This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
File:                     n15P8s7k23qVvPKjrRHJR1dbsaY.mft (raw, json)
Hash identifier:          tAbIeS1kO+b65Of+P6B0ztcO5y2boh7ahEAARhoZC4o=
Subject key identifier:   4B:2E:5F:83:F2:25:15:5E:DE:82:0D:8B:1C:C2:93:C6:16:4A:1D:D5
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Certificate issuer:       /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial:       019B7D14B44408FAAE624B3DBD3A0EAC9744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
Manifest number:          0D2E
Signing time:             Fri 02 Jan 2026 05:01:07 +0000
Manifest this update:     Fri 02 Jan 2026 05:01:07 +0000
Manifest next update:     Sat 03 Jan 2026 05:01:07 +0000
Files and hashes:         1: jkMi5Y3UFgCK0cn1sZkX8r-KP9c.roa (hash: EXEli+Wg6YA+EC4JraUO/Ed+rqcKD/n9lm13wWOUAkY=)
                          2: n15P8s7k23qVvPKjrRHJR1dbsaY.crl (hash: IvlVq5do3sWrvATrPxaSLk+BdXLjiQXf/Gz67jqrkr8=)
                          3: ssMCTs8bK6eFQagUc6XQvNNJt9M.roa (hash: Ez0nES5Job0wKRYCfXv+7ubsmfBER3A3sxP8nRIZ91Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:14:b4:44:08:fa:ae:62:4b:3d:bd:3a:0e:ac:97:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
        Validity
            Not Before: Jan  2 05:01:07 2026 GMT
            Not After : Jan  3 05:01:07 2026 GMT
        Subject: CN=4b2e5f83f225155ede820d8b1cc293c6164a1dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:94:b4:91:91:e8:93:fd:87:2f:25:2b:71:
                    9c:78:24:1a:c1:6a:72:2f:df:a4:be:b0:27:8b:02:
                    39:f2:9d:23:6b:ad:e0:5e:14:00:c7:39:c4:a6:0d:
                    c3:6b:18:3d:cf:28:07:a5:14:1e:11:87:c6:1c:37:
                    e3:a0:c8:01:c0:7e:eb:ee:cd:dc:83:66:c1:c7:5b:
                    a9:e4:ff:1d:57:a1:f4:02:fc:cc:4f:fc:9c:8c:09:
                    2d:98:79:9d:66:03:c2:0f:73:85:4c:df:cd:87:f9:
                    f7:95:8d:d6:f4:26:49:f6:55:29:b4:3d:3c:ff:d1:
                    04:50:54:08:a2:f6:fa:33:a8:0c:ac:09:6a:9e:4a:
                    0d:b9:05:83:77:e2:6a:62:41:4b:13:f7:70:65:75:
                    ce:47:f8:ec:38:80:df:2d:01:af:c3:22:3c:f4:d0:
                    1f:8d:fb:88:07:5b:d6:9c:89:ec:20:24:96:a2:67:
                    29:64:b6:e8:2a:d6:f6:8d:ad:84:0a:04:00:5b:f8:
                    56:72:28:ec:f8:16:e1:4d:a8:4c:e4:a2:3a:7c:2b:
                    39:c1:f2:0f:78:30:6b:66:73:f3:19:68:eb:bf:f9:
                    f4:1b:e4:6e:1a:b7:0e:79:c6:05:3d:b6:ee:70:d2:
                    64:5b:74:7d:bb:2c:8e:e7:b7:9e:db:22:bd:95:6a:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2E:5F:83:F2:25:15:5E:DE:82:0D:8B:1C:C2:93:C6:16:4A:1D:D5
            X509v3 Authority Key Identifier:
                keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:69:c0:2a:27:c0:c0:d2:3c:14:3e:3b:7f:f8:53:79:4b:5a:
         24:c7:2d:13:ba:9a:94:7c:f7:71:d8:0c:5d:08:95:58:28:5f:
         1c:57:72:e3:c6:22:17:bb:49:69:34:6f:00:76:28:df:2d:49:
         c0:31:85:86:15:76:eb:6f:b1:0e:cf:22:9f:0d:5c:1a:2f:cd:
         24:94:ae:52:df:7e:51:f2:66:29:81:3d:03:0f:7f:8b:91:8c:
         9c:27:c4:83:4f:b4:7a:62:b0:ea:f3:8e:91:91:a0:21:49:ca:
         d0:54:8e:57:1c:1c:06:39:ee:48:58:e7:13:21:9e:01:79:ed:
         ab:76:e0:0f:61:d7:92:55:6d:db:c9:a6:2d:f2:9e:7b:85:68:
         87:e9:7a:94:ac:53:c1:27:2e:bb:4d:fc:08:f3:39:2d:99:55:
         23:4a:64:8e:08:0d:c2:c9:05:55:9c:38:b6:c1:8e:ee:9b:6b:
         29:3c:a0:30:94:49:9a:8f:36:0d:c0:7f:ee:49:c4:b9:e5:43:
         67:eb:ed:2d:07:a6:77:00:01:18:32:d5:27:ca:e2:c8:79:d3:
         32:88:68:a5:74:64:a3:2b:74:3c:15:0f:a8:10:14:69:ed:d8:
         25:4a:e4:48:ba:48:af:80:ba:b9:4e:72:bb:56:ac:d7:03:6f:
         63:9c:18:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 14:26:20 2026 by rpki-client