This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File:                     nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier:          5Zmot0JsrTkSdxAXv/0IUQzLbAVIggCJhde24krukck=
Subject key identifier:   D7:C8:7B:9A:06:C9:6C:9A:1B:50:38:2A:59:FC:07:EF:A6:71:28:45
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer:       /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial:       019BF98909E62CEEBAB07F9102762E890B19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number:          17F7
Signing time:             Mon 26 Jan 2026 09:01:06 +0000
Manifest this update:     Mon 26 Jan 2026 09:01:06 +0000
Manifest next update:     Tue 27 Jan 2026 09:01:06 +0000
Files and hashes:         1: 3bVeZ4jtU_nod0fE248hvJ8HwmE.roa (hash: tZeUGg3uohbozp0AKzn9i/jwYgDahKq/WKKbSHnm6EE=)
                          2: 4_3T9oqdjGNdYvgcmhfdmg2_xFk.roa (hash: C4ZhYpcFum0fbS3tRySUhTlzAuq5N1/9WgaAqXp5T1k=)
                          3: FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa (hash: oaE/hCDrQO5MgjbWzRph6lVm2avGrrJhXBmUB4OGEJY=)
                          4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: XanILw/4U64y/iM42ytEtbAoyjZqtn0X1waBNhGhCo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:89:09:e6:2c:ee:ba:b0:7f:91:02:76:2e:89:0b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
        Validity
            Not Before: Jan 26 09:01:06 2026 GMT
            Not After : Jan 27 09:01:06 2026 GMT
        Subject: CN=d7c87b9a06c96c9a1b50382a59fc07efa6712845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ee:d4:70:49:d2:41:60:fd:b6:3a:ef:66:5b:
                    86:f7:01:32:9a:17:58:ed:f3:23:54:3d:de:e4:22:
                    d3:8e:00:d5:90:50:02:8e:dd:d7:f9:b2:f5:d5:6c:
                    ef:ff:ba:bd:e4:47:73:81:c3:9d:9d:0e:1e:3d:11:
                    13:29:7f:b5:15:54:ec:f8:98:18:d8:1b:ba:b6:40:
                    1c:f4:89:ac:c3:b6:4e:0a:d1:b2:56:90:81:f7:19:
                    8d:88:cb:76:b9:55:92:63:aa:ca:51:f8:9d:1c:26:
                    d6:f3:49:ae:f9:5f:94:12:a7:44:38:1b:00:d0:d4:
                    2e:af:e2:d1:79:86:6c:b6:6a:be:83:e3:a1:cd:e2:
                    63:d6:5d:10:5b:6f:0e:b3:d5:d0:25:f0:ef:0f:e5:
                    8d:5a:d8:3e:28:1f:64:87:0f:52:84:f5:4f:95:29:
                    73:1c:a7:53:c5:a5:24:46:9f:63:e3:61:f8:fb:22:
                    b6:b2:93:0b:0a:e3:6d:69:53:0c:14:da:d5:f1:c8:
                    5c:2c:b2:34:13:f1:e7:9a:79:43:b2:95:18:c0:20:
                    0c:05:6d:a3:9d:0b:3a:ac:b1:b0:e1:3e:46:45:f4:
                    bd:8c:cc:f5:6d:d1:02:7c:16:c9:16:36:53:4d:bb:
                    7b:14:06:03:0a:64:c6:30:95:1e:c5:1d:e1:05:a2:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C8:7B:9A:06:C9:6C:9A:1B:50:38:2A:59:FC:07:EF:A6:71:28:45
            X509v3 Authority Key Identifier:
                keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:82:2b:f8:56:1e:b7:d3:f1:a8:4f:f0:e7:2d:20:bf:cf:c2:
         b3:c2:f0:ae:98:26:53:df:50:6f:bf:06:af:36:2e:01:e5:ca:
         56:91:eb:aa:47:21:4c:87:bf:9e:62:a0:b3:87:e0:9c:bc:83:
         72:ea:ba:bb:07:32:a9:80:d6:76:45:51:4f:2e:33:99:c9:30:
         3f:32:5e:10:d6:84:2f:d9:b3:88:da:e7:03:db:64:a4:0e:1f:
         d7:74:d5:aa:26:29:51:05:d9:79:e9:74:45:f9:8d:8d:ad:93:
         cb:81:21:6c:9d:53:17:b2:32:27:47:61:88:ac:d5:12:3d:76:
         08:50:e1:54:a8:84:0c:66:f3:b3:fc:2f:7d:42:27:f6:4b:84:
         bf:0c:54:b1:76:6b:16:cb:58:5e:8f:a2:bb:1b:0b:da:41:29:
         48:b3:15:bc:31:ae:52:58:7a:bc:a2:4b:40:bc:69:ac:3d:5b:
         c5:7e:87:e1:6e:4b:8b:95:fa:03:9e:72:9f:87:b8:bb:65:c7:
         c5:8f:b9:a7:93:a4:5e:fd:3c:42:b6:c2:97:e4:f4:86:3c:20:
         eb:59:91:ee:b8:41:93:5f:d4:0d:87:71:89:64:69:8f:83:39:
         a4:95:19:fe:35:ac:48:1a:63:2e:3c:bc:c6:74:b0:77:fc:49:
         ab:46:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:20:55 2026 by rpki-client