This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File:                     N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier:          4oQqcPAsyCv/Qx5doJKQ9HuoiakXHRgPoj1EpdEKjA0=
Subject key identifier:   EF:79:15:10:B9:00:A9:86:D4:B0:E2:3B:BC:8D:04:DC:1D:F7:98:19
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer:       /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial:       019BFB7744699F87DE38E0CA22771F113988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number:          0EA2
Signing time:             Mon 26 Jan 2026 18:00:55 +0000
Manifest this update:     Mon 26 Jan 2026 18:00:55 +0000
Manifest next update:     Tue 27 Jan 2026 18:00:55 +0000
Files and hashes:         1: Ltqr6spk6stgdejzEgmXDGQPXxU.roa (hash: /l66BwyFJAusu0nV1bBo2WvqQQiV2viPooH60Q/+I2o=)
                          2: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: Vn2NDylYxhom0eG0vi7e4c+/qHbgwH7De1MiGdL1x0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:77:44:69:9f:87:de:38:e0:ca:22:77:1f:11:39:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
        Validity
            Not Before: Jan 26 18:00:55 2026 GMT
            Not After : Jan 27 18:00:55 2026 GMT
        Subject: CN=ef791510b900a986d4b0e23bbc8d04dc1df79819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ad:8b:c3:d8:05:78:34:11:e4:d6:36:49:ae:
                    08:b5:0c:79:7e:d5:91:f8:4d:3b:72:ee:ea:91:d1:
                    ba:bb:81:5a:bb:b0:ba:f2:fc:36:d4:fa:30:a8:58:
                    86:53:23:92:39:07:4b:dc:cb:07:59:41:74:1d:d6:
                    8e:28:0f:80:70:8d:8e:4f:bb:02:4e:34:c3:c3:ca:
                    7b:54:ae:84:70:5f:7d:49:e2:e6:46:a9:86:82:03:
                    ff:9b:44:df:c7:8b:63:5a:a0:40:49:d8:be:f0:1f:
                    53:44:4f:59:1b:84:e6:28:f7:43:34:28:49:db:fb:
                    f4:0b:c6:81:f6:2b:0f:42:17:5e:15:b9:f6:ec:02:
                    2c:d4:d7:b5:45:75:a0:8a:10:45:01:b9:b9:42:fe:
                    b6:5d:5b:db:b6:18:47:95:3c:2d:cd:d8:6f:fd:e6:
                    81:11:d1:94:b8:f6:17:66:c6:8f:23:f5:3e:1a:90:
                    f5:38:89:f6:a2:dc:73:0f:da:ff:4d:59:76:2a:a1:
                    71:46:b2:4f:f4:65:47:c8:77:4a:ea:05:28:ef:a0:
                    fd:a3:ce:3d:e9:d4:d5:67:20:e9:b0:74:01:75:34:
                    3e:98:39:5a:5a:9c:19:3b:5b:ea:66:1e:ea:0e:fe:
                    1f:2f:4e:95:c5:11:20:4d:ad:ed:fd:b3:73:d4:65:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:79:15:10:B9:00:A9:86:D4:B0:E2:3B:BC:8D:04:DC:1D:F7:98:19
            X509v3 Authority Key Identifier:
                keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:19:3e:16:07:06:39:5c:eb:cd:6e:81:16:c0:db:65:44:38:
         2b:aa:c6:d5:ab:55:83:00:90:ac:a6:61:78:b7:3c:39:ec:ad:
         d0:ec:6a:67:6b:1f:d2:10:01:13:73:22:d5:94:a1:b5:d2:6d:
         de:a9:5f:43:f4:35:5e:62:b6:1a:12:d3:74:24:8e:8a:49:b9:
         2f:a6:19:a5:0f:3e:7a:53:62:76:77:3f:c8:a2:71:cf:3c:19:
         c5:aa:f1:83:fc:ed:e9:1a:21:8f:f7:2c:d8:f1:39:ba:41:e9:
         d0:4c:05:c0:a5:cf:19:b3:3f:19:69:ab:ae:de:1d:27:a7:e9:
         30:09:6b:9d:9b:32:15:1d:de:ae:a3:c4:8b:0b:00:d8:63:69:
         3b:5b:18:05:4d:f0:85:58:fc:7b:82:12:50:02:49:f3:d0:18:
         08:d8:c0:f7:44:e9:de:ec:e5:76:d0:53:ca:1f:e2:84:1a:fa:
         5e:b5:7b:70:a9:d4:6a:ef:4b:07:27:7f:e0:ee:de:6d:f8:f1:
         5c:2a:fb:c3:4d:09:5d:64:bd:ef:61:78:b4:fd:1e:11:13:3f:
         ab:8e:37:59:73:7b:a1:e4:b6:b6:10:52:35:dc:99:97:f2:ad:
         76:81:4e:6c:61:d6:ef:3b:fa:5b:5b:7d:b6:89:8a:c7:cb:a4:
         fd:49:47:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:18:31 2026 by rpki-client