This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
File:                     nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json)
Hash identifier:          n4Nq4y3L+LWxOfYMVCgbzwsRXfKa3XK0L84Om+aTLjo=
Subject key identifier:   53:B3:D3:7F:0F:0B:F0:DC:76:42:BE:EB:03:9F:B1:B4:31:E0:F8:A4
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Certificate issuer:       /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial:       019BFC52AEF8CD947B49F1EDB7D9BB3412A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
Manifest number:          17ED
Signing time:             Mon 26 Jan 2026 22:00:35 +0000
Manifest this update:     Mon 26 Jan 2026 22:00:35 +0000
Manifest next update:     Tue 27 Jan 2026 22:00:35 +0000
Files and hashes:         1: 9mAFKAFsUumaxtmwKspIguWpn-U.roa (hash: nsAVacl7HwId/rvDGUKYBOPV9fj57SBoEJyC2HRo14U=)
                          2: BxdvpbQ1TKYOcJrk4RGzX3RxD8c.roa (hash: sKqXvC0ALWhzVadZLxtC2ynHl4YiU5G3hQTuNpmHk34=)
                          3: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: 2dbj4uOM5nOf4fyOKN7rwn2NrCHLoM2gSL7N41n49wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:52:ae:f8:cd:94:7b:49:f1:ed:b7:d9:bb:34:12:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
        Validity
            Not Before: Jan 26 22:00:35 2026 GMT
            Not After : Jan 27 22:00:35 2026 GMT
        Subject: CN=53b3d37f0f0bf0dc7642beeb039fb1b431e0f8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:11:53:e9:c7:ec:db:06:3f:d5:08:10:7c:55:
                    75:43:4d:9c:8c:8b:a9:0c:b9:96:44:9a:67:03:3d:
                    15:fa:cb:f3:44:6b:47:f4:15:e1:15:59:6a:96:96:
                    d2:d3:0f:82:d9:b3:78:5a:a2:cf:2a:81:ee:88:a5:
                    4d:46:34:7c:03:20:f4:0d:2c:aa:d4:a6:ed:6d:78:
                    36:48:1d:d9:aa:cb:0b:61:76:48:bc:c1:b1:8a:be:
                    60:46:08:8c:62:29:11:ef:fe:ee:c5:04:64:da:5f:
                    1f:77:d7:6b:9b:df:cd:ba:2f:c9:5f:d6:22:c5:bb:
                    20:90:d0:a4:2d:7b:ff:3f:47:c5:9d:f0:ca:51:3e:
                    57:8e:93:98:f1:5c:7f:66:b2:48:24:5e:d7:03:c6:
                    15:a4:1c:9e:9e:ef:97:0e:7c:63:73:e2:bc:6e:d4:
                    1f:44:9d:59:f3:a8:c5:84:65:02:ed:19:15:40:dc:
                    95:57:b6:de:b1:b4:e3:bc:65:9e:a9:1f:c8:08:fe:
                    b9:81:f6:a3:86:f8:5b:2a:a1:00:08:26:4b:58:80:
                    28:64:c3:5d:f7:48:ef:60:e3:03:94:eb:2d:e1:a4:
                    3f:bb:73:21:cc:31:b7:5e:a9:af:7a:8b:03:d0:b9:
                    46:27:6f:bc:f6:90:cb:60:e5:fa:90:e6:67:71:03:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B3:D3:7F:0F:0B:F0:DC:76:42:BE:EB:03:9F:B1:B4:31:E0:F8:A4
            X509v3 Authority Key Identifier:
                keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9b:19:5f:fb:2c:a4:08:49:18:06:bd:75:04:d3:b3:b0:2e:
         22:65:7d:bb:d0:5c:cb:cb:a3:76:bc:06:47:03:14:17:2d:62:
         48:2a:9f:a9:fa:25:6d:65:88:8a:f7:50:b7:0c:6b:5e:11:49:
         44:c0:c6:b8:e1:c7:23:bf:52:65:a4:db:48:f7:f6:f7:d6:1b:
         e8:28:cb:16:f5:5b:26:2a:34:6d:61:ba:66:f6:7d:62:8b:79:
         55:88:2a:16:2e:b3:62:99:36:05:7f:d6:47:a2:a3:bd:f0:1b:
         0f:41:1d:32:75:be:75:e3:43:5c:0b:c2:da:0b:f9:ec:e6:85:
         d7:66:2d:67:1b:b9:22:ad:5b:7d:74:84:cd:fb:0f:9a:b8:91:
         a5:66:3e:af:fa:83:5a:a1:87:1d:78:4b:14:a7:db:1f:8b:d6:
         1a:1f:86:6c:ca:76:79:da:ef:6c:0e:78:4c:08:be:47:43:1b:
         e6:be:72:a2:a1:e2:f9:b8:98:92:d0:7e:fe:fd:6c:91:d3:0d:
         2e:de:f5:45:b7:03:a1:78:46:1b:16:42:70:ad:cc:90:1a:49:
         0e:04:11:8f:44:85:8d:d9:af:7d:df:9f:86:26:65:ca:78:1a:
         7a:73:64:0f:94:7a:3a:13:cc:a7:43:e6:82:69:f5:21:fe:fd:
         72:cd:5e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:17:37 2026 by rpki-client