This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
File:                     NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft (raw, json)
Hash identifier:          CjM//gG2N3BOiUjykv1rCjz0qAhpDWlsX5LQF3qz99s=
Subject key identifier:   A6:16:97:F3:6B:2A:CB:19:6B:0C:3C:13:E8:10:91:08:58:AB:CD:2F
Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
Certificate issuer:       /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Certificate serial:       019B823AAED013216F4EF3FB33B12EFE9D0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
Manifest number:          17B1
Signing time:             Sat 03 Jan 2026 05:00:42 +0000
Manifest this update:     Sat 03 Jan 2026 05:00:42 +0000
Manifest next update:     Sun 04 Jan 2026 05:00:42 +0000
Files and hashes:         1: MRi2QUKiUYiuqZDbNN8AWi7khO4.roa (hash: NMGJJ7+SOJryUXuDS+WQnGKqDDO2i9Z6K8gWplB05UE=)
                          2: NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl (hash: /16Vzvs0zQ9N0KkmhE3+6mESGvRyZP43K9EoLnhsN40=)
                          3: zDNouUxa3WBuZGVPOGveYWb3T6I.roa (hash: dlBZu5xfm6bRA2HTdrEgFNefU2JSuyk/ZA0x+VgcU8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 23:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:82:3a:ae:d0:13:21:6f:4e:f3:fb:33:b1:2e:fe:9d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
        Validity
            Not Before: Jan  3 05:00:42 2026 GMT
            Not After : Jan  4 05:00:42 2026 GMT
        Subject: CN=a61697f36b2acb196b0c3c13e810910858abcd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:68:35:2e:18:07:56:89:0d:71:fc:ea:87:10:
                    b9:23:51:45:ee:a0:ca:23:15:f1:fb:4b:cc:b0:f5:
                    6b:49:38:49:37:f9:f7:b1:28:62:59:5b:3e:37:6b:
                    e8:82:ab:ca:08:c8:83:07:c8:35:86:1a:a7:dc:bf:
                    82:a3:7d:30:e9:a8:c0:23:b6:8b:9c:d8:40:5c:cc:
                    f6:24:2f:64:dd:21:af:52:c9:0a:37:d6:fd:cc:c8:
                    82:0b:cd:57:d9:39:ee:f6:88:36:5d:87:2f:aa:64:
                    d0:e9:3c:19:4d:cc:be:92:5f:a4:78:ec:f8:fd:c8:
                    2c:23:bf:0d:1b:38:df:e6:8a:82:01:64:e1:f3:f9:
                    20:48:6e:d8:af:ff:e6:a7:bb:77:85:b7:63:88:aa:
                    cb:a7:44:a7:84:d0:d4:7f:d9:50:b0:e0:71:e5:3c:
                    55:cd:be:25:e4:a9:67:d6:b1:0a:3e:92:33:38:3a:
                    19:38:e7:57:42:18:dd:b9:71:04:8e:eb:ca:79:2a:
                    50:f2:d6:b3:8e:a4:c0:67:0e:4a:0c:c9:d5:63:24:
                    e1:26:f5:60:3c:19:aa:dc:67:2b:c1:a0:ce:98:68:
                    12:19:50:b2:bf:72:a2:d0:4a:5b:63:46:da:01:df:
                    aa:12:35:1e:c3:dc:ce:11:6b:2d:e3:50:aa:b7:9e:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:16:97:F3:6B:2A:CB:19:6B:0C:3C:13:E8:10:91:08:58:AB:CD:2F
            X509v3 Authority Key Identifier:
                keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:24:1b:00:c8:5b:5c:02:b6:e8:8a:7d:92:85:7b:a8:91:cd:
         7c:d5:51:5d:eb:b3:1a:ff:f3:63:86:2e:d8:07:a7:57:4e:be:
         11:e7:18:03:a9:e6:0c:e5:69:a8:b5:84:9d:25:7f:80:e1:ea:
         83:44:a9:c1:89:57:9a:f1:ac:f2:4d:de:5e:37:c7:65:7e:bd:
         30:a1:06:dc:41:f5:36:65:94:da:6c:dc:25:e5:42:97:8c:95:
         26:83:01:82:62:49:08:65:08:11:16:e9:8d:5f:0d:c3:a9:94:
         fe:8d:6c:dd:23:28:ec:f5:ce:d7:e4:c0:94:9c:19:1d:60:dc:
         6b:e8:ec:85:06:eb:6a:9f:32:63:ea:fa:a5:71:fd:49:c5:08:
         a3:5e:cd:40:24:d2:41:34:be:d8:16:b3:5d:f2:d7:8c:d6:1f:
         dd:c7:51:20:6e:45:e0:66:50:bb:bc:cf:2e:e6:61:22:d5:a3:
         2d:62:54:5c:60:1c:13:dc:f0:31:2c:3f:41:a4:86:05:88:d4:
         94:ef:31:c1:bd:19:8a:89:9f:e1:b6:e0:c9:76:e4:d3:eb:49:
         33:a9:94:e7:0f:5c:90:96:39:8c:a9:f0:77:1f:62:22:c3:3b:
         f8:f4:bd:af:56:0e:4f:65:cf:61:56:dc:db:d9:30:30:94:f5:
         be:d1:34:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 08:21:03 2026 by rpki-client