:00:19:fe:56:15:e7:
         cd:c8:ac:8a:65:95:d4:23:59:bc:07:8a:0f:d1:7f:a5:e5:bd:
         5c:d8:bc:8a:e8:04:ae:75:9a:97:7d:ff:af:d5:14:f9:13:2a:
         6c:8d:8b:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvWxfC3emlnPXCPhUUFGAuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ODMyMzE3ZDI1NDQ0MzRiNjU5ZTU2OTIwNzFkOGU0YzQ5
MzhiMDYwHhcNMjYwMTE5MTUwMDU0WhcNMjYwMTIwMTUwMDU0WjAzMTEwLwYDVQQD
Eyg2YWNkNjgzNWYzNWIwNjI2NjNjMzg3OGM4Y2EwYmRmYzliY2YwYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/WdLjbwBFx/dvXQ2j0Xa9tFE1kT5
h3PYMqiPJmzrZ/xBrAvtKkbq3QCuMF16LWncaeVwTYHxEglZ43f9WCv1sbiuhjOX
9AW3LWBnTYwov9K9dJ7ufmSYDQbU8YA/iHI8vXqalvj6823ePiR5wIOuu7l/n8w7
TmwV8hjbDnueWznuKg/eOyw8UPy3FlGB5bmJs1uRM31m6LHNg8zA6jfalUbei9I1
eY4RCwi6G2GlqaNVOpkO2LLyUQkhEl971DsDCTJ5beNTwu7A08qS+Q9KISphnFee
es78rGAreWXP92pe/JGm9AJ5QaVBZxFYz7mKT0MPxz7P1UfMmPzanCS4ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrNaDXzWwYmY8OHjIygvfybzwttMB8GA1UdIwQY
MBaAFDSDIxfSVEQ0tlnlaSBx2OTEk4sGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTklNakY5SlVSRFMyV2VWcElISFk1TVNUaXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81YTJlZDktOGY4ZS00YzFkLWFhZjMt
MzBjNjVhZDgzMjkxLzEvTklNakY5SlVSRFMyV2VWcElISFk1TVNUaXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81YTJlZDktOGY4ZS00YzFkLWFhZjMtMzBjNjVhZDgzMjkx
LzEvTklNakY5SlVSRFMyV2VWcElISFk1TVNUaXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEC4bxEX
cozOU3zP1ian0zuSekDtTh208IO14NAiMvv9ezcS8BaPtx5LHyM61aUGcG7Hjdha
8HyFwvieVR8VvgRPKQ3eTCWLi7SfN/CGKojTVRUSxTePir4vvcnH8BvBYgb/gYlX
2aONVdk1drSHnuvMUoNykpf9XCPbMB7A3KIDfwE5oAbQjmWs4XqIfCm+D4nhLGjn
Buxoxfs5ie/Jl9Y5lQTSjOYkbLwnqKQS6m+76VkY2SLQXsp1GpygR05PAD0HhA0a
0ho512KflvQtSRsOABn+VhXnzcisimWV1CNZvAeKD9F/peW9XNi8iugErnWal33/
r9UU+RMqbI2Luw==
-----END CERTIFICATE-----
Generated at Mon Jan 19 18:28:53 2026 by rpki-client