This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          DoMcPWKkLv3VeTF05XLLOhOrlROky+ao/HGhe5GEVfk=
Subject key identifier:   F6:C9:07:23:F5:1B:8F:11:93:E7:3D:85:F4:1C:7B:16:8A:41:4B:2C
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019C2A75382D8B28698CB282BA5722E60BA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          1503
Signing time:             Wed 04 Feb 2026 21:00:50 +0000
Manifest this update:     Wed 04 Feb 2026 21:00:50 +0000
Manifest next update:     Thu 05 Feb 2026 21:00:50 +0000
Files and hashes:         1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
                          2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
                          3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
                          4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
                          5: 5lQ9rixfmqRXxii30JKkmR03sr8.roa (hash: iF1NyTDi0aWK3rGC4FTsYT+Tf9o3Dfjcwz99TIaRhHY=)
                          6: 6zhEBi2rGIO6yvp94BAc87oo8NE.roa (hash: buQwiuRKOBq+4oEs1t78Z05UhT+uvb28X3BhlGXBURY=)
                          7: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
                          8: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
                          9: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
                          10: E2F8QJnesLz_AJ_idudS8beXQtA.roa (hash: Du6ux9WA5KEGcJVYYMPZ9Mo1WXuEbp8iOUzzcljxT9A=)
                          11: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
                          12: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
                          13: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
                          14: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
                          15: Mb53TN6yKD50A2de1Ozhdge4mrQ.roa (hash: 2V1e3M/tFnuzlchzZk/LCxvBGVvryU2uaQdSfsUPEKA=)
                          16: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: zgsFJByaPjByParpQewHBebtA14Gh0TCpvxPvJt9j6U=)
                          17: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
                          18: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
                          19: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
                          20: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
                          21: ZG3wywvA41qfbz9i4FHPo7ZoiQY.roa (hash: D9m8ewpfk0R2qV4OYq5Yah9WUER9Xli2U4ySGQlIqKI=)
                          22: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
                          23: d86MwxgfI9gjW7CGjwxI-JaRW1s.roa (hash: xIHPRrrCU0ih0D3JryzXxRHn67n+x1kgKoKVs/EKszE=)
                          24: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
                          25: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
                          26: laoq5W7HYkYx_OxTQ0mAaU-nLuU.roa (hash: DnEkXC+hsSS//DzJYtB8xpxphGulUc/FEkbBxzWWEJs=)
                          27: niUr6FHPmgY6CtuAz4gWdWka0MA.roa (hash: IuoDMTxSe/qrJgdwIn4nlwn1wmvo4BWmMWaqX2zRdbA=)
                          28: q5nWFGJRWtF973Oh4L4NdFyWU7w.roa (hash: cPGcwwvhLGFvvVWvZDvkrAQGcbfROxYZMG3UWVyN8E0=)
                          29: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
                          30: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
                          31: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
                          32: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2a:75:38:2d:8b:28:69:8c:b2:82:ba:57:22:e6:0b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Feb  4 21:00:50 2026 GMT
            Not After : Feb  5 21:00:50 2026 GMT
        Subject: CN=f6c90723f51b8f1193e73d85f41c7b168a414b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:7e:88:f2:37:f0:10:9c:b9:18:90:6e:50:
                    36:01:c3:c0:1b:98:25:df:3f:ba:c9:9b:5c:fc:67:
                    2e:0c:80:95:cd:6f:38:79:49:fd:0b:1c:50:68:a5:
                    e6:4a:bb:9f:23:66:4c:0c:26:91:7c:ed:65:c8:57:
                    fd:c4:c1:f1:06:50:0f:93:17:99:82:b4:25:72:45:
                    3a:b6:ae:fc:e7:57:8f:51:aa:31:61:59:4d:55:bf:
                    23:38:51:74:39:f1:32:a4:d7:1f:2e:0d:85:fc:ed:
                    42:e0:59:ea:57:9d:97:74:f4:ea:a7:7e:af:e5:9e:
                    2b:b0:8e:e7:a5:ea:2b:a3:c1:bd:c0:f1:bd:8d:4c:
                    e6:0f:d7:1c:6b:8a:42:22:e7:98:64:a5:e4:14:29:
                    6e:c6:cd:5a:3d:4d:ee:24:88:65:cf:b1:2d:72:c9:
                    e9:73:bf:b3:c0:5d:db:4d:45:60:1d:46:6a:6b:f0:
                    9c:8c:be:55:0a:cb:ff:4e:c2:4d:35:ff:33:24:d2:
                    0b:a8:9d:6d:12:66:60:5e:40:e5:12:80:43:bc:11:
                    ad:0b:de:c9:9a:a0:a4:1c:3f:89:5e:37:99:f4:e0:
                    39:1c:20:f9:76:b2:27:87:34:06:e4:d8:33:0e:9e:
                    e0:cc:30:9d:3d:48:63:14:7b:d1:e3:77:45:42:f5:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C9:07:23:F5:1B:8F:11:93:E7:3D:85:F4:1C:7B:16:8A:41:4B:2C
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:5f:bf:3a:9a:e6:b7:d1:f8:bc:bc:1c:57:83:33:62:da:90:
         34:f9:24:cc:75:6a:84:d3:1e:f5:db:20:96:65:38:d1:a9:7e:
         dc:16:54:d0:02:74:72:57:93:35:bc:12:d5:7a:4a:2c:90:c8:
         f6:12:df:84:9e:fa:3c:d5:07:d6:eb:fc:bc:78:32:34:a2:d8:
         c9:61:e0:49:e1:bf:23:92:ad:f2:ba:2a:63:f1:57:89:2c:fd:
         97:93:5c:6c:70:58:02:6c:45:69:a4:3d:dd:7a:90:0b:8b:05:
         c7:63:60:10:2e:0c:4f:31:c3:da:91:1c:d7:fb:34:6a:12:83:
         f0:42:71:3b:63:04:a2:56:b2:06:4f:d4:2c:69:35:6e:0d:91:
         ef:4e:33:31:30:d6:8b:8b:50:4e:7e:ec:1e:9d:d4:66:84:9e:
         c8:84:f1:d4:96:a6:40:55:1b:98:1f:d1:36:ac:44:a4:fa:f9:
         53:bc:e4:16:94:4a:36:7e:57:b7:3b:d4:7d:b6:81:73:00:99:
         94:62:dc:cb:83:d6:1b:44:2e:13:ca:f0:f1:a9:09:82:7c:bc:
         6b:39:80:b4:89:5a:51:0c:15:75:cd:d1:07:fb:27:3d:87:90:
         c2:70:cd:98:e4:08:51:f7:ed:52:0c:26:fd:c0:47:6b:0a:d2:
         3f:1b:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 04:27:55 2026 by rpki-client