This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
File:                     NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json)
Hash identifier:          /sxOgrwg3DiQf2wzA+LxhlLUTLc7uAwvHNdn0+fyvAE=
Subject key identifier:   D1:3A:72:31:52:6C:7C:9E:E6:2E:A6:C3:3E:B5:AB:26:BD:24:A1:29
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Certificate issuer:       /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial:       019BFD2EF51F440747AF31235AC5644FDFA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
Manifest number:          1813
Signing time:             Tue 27 Jan 2026 02:01:11 +0000
Manifest this update:     Tue 27 Jan 2026 02:01:11 +0000
Manifest next update:     Wed 28 Jan 2026 02:01:11 +0000
Files and hashes:         1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=)
                          2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=)
                          3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=)
                          4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=)
                          5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=)
                          6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=)
                          7: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=)
                          8: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: LmJcmHqQcIFl9LRGZM9rHU4BlkF8hp5qAOX9yId9S3M=)
                          9: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=)
                          10: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=)
                          11: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=)
                          12: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=)
                          13: Y717qVS96YjYgAZkrscDp7OEvWY.roa (hash: bvdM3ELPzWVbs/s6wCevWXdZqt/DIba2BD86BPGfAIQ=)
                          14: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=)
                          15: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=)
                          16: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=)
                          17: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=)
                          18: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=)
                          19: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=)
                          20: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=)
                          21: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:2e:f5:1f:44:07:47:af:31:23:5a:c5:64:4f:df:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
        Validity
            Not Before: Jan 27 02:01:11 2026 GMT
            Not After : Jan 28 02:01:11 2026 GMT
        Subject: CN=d13a7231526c7c9ee62ea6c33eb5ab26bd24a129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:c9:a1:9f:6e:1f:14:45:28:c1:1a:de:0c:
                    94:6f:93:69:cd:75:d1:e9:4b:ae:f0:25:8a:54:f8:
                    8f:26:e2:28:d7:c4:8b:df:5a:a1:40:1e:6a:79:c3:
                    d1:51:3d:d0:cf:44:82:a1:e2:e7:67:f8:71:c0:d6:
                    f2:6a:8b:1d:4c:b4:28:8a:74:d5:1e:68:16:90:e1:
                    e7:2b:f4:17:0a:e6:34:fd:ee:d7:f9:da:7d:28:40:
                    45:48:ff:29:10:a8:04:44:b7:27:80:d7:46:7c:00:
                    1e:4a:10:be:0d:ac:1c:48:85:79:18:27:f5:fd:0b:
                    87:27:b3:c4:bb:59:ee:90:84:1c:ac:30:7a:78:b6:
                    6f:26:2b:8a:b3:9a:ac:fe:f5:53:4a:a6:23:05:c8:
                    8a:d2:c7:a8:a5:6f:08:1e:8e:94:55:6b:11:d1:8b:
                    48:14:c1:6e:7c:84:fc:75:80:be:6c:0c:6a:e9:55:
                    d2:90:5d:18:9f:9e:da:7e:df:d8:63:2d:37:fb:7e:
                    44:99:9d:8b:e4:2f:0e:f5:69:16:68:4a:ab:e7:a7:
                    de:d4:3c:23:c5:d9:91:d3:04:5d:20:c3:31:c4:8d:
                    be:9e:bb:75:65:3a:51:e4:6a:e9:91:e2:8c:19:44:
                    c6:11:64:78:5b:0e:6b:d2:13:3d:b0:98:ae:55:a0:
                    f8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3A:72:31:52:6C:7C:9E:E6:2E:A6:C3:3E:B5:AB:26:BD:24:A1:29
            X509v3 Authority Key Identifier:
                keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:91:2d:2e:2b:20:db:68:69:ed:0c:a1:45:84:20:1f:68:b3:
         bc:00:f5:d6:50:37:8b:9e:50:eb:59:ff:d3:5b:da:e1:34:f9:
         32:79:66:b3:8d:9f:1b:ab:e8:ca:f8:25:e2:c6:d0:f2:ff:2c:
         15:e1:dc:c6:cf:59:bf:8a:86:58:8a:0b:7a:53:95:89:34:89:
         c0:3e:13:75:f3:0b:78:9c:77:37:38:ee:a8:c6:6e:c8:85:9d:
         8d:ed:9c:a8:00:71:a3:b3:75:7a:d9:d0:2e:df:20:e6:2c:ee:
         9b:5c:78:2f:3e:24:57:4d:a4:b0:04:ea:e6:1d:cf:9d:66:eb:
         fe:78:b0:44:aa:94:44:d7:54:5d:b5:05:f4:b2:d2:5b:ca:d4:
         f1:5f:58:93:66:25:5a:d2:0b:f9:ce:49:85:1e:85:41:58:91:
         e2:80:fb:74:d3:f7:d6:dc:6a:83:9c:d5:97:8b:6c:f3:0a:5b:
         b5:1f:45:82:5b:f5:8f:4a:fd:5b:fa:16:f6:bc:ef:3f:79:54:
         5c:2e:ab:83:b2:2d:4b:a7:35:03:a7:3f:6c:f1:9a:2e:ae:14:
         55:bf:50:0c:e5:1e:c0:dd:6a:1c:e1:6f:6b:e9:a4:8f:de:00:
         d8:ea:08:d0:b5:22:aa:5a:7f:14:fe:5a:81:05:bb:2b:bb:67:
         b5:05:f5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:08:17 2026 by rpki-client