This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
File:                     n2m9-bvSpFl-Js4gv-E4YkytM9w.mft (raw, json)
Hash identifier:          RF4xkZ12Mbn60b9z8pr/wLqNtp//R1YB3E6003xUcUM=
Subject key identifier:   86:87:EE:A1:A1:01:AC:D2:2C:ED:84:33:EF:83:E7:60:3A:ED:A3:D3
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Certificate issuer:       /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial:       019BFCF7FD4F2AC89E42768B58F2E321EE98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
Manifest number:          17F0
Signing time:             Tue 27 Jan 2026 01:01:09 +0000
Manifest this update:     Tue 27 Jan 2026 01:01:09 +0000
Manifest next update:     Wed 28 Jan 2026 01:01:09 +0000
Files and hashes:         1: ax-_Txj0CX184s7yaQUE1z5JmL0.roa (hash: SkAHqlZ+jgnUZoHQzNhptAmXxqgxJ8UA0ILHaB/nBhU=)
                          2: n2m9-bvSpFl-Js4gv-E4YkytM9w.crl (hash: jCVNsB8KjIqByiOt+VKhbaLbgySaaBUb3wVTNSssmMo=)
                          3: s3L0l4qF3K7jw8TMCiB-9AN71UI.roa (hash: 0RGzdmuY2tV2GXNZ55W5LJa/3HUtCfJOAjKYME+51vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:f7:fd:4f:2a:c8:9e:42:76:8b:58:f2:e3:21:ee:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
        Validity
            Not Before: Jan 27 01:01:09 2026 GMT
            Not After : Jan 28 01:01:09 2026 GMT
        Subject: CN=8687eea1a101acd22ced8433ef83e7603aeda3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:67:80:1c:5a:04:52:ab:fa:f9:dd:ac:85:68:
                    5f:5a:24:07:e4:14:14:5a:46:99:99:a2:b0:3f:73:
                    0b:50:f1:8c:7c:ae:c4:73:7d:48:f1:f7:86:16:88:
                    dc:c2:fb:c9:75:dc:ca:b2:f4:c1:3c:36:d5:78:29:
                    06:ce:ea:ec:53:13:8d:2a:6f:79:dc:de:b5:bc:8c:
                    2a:5f:92:5b:ff:bb:e8:15:a6:4b:ea:51:e0:7d:7b:
                    ba:22:17:32:20:40:a6:69:63:bc:08:f8:57:94:61:
                    cb:2f:1b:8c:8c:aa:00:73:6b:58:95:74:5f:cc:8b:
                    9a:a7:40:a8:ec:37:84:52:41:f2:2b:27:a1:62:ec:
                    64:99:07:75:7a:cd:f6:2f:1b:20:64:3b:dd:54:c0:
                    f9:6e:bb:a1:2a:c8:5a:fd:f8:f9:d6:e0:b8:10:6f:
                    a4:a5:59:b3:8b:0f:ac:a1:84:3d:a7:15:7d:a1:42:
                    b4:75:a3:aa:39:ce:1a:6c:2a:98:fa:0d:7d:63:1d:
                    0a:a3:8a:3c:2c:66:f7:61:6f:6c:31:c4:46:51:8c:
                    63:64:98:8b:6c:32:e3:01:5e:bb:52:30:3d:a8:40:
                    20:1a:b2:ec:fd:cb:cb:33:79:27:6b:15:58:b8:f9:
                    4a:29:a3:0b:93:8e:26:22:c9:a4:41:2c:a8:80:1e:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:87:EE:A1:A1:01:AC:D2:2C:ED:84:33:EF:83:E7:60:3A:ED:A3:D3
            X509v3 Authority Key Identifier:
                keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5d:00:f4:10:54:ca:62:33:d7:0f:6b:51:e0:bb:6f:6c:04:
         f9:b2:b5:3a:9a:98:0b:e3:7e:ba:47:70:6e:f0:04:11:b3:87:
         80:d4:b4:41:69:a9:ed:ad:93:76:f5:59:95:f4:0b:94:d6:61:
         e9:d6:c5:5a:57:f2:a8:88:e9:e4:5c:68:05:c1:d3:77:ea:b8:
         1c:03:24:cc:ce:4c:f6:ee:ed:c8:00:29:e3:2e:eb:4c:3d:d5:
         a4:e5:ea:d9:f0:e9:de:90:5c:88:1c:75:64:cb:2b:19:a7:50:
         7a:a5:2c:81:6e:e2:1e:69:29:de:36:da:cf:21:77:97:08:ea:
         65:96:8c:f9:c1:09:19:de:ee:d1:c2:60:38:b2:08:38:6a:bc:
         69:aa:ef:b9:a9:13:b4:5a:82:05:0a:00:67:fe:64:34:9c:64:
         e8:3b:98:e8:cb:b9:05:3b:c0:f6:d3:89:a5:41:bc:6a:c6:fb:
         88:b5:de:33:88:41:ff:eb:9a:53:95:cd:5f:c4:61:88:8e:e7:
         02:3e:b4:8e:2f:59:c0:ae:fa:84:73:e1:cc:f2:12:8a:08:5e:
         09:b0:16:4d:49:ba:c3:9c:90:0d:9f:9f:2e:fd:a4:7c:f7:af:
         09:ea:c4:61:dd:43:4a:d6:62:72:40:33:4e:1b:b4:97:b3:19:
         29:92:c0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:41:15 2026 by rpki-client