This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
File:                     npM_LOV8dMv5_6UJaF1qy9jFOZg.mft (raw, json)
Hash identifier:          Z5XRxjR7Se8KDxy+FHtaJJD6EiW7lzM16NUqbd1shSI=
Subject key identifier:   E2:3F:0C:49:59:37:48:6D:5F:2F:53:C9:5F:FE:55:4D:F6:8C:27:A4
Authority key identifier: 9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98
Certificate issuer:       /CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
Certificate serial:       019C1EDFA071AB3D9F3E5F99E6E5AD2210C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
Manifest number:          09D3
Signing time:             Mon 02 Feb 2026 15:01:37 +0000
Manifest this update:     Mon 02 Feb 2026 15:01:37 +0000
Manifest next update:     Tue 03 Feb 2026 15:01:37 +0000
Files and hashes:         1: 1-_yOBezapW4gmaQhwbQ_L4Sqcfw.roa (hash: 3frOGkt9ftuVgtTCe7VyDncQkJsfKLeQbnXtJjtvP38=)
                          2: npM_LOV8dMv5_6UJaF1qy9jFOZg.crl (hash: 5daFu7evgeVKHMEkS6zt7vdLhQy8qbpccqWxtRFHXQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 15:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1e:df:a0:71:ab:3d:9f:3e:5f:99:e6:e5:ad:22:10:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
        Validity
            Not Before: Feb  2 15:01:37 2026 GMT
            Not After : Feb  3 15:01:37 2026 GMT
        Subject: CN=e23f0c495937486d5f2f53c95ffe554df68c27a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1b:a3:a8:cf:b0:0e:7f:30:68:8b:f7:97:1c:
                    93:81:01:e9:a9:73:c2:a6:33:6d:47:33:50:58:ec:
                    01:5b:65:d5:20:77:f7:d0:a8:ab:8b:25:f2:95:81:
                    3c:48:42:73:9c:7c:66:9d:a6:f7:6d:ca:7a:2e:18:
                    27:ee:22:e5:29:cb:4c:db:36:81:62:18:1f:90:6f:
                    77:0d:fc:6e:cd:b8:1f:31:d0:66:85:5c:f4:ec:91:
                    fa:d6:a4:4c:b2:e2:2a:ba:8b:e0:e0:5d:fb:22:34:
                    bd:a0:ae:b9:88:10:f8:9a:f0:ae:96:21:f5:35:10:
                    bc:8b:b1:c3:cd:5a:e8:89:be:c7:0b:ac:df:ee:0b:
                    43:32:1a:22:eb:ec:24:e9:d2:1d:8f:57:2c:e6:78:
                    2a:0e:e9:29:83:57:8b:7f:d8:67:3c:a0:3a:7f:c8:
                    c3:83:fa:37:b1:28:13:a7:43:98:4b:c3:18:e7:50:
                    c2:b1:fa:20:96:81:85:e5:9f:d0:76:e7:93:73:01:
                    5f:c6:1f:c9:82:b6:5e:bf:49:4d:02:1f:ae:50:42:
                    21:4b:56:8d:e3:35:ec:82:97:78:0d:cf:70:ee:a2:
                    87:b6:e1:b7:6e:e0:e5:a7:32:85:46:4a:a4:9e:18:
                    9a:fc:61:d6:9c:99:9f:4f:66:fa:26:5c:05:87:14:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3F:0C:49:59:37:48:6D:5F:2F:53:C9:5F:FE:55:4D:F6:8C:27:A4
            X509v3 Authority Key Identifier:
                keyid:9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:99:fe:00:ca:c9:2f:d0:9e:dc:1f:96:02:dc:77:65:c3:25:
         b0:28:68:d0:cc:1d:80:8b:cf:7f:48:80:8a:20:03:e8:16:26:
         d1:8d:2c:75:08:aa:7b:ba:65:8a:de:0a:aa:3b:49:cd:1b:46:
         5a:c3:50:5f:18:13:43:e8:51:4f:d8:d0:37:2b:30:fc:ed:f1:
         c3:a2:30:11:2f:a3:65:db:03:38:6d:cc:1c:67:6e:8c:55:16:
         57:95:90:49:a2:93:c4:0c:1b:ea:4d:43:e2:b6:26:84:98:74:
         76:22:da:1e:33:f7:0e:db:94:16:55:9f:c9:04:72:aa:fa:d9:
         0e:85:02:1e:f9:6f:07:09:2d:c1:be:68:6e:ea:27:1b:e3:e8:
         ba:aa:90:e1:cf:9a:f0:c5:8c:db:01:a8:4a:b0:a6:05:78:40:
         c3:86:6e:c7:36:07:25:a4:76:81:0e:29:2d:b7:01:b5:6e:9a:
         79:4a:c3:4a:99:4c:f7:72:60:80:d7:aa:bf:f9:f3:28:68:70:
         bf:c9:e0:7e:c4:83:be:dd:32:e7:f7:44:cb:b7:77:a7:a0:95:
         80:44:71:00:9e:2d:14:30:ce:90:a5:5a:7e:1c:34:47:ea:7b:
         83:7f:35:d3:ec:70:40:ea:54:87:8f:bf:12:fe:ca:29:1e:c9:
         26:60:52:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwe36Bxqz2fPl+Z5uWtIhDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTMzZjJjZTU3Yzc0Y2JmOWZmYTUwOTY4NWQ2YWNiZDhj
NTM5OTgwHhcNMjYwMjAyMTUwMTM3WhcNMjYwMjAzMTUwMTM3WjAzMTEwLwYDVQQD
EyhlMjNmMGM0OTU5Mzc0ODZkNWYyZjUzYzk1ZmZlNTU0ZGY2OGMyN2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RujqM+wDn8waIv3lxyTgQHpqXPC
pjNtRzNQWOwBW2XVIHf30KiriyXylYE8SEJznHxmnab3bcp6Lhgn7iLlKctM2zaB
YhgfkG93DfxuzbgfMdBmhVz07JH61qRMsuIquovg4F37IjS9oK65iBD4mvCuliH1
NRC8i7HDzVroib7HC6zf7gtDMhoi6+wk6dIdj1cs5ngqDukpg1eLf9hnPKA6f8jD
g/o3sSgTp0OYS8MY51DCsfogloGF5Z/QdueTcwFfxh/JgrZev0lNAh+uUEIhS1aN
4zXsgpd4Dc9w7qKHtuG3buDlpzKFRkqknhia/GHWnJmfT2b6JlwFhxSHlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOI/DElZN0htXy9TyV/+VU32jCekMB8GA1UdIwQY
MBaAFJ6TPyzlfHTL+f+lCWhdasvYxTmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBNX0xPVjhkTXY1XzZVSmFGMXF5OWpGT1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZjJlNDgtZmViYS00MjczLThlNDkt
ODI1OTgwNWM2NDRjLzEvbnBNX0xPVjhkTXY1XzZVSmFGMXF5OWpGT1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81ZjJlNDgtZmViYS00MjczLThlNDktODI1OTgwNWM2NDRj
LzEvbnBNX0xPVjhkTXY1XzZVSmFGMXF5OWpGT1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpn+AMrJ
L9Ce3B+WAtx3ZcMlsCho0MwdgIvPf0iAiiAD6BYm0Y0sdQiqe7plit4KqjtJzRtG
WsNQXxgTQ+hRT9jQNysw/O3xw6IwES+jZdsDOG3MHGdujFUWV5WQSaKTxAwb6k1D
4rYmhJh0diLaHjP3DtuUFlWfyQRyqvrZDoUCHvlvBwktwb5obuonG+PouqqQ4c+a
8MWM2wGoSrCmBXhAw4ZuxzYHJaR2gQ4pLbcBtW6aeUrDSplM93JggNeqv/nzKGhw
v8ngfsSDvt0y5/dEy7d3p6CVgERxAJ4tFDDOkKVafhw0R+p7g3810+xwQOpUh4+/
Ev7KKR7JJmBSSA==
-----END CERTIFICATE-----
Generated at Mon Feb 2 22:50:57 2026 by rpki-client