This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File:                     TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier:          GwWK58WQ4tK7YL2sTXX79oZhv1p2MbDSmE8ItgfMDLA=
Subject key identifier:   A7:3F:A8:C6:06:01:B0:A0:E6:47:6F:2D:05:0D:1B:77:74:F9:63:04
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer:       /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial:       019BF83F7A687C07BCF00B8F5B6CE22E1CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number:          17EE
Signing time:             Mon 26 Jan 2026 03:01:08 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:08 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:08 +0000
Files and hashes:         1: 9nRBo0Yomhpgm9TNkjDZWwhznG4.roa (hash: JVKW/CXhEruKd4nkDT8EtdFwFBbGNGwV/vGyVQso2YA=)
                          2: CJ1p60ncJ6lwmkba6tzp8PwUtGA.roa (hash: Fs77R9OF/tCUM07EJYitJlab1am9Hn64q8ob0oebDkA=)
                          3: PabEzo_xhzNh86GJKwujZAVSaKY.roa (hash: KpQX2bvuJbagEXNR3/7qIg5Rru1wDlXdCAjMjXG/6Mc=)
                          4: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: 65/27J2E6fLWGa09QISdwkdpkwKRYzUnjz/v6+vtVig=)
                          5: fTj8VjA3jlGkhYbcidRdlQKvw2s.roa (hash: jRzOWOgwnHuf2EMT7ZgwseHhtj6/xt+nW051JNR2aY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:7a:68:7c:07:bc:f0:0b:8f:5b:6c:e2:2e:1c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
        Validity
            Not Before: Jan 26 03:01:08 2026 GMT
            Not After : Jan 27 03:01:08 2026 GMT
        Subject: CN=a73fa8c60601b0a0e6476f2d050d1b7774f96304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:92:64:21:3e:96:aa:9b:3a:d7:73:76:6e:
                    87:37:ed:8c:4d:62:1b:d8:5e:94:6a:36:d3:c8:2a:
                    03:23:c0:93:63:09:82:80:6a:84:1c:2f:97:61:ed:
                    cc:78:71:85:9f:9d:f7:64:cd:51:a5:d7:a4:5c:64:
                    63:f1:79:90:a2:c7:c7:c8:92:47:fc:c7:ba:66:e5:
                    ab:a6:19:18:35:9a:ce:ba:b0:85:5a:5a:f0:49:a7:
                    22:f2:88:3a:b0:ce:44:ae:62:3b:ff:2b:7e:77:fb:
                    5e:39:c7:6d:9a:7f:db:67:4b:04:ec:12:a1:2c:69:
                    a3:8b:97:a6:21:0d:73:b4:d1:62:c9:c5:3e:55:6a:
                    2a:b7:8d:b9:87:fd:21:86:7c:62:4e:f0:5c:d2:69:
                    37:93:09:95:cb:63:8f:5e:af:47:a5:f9:9d:4f:bf:
                    b4:d5:d8:d8:36:65:e7:a8:fe:e0:5e:d6:5b:00:fa:
                    73:52:42:b4:fb:9d:98:93:0c:01:c8:fb:e0:e2:1a:
                    c9:81:3b:32:10:d9:e1:a6:f4:14:7c:68:0d:3b:6a:
                    31:fb:20:3e:44:7c:55:0b:e6:22:d9:60:8f:97:a8:
                    4a:25:d5:1d:a4:9b:72:e4:a4:c4:53:91:1d:85:88:
                    28:8f:6b:58:36:36:41:39:1c:1a:09:23:97:5d:76:
                    02:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3F:A8:C6:06:01:B0:A0:E6:47:6F:2D:05:0D:1B:77:74:F9:63:04
            X509v3 Authority Key Identifier:
                keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a0:6c:c8:e2:6f:08:f9:ae:bb:86:18:6a:85:fd:06:e6:6f:
         ad:d5:f2:ac:e3:37:41:6d:36:46:45:28:e3:df:31:96:29:1b:
         43:c7:1e:d1:10:76:f7:d8:b6:e7:44:9f:e4:10:f8:4e:cc:c9:
         f7:58:77:4d:db:33:e7:85:b9:97:45:ff:39:23:f0:de:71:de:
         66:8e:23:fc:09:21:3c:50:79:0a:67:45:ef:a2:94:4b:33:3e:
         6d:99:33:8c:a2:5f:de:d4:ec:89:9b:5c:1d:9f:a2:5f:d5:96:
         15:a2:d4:70:3f:f4:44:f1:24:0c:4f:48:e2:6c:c4:5e:b8:03:
         84:2b:41:3d:73:df:09:5c:61:7f:42:da:03:b0:dd:d7:9e:bd:
         01:7a:d3:78:36:50:c8:c4:82:50:e6:78:59:2b:c0:ce:1b:f6:
         0a:26:fe:c9:4a:f5:6f:64:d5:ab:66:7c:ce:f8:44:63:26:e6:
         40:38:7a:04:ca:45:d9:64:13:76:f5:4a:f8:02:51:4e:d9:cc:
         24:b4:26:33:f1:60:72:43:4f:b4:bd:f3:ba:35:22:5d:dc:d8:
         7b:e3:da:6a:09:2f:a6:94:59:22:3b:95:51:d0:da:f0:6a:bf:
         03:98:ab:79:bf:5c:e2:78:bd:46:9d:6a:0a:bf:5d:f9:17:7d:
         37:7b:5a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:58:10 2026 by rpki-client