This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
File:                     NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json)
Hash identifier:          yNIE13ssaGFBXvUi9aGlJyrCK5X8Ia6Jzda5fyIMvcw=
Subject key identifier:   D7:EF:EC:A8:1F:E8:F6:06:14:59:FF:A3:F0:E1:48:C3:D8:48:B8:52
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Certificate issuer:       /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial:       019BFB40234B29E17F688FF9555405CE866B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
Manifest number:          1812
Signing time:             Mon 26 Jan 2026 17:00:42 +0000
Manifest this update:     Mon 26 Jan 2026 17:00:42 +0000
Manifest next update:     Tue 27 Jan 2026 17:00:42 +0000
Files and hashes:         1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=)
                          2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=)
                          3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=)
                          4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=)
                          5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=)
                          6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=)
                          7: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=)
                          8: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: 4C4WIUFPtN4NWeE68iy8cfbEMrHkPj8M4+jFF3U+UNQ=)
                          9: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=)
                          10: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=)
                          11: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=)
                          12: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=)
                          13: Y717qVS96YjYgAZkrscDp7OEvWY.roa (hash: bvdM3ELPzWVbs/s6wCevWXdZqt/DIba2BD86BPGfAIQ=)
                          14: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=)
                          15: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=)
                          16: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=)
                          17: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=)
                          18: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=)
                          19: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=)
                          20: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=)
                          21: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:40:23:4b:29:e1:7f:68:8f:f9:55:54:05:ce:86:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
        Validity
            Not Before: Jan 26 17:00:42 2026 GMT
            Not After : Jan 27 17:00:42 2026 GMT
        Subject: CN=d7efeca81fe8f6061459ffa3f0e148c3d848b852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d4:24:69:fe:b4:c4:f1:a3:54:0b:4e:a9:13:
                    6b:72:3a:e6:1e:f2:54:ce:fb:7e:0a:e0:35:cc:74:
                    9f:aa:45:cb:6b:db:1c:aa:a2:6a:a2:36:4b:96:80:
                    80:b7:ea:77:03:a0:da:10:c0:3c:9b:22:e0:8c:d4:
                    c7:03:8f:3c:29:79:4d:fb:b7:8d:5b:5a:00:d2:11:
                    6c:ae:80:02:27:79:63:9a:80:bf:3c:dc:16:ae:70:
                    58:df:e0:65:16:bb:65:90:ea:8d:ec:10:64:02:32:
                    3f:75:7f:5b:82:69:10:2d:85:19:ba:c4:ce:33:63:
                    4d:cd:48:ba:cb:1a:3e:3f:ab:54:cb:7b:40:38:7a:
                    41:26:4b:c9:ba:15:cf:ed:6d:1a:74:d8:13:3e:23:
                    3f:b5:96:3f:16:96:a0:ed:8f:57:9c:06:e7:5a:0b:
                    49:a7:f1:7d:b6:1d:40:41:9f:ca:85:d1:c6:fb:89:
                    f5:6d:85:cd:18:d0:f3:1f:e0:ff:7d:90:a8:2b:aa:
                    b0:75:99:64:84:2c:e7:01:39:16:0f:5b:2a:e6:56:
                    e2:91:3f:2c:0c:64:93:8f:dc:d8:37:4a:60:f2:53:
                    a2:df:20:21:fb:02:3c:b1:36:99:e0:98:b4:09:61:
                    4e:bc:c4:d8:e5:ee:b3:04:ad:9f:b2:29:26:07:8b:
                    32:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EF:EC:A8:1F:E8:F6:06:14:59:FF:A3:F0:E1:48:C3:D8:48:B8:52
            X509v3 Authority Key Identifier:
                keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:51:63:53:c1:af:44:21:00:36:e4:ca:4c:ad:eb:86:46:d6:
         74:04:a7:72:ea:53:6d:88:0e:99:aa:20:1b:59:5b:8b:94:1f:
         3c:84:fe:66:7a:99:17:e4:86:a3:f6:0b:a4:7a:b1:56:53:ac:
         3d:c4:cd:d2:a1:9f:b3:b7:3d:58:c4:3b:e2:d1:24:40:3e:c3:
         c8:bd:d2:4c:0a:f3:76:df:1a:20:a7:7f:34:5d:7a:1e:15:83:
         54:aa:b2:08:67:71:63:6a:57:94:de:66:4c:62:be:f0:d9:60:
         00:8d:01:78:7c:0d:eb:7e:a9:b3:ff:84:74:34:64:6e:2a:ca:
         99:65:7d:56:92:fb:81:b3:a1:01:eb:55:fd:e8:24:49:ee:3f:
         aa:24:2c:a3:e8:4d:25:85:e8:46:b5:7c:77:ac:b8:92:20:01:
         ba:b2:d7:9b:8f:0e:a1:54:65:40:49:63:4e:64:2e:35:7a:f1:
         72:5b:5a:e0:b3:93:81:b3:da:c5:0a:ea:90:3d:24:f1:22:38:
         9f:ed:cd:fc:98:cf:b4:e0:e8:ea:13:c2:97:52:d0:62:b8:a7:
         ec:d1:b9:5b:09:d6:00:ef:09:d6:59:c7:eb:0f:75:ab:26:a9:
         1c:92:db:17:c6:81:e5:d1:ec:ea:af:13:f0:ac:fe:74:bd:5b:
         0c:ee:0f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:19:03 2026 by rpki-client