This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File:                     N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier:          c6YVS4bHJz7CyZ4fpGJwvzigu9m+9ywAURpG0USLjxM=
Subject key identifier:   CF:41:06:D9:3A:60:1C:EE:CB:F7:17:D4:BD:C7:88:EF:8E:E5:60:A0
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer:       /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial:       019C243C0568307BBB4FC14A0FDAEB0C4AEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number:          154C
Signing time:             Tue 03 Feb 2026 16:00:39 +0000
Manifest this update:     Tue 03 Feb 2026 16:00:39 +0000
Manifest next update:     Wed 04 Feb 2026 16:00:39 +0000
Files and hashes:         1: BRqvv0WLo99f8-G6ZIvnAk91o6g.roa (hash: qc6EEB2pPtQsZCtqVNu01mKKLXS0k3ijeSm0ChzNPbs=)
                          2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: NCuUdH3x1j4em1uBvsCAix5bA/d9Qe+wn6zWxwJbc+U=)
                          3: WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa (hash: Mk5FHbgOkd1RMCXgBYHYmcVT6F73CxCfoHTOc1sFbTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 16:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:24:3c:05:68:30:7b:bb:4f:c1:4a:0f:da:eb:0c:4a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
        Validity
            Not Before: Feb  3 16:00:39 2026 GMT
            Not After : Feb  4 16:00:39 2026 GMT
        Subject: CN=cf4106d93a601ceecbf717d4bdc788ef8ee560a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:73:bf:ce:69:e1:b0:0a:2a:d2:10:e2:f7:
                    96:78:94:65:77:1b:3d:43:9f:23:59:76:c9:aa:b4:
                    cf:31:fd:4f:7b:5c:b9:d7:ae:2e:89:c7:ac:ab:4a:
                    ed:5a:57:42:2c:8d:8d:b8:93:23:ba:04:72:26:d8:
                    85:15:da:f0:0c:af:45:ed:df:0d:39:71:c2:10:a2:
                    8f:65:a4:11:5d:fd:d0:1f:6c:67:92:ac:ed:73:67:
                    eb:d9:b6:83:6f:53:39:7c:46:96:3f:02:b8:55:ef:
                    e9:b0:54:c7:6d:0e:27:55:e9:cf:09:30:d0:17:7a:
                    23:95:c3:af:1d:be:1b:b6:7b:88:96:d5:c2:53:ad:
                    7d:07:97:68:21:5f:fc:12:7a:9e:9f:c1:af:24:cf:
                    1d:cd:a9:2f:91:09:4a:da:06:c3:68:f5:f7:6b:92:
                    6a:a6:0c:95:39:d0:18:13:44:89:a5:99:3b:43:df:
                    fe:5c:d0:ac:47:a0:dc:76:47:8c:29:8c:8b:42:1d:
                    09:0e:f9:7b:d3:30:37:80:a9:5c:81:e1:b1:7f:87:
                    d2:0a:e3:6c:1b:98:50:7a:64:cc:d6:ce:c7:79:83:
                    cc:8e:f2:76:0d:7a:07:c0:03:4a:46:0f:14:dd:6c:
                    ac:3c:2d:8e:1b:44:d0:2b:f5:9b:04:6b:e7:d4:21:
                    30:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:41:06:D9:3A:60:1C:EE:CB:F7:17:D4:BD:C7:88:EF:8E:E5:60:A0
            X509v3 Authority Key Identifier:
                keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:80:da:7b:0e:ea:63:a6:ba:5b:26:ea:68:df:8b:6f:75:c9:
         03:36:95:e8:49:10:7b:4b:99:e3:54:44:48:6e:47:e1:11:1b:
         3f:ed:80:42:2e:70:9c:ab:9a:cf:bc:a2:06:87:42:a0:7b:e9:
         21:96:f6:42:9f:70:2c:e8:73:fd:16:7e:19:62:c5:fe:00:be:
         8b:e9:5d:93:a0:97:c2:01:b6:be:5b:e9:77:41:c2:33:4e:d5:
         1a:82:c2:98:f3:ba:ed:66:1f:08:27:e8:57:3f:91:97:bf:87:
         fb:12:cc:13:7e:3f:cd:1b:ab:f9:06:df:8b:9c:74:20:05:d1:
         42:2b:bc:f9:23:aa:81:27:7b:24:39:8d:3f:64:08:66:3b:f7:
         c6:55:6c:19:6b:a8:fd:36:59:2f:ac:bc:1a:13:a6:6b:2c:e1:
         b8:77:f5:d1:ae:96:71:b7:70:96:7a:5e:e1:2a:dd:b2:e2:d8:
         24:95:e8:5a:36:03:81:d5:68:99:42:2a:62:8f:bc:98:b2:da:
         68:e1:68:76:4f:43:a3:a2:d4:17:e5:9c:b8:ed:19:be:60:10:
         05:62:a1:84:b6:15:6b:c4:9a:e5:58:ec:66:67:01:16:a6:92:
         14:d6:fb:f5:00:78:ea:0a:b1:b5:f5:b0:00:98:de:fd:50:fe:
         c3:90:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 02:18:36 2026 by rpki-client