This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File:                     Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier:          V+qxJevRL5rMvpM3hbXSbnBPBLaHcxNePqfUVNF7Owg=
Subject key identifier:   E4:46:9D:4B:99:B5:70:1C:24:3E:6D:73:2A:AB:FB:45:90:FC:A1:CD
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer:       /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial:       019BFD2E86209346A37E6C374239CCD02073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number:          0E1F
Signing time:             Tue 27 Jan 2026 02:00:43 +0000
Manifest this update:     Tue 27 Jan 2026 02:00:43 +0000
Manifest next update:     Wed 28 Jan 2026 02:00:43 +0000
Files and hashes:         1: 3Ego7qA5ogxcgXSX7Iy2Jk2QvKA.roa (hash: AcX2UY2fKx9ShP8jKiTUZk0gum0BmvVpyfodQGjOdcQ=)
                          2: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: QeU/XLEiOaijHk9ra3B/B4nMe9Aiuf/Nj3BIpiaYL40=)
                          3: YayJGV1AhdhT_2jmvro3f1vZJio.roa (hash: ZSfRyhmj0GGAqXcOqtLbroZWUuhIqN/tBzww51XfKiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:2e:86:20:93:46:a3:7e:6c:37:42:39:cc:d0:20:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
        Validity
            Not Before: Jan 27 02:00:43 2026 GMT
            Not After : Jan 28 02:00:43 2026 GMT
        Subject: CN=e4469d4b99b5701c243e6d732aabfb4590fca1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:15:63:1e:92:fe:5e:10:5b:17:d3:06:9a:
                    87:3f:3a:0e:f2:b1:bb:80:7a:05:f9:03:c7:1b:fd:
                    87:a5:dd:1c:53:0c:5c:65:98:03:51:f8:5f:d3:dc:
                    28:74:5a:1a:10:ab:22:bc:0b:ac:46:36:ec:e1:38:
                    e7:11:96:40:a6:f1:cb:2d:5a:13:eb:92:b9:13:65:
                    c9:fe:c2:56:1f:dd:6a:5b:94:b2:e8:f1:fd:28:ea:
                    fc:f6:34:50:a0:87:f2:3b:2a:65:25:f0:24:4f:2f:
                    f1:9f:2c:f9:34:47:98:b5:6a:0d:45:b7:51:97:bd:
                    ac:f1:45:ae:f7:2c:3d:ce:24:c2:3a:0d:f0:27:d1:
                    20:84:ff:d3:be:dd:2f:58:8a:15:b1:a5:5d:71:8c:
                    80:13:48:c5:4e:b2:54:2b:f6:58:21:40:00:cc:a7:
                    ca:86:63:4c:4f:17:5f:e0:4c:4a:75:b8:b6:b1:17:
                    a6:5b:76:06:31:f8:2e:d6:cc:e1:1e:69:95:e8:97:
                    8b:93:f6:60:f8:f4:44:3b:5f:9e:99:bb:2e:28:5f:
                    c0:08:c3:16:2b:95:aa:1b:7a:6c:d1:cd:7b:3e:40:
                    d3:e9:c3:52:02:d8:e8:66:d4:dc:63:b6:c0:11:40:
                    6e:75:90:3a:f7:ef:88:08:99:8d:45:c8:0c:5f:ae:
                    80:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:46:9D:4B:99:B5:70:1C:24:3E:6D:73:2A:AB:FB:45:90:FC:A1:CD
            X509v3 Authority Key Identifier:
                keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5b:3a:ff:b0:b2:b8:81:9b:2d:69:f6:8a:c1:3c:9f:38:b0:
         96:07:e5:48:76:b0:12:13:f2:23:45:8f:a2:da:e2:e2:c3:54:
         f2:06:e1:6a:1e:85:5f:95:09:5a:36:fd:7c:dc:15:98:5d:50:
         a5:3c:83:36:fa:20:db:da:ee:c5:aa:bf:88:e4:dd:6a:d9:3f:
         bb:24:a5:83:14:4e:0f:01:47:6f:86:b6:01:68:45:d8:85:ac:
         73:d7:2c:8b:0f:ab:56:92:ec:58:fd:ae:fb:9d:f4:6f:a5:f5:
         6b:d2:34:21:a9:cd:c4:ca:4c:0b:d4:17:81:24:e1:3d:a3:df:
         15:25:06:86:d2:c1:ec:0e:8b:de:a1:39:68:97:09:07:db:b3:
         fb:5d:e2:fb:0d:7e:e0:ca:b6:57:dd:cc:21:67:6a:20:53:40:
         2c:3b:f3:36:32:87:34:33:01:cb:9c:2e:d9:93:d5:91:53:9e:
         04:44:cd:0d:73:44:5d:84:09:77:4c:48:c7:9f:08:98:c0:f4:
         84:73:7a:c1:9d:ce:03:79:3f:41:46:41:7a:c1:6a:3a:4e:5a:
         1e:8a:24:1a:41:38:24:8b:12:a6:00:8e:db:c3:b0:93:60:0e:
         bb:5a:c3:83:0e:26:c0:c6:5f:58:4d:57:e2:77:5a:b5:0e:af:
         b3:d3:0c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:42:53 2026 by rpki-client