This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
File:                     RNPMWRzro4YTDzyfdCZFi4iHwus.mft (raw, json)
Hash identifier:          j1pDh25EKfzVB4bBtdEPqSCiEp/1gnDcT3vUfnEqSfY=
Subject key identifier:   56:DA:31:87:36:A8:69:A7:D1:9D:64:51:68:FF:5E:BC:DB:2B:D3:B1
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Certificate issuer:       /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial:       019C24E16EDF5A2C3B364AFA85F3CED23AD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
Manifest number:          082B
Signing time:             Tue 03 Feb 2026 19:01:19 +0000
Manifest this update:     Tue 03 Feb 2026 19:01:19 +0000
Manifest next update:     Wed 04 Feb 2026 19:01:19 +0000
Files and hashes:         1: QSPZWdBj02_wXIuy1IGBOnPdy1w.roa (hash: bUbRWWpDUh0QcX+CtlV8kusXAQJDODXxvoAaGuQVCaM=)
                          2: RNPMWRzro4YTDzyfdCZFi4iHwus.crl (hash: aQua7I7RrHAUst4hpIBWLApUi9JPbocQAHi6+iyOmpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:24:e1:6e:df:5a:2c:3b:36:4a:fa:85:f3:ce:d2:3a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
        Validity
            Not Before: Feb  3 19:01:19 2026 GMT
            Not After : Feb  4 19:01:19 2026 GMT
        Subject: CN=56da318736a869a7d19d645168ff5ebcdb2bd3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cb:42:a8:00:ae:ad:ca:0e:4f:c2:f9:08:83:
                    14:40:de:27:45:a1:53:d7:c5:1a:25:eb:a4:6a:4f:
                    f2:f7:66:c9:9d:40:7d:7b:b6:29:38:62:6d:9e:d2:
                    59:ee:2d:b2:f3:41:3c:cd:89:5f:ef:26:52:98:d1:
                    b8:92:82:a1:94:9e:fe:c3:c4:04:92:a8:0d:8f:c2:
                    f7:fa:0e:42:43:e5:1b:a7:02:db:5b:52:67:ba:8a:
                    d5:43:3a:84:e1:86:48:d2:27:39:72:34:b2:43:e3:
                    ad:12:ce:05:34:b3:4d:43:d2:29:9f:62:a8:99:80:
                    15:81:3c:81:35:8c:4d:5e:67:0a:dd:d6:0a:eb:2b:
                    62:44:85:24:ba:39:11:87:e0:e1:21:4d:80:c5:f9:
                    9e:8f:59:73:a8:ad:a9:61:68:52:32:46:75:26:52:
                    9a:8c:9e:b9:b6:f5:78:23:2b:9d:a3:07:5a:ba:5f:
                    ec:a3:3d:2a:eb:5d:e7:22:ac:95:48:0c:81:79:29:
                    16:4d:b5:24:dd:07:d6:f9:f6:a3:0f:c1:19:28:cd:
                    0c:34:e3:1f:b8:80:be:80:23:8b:59:ec:e5:3e:c7:
                    c7:7e:f2:16:d8:e9:86:31:02:f5:7f:14:a4:44:f9:
                    be:e2:3e:a0:f1:c3:e5:ec:8e:40:fd:de:41:2a:10:
                    2e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DA:31:87:36:A8:69:A7:D1:9D:64:51:68:FF:5E:BC:DB:2B:D3:B1
            X509v3 Authority Key Identifier:
                keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a7:ce:62:17:15:0c:72:21:26:cd:f3:cb:43:4b:3e:07:75:
         be:b8:9b:29:2b:da:9a:fa:a4:58:08:d4:0b:cd:f5:bb:78:39:
         d3:5e:ce:5d:01:88:6d:83:da:97:2d:33:d1:87:36:5a:27:15:
         b8:8f:83:6d:27:70:56:02:d4:c1:c8:aa:ba:0f:73:2e:19:b5:
         a9:28:65:bd:1e:f5:b7:c3:83:93:5d:a6:7b:ed:5b:3f:f4:f0:
         0b:97:e6:65:07:62:41:79:fb:19:68:b0:17:f1:e7:a0:09:cb:
         81:ef:3d:46:9f:d7:c8:0a:ef:49:7d:64:4e:99:34:05:1b:27:
         28:43:d0:09:a5:0d:ce:19:27:aa:8c:1a:99:ef:c2:26:3b:8a:
         b9:d7:96:b8:c9:24:fb:34:e1:b7:15:4f:2e:21:d9:d6:a8:08:
         b1:30:3e:28:4c:d2:97:e0:28:a4:b6:e7:7a:c8:59:7b:5d:e4:
         ce:01:f2:d4:d0:16:38:5e:5c:7d:9b:05:d8:54:e0:b0:2f:37:
         2e:3f:5f:46:b2:1f:a9:1f:f4:4d:e3:da:2b:bc:87:97:f8:2d:
         88:7d:6c:66:19:6c:91:a6:1d:a5:8b:d1:79:e1:e7:08:32:0c:
         24:eb:51:f5:2f:7b:d7:88:2c:4e:4c:0f:5d:6e:63:f1:a7:78:
         e0:d2:14:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 05:41:18 2026 by rpki-client