This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File:                     TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier:          qnFn+MzG++XLngFn7kG4kTQ6stLhgROdH/hHUDaRV04=
Subject key identifier:   AF:17:36:29:24:6B:6E:5E:93:9B:CF:B4:F7:83:F3:8A:7E:7D:EB:A5
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer:       /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial:       019BF2E2883D0A1C76FEE85889B737952168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number:          09E1
Signing time:             Sun 25 Jan 2026 02:01:30 +0000
Manifest this update:     Sun 25 Jan 2026 02:01:30 +0000
Manifest next update:     Mon 26 Jan 2026 02:01:30 +0000
Files and hashes:         1: 1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa (hash: Wh4hYAahHN1SwbCKEhKPBAVeToja3QYblB0SUbJdjis=)
                          2: DnIOOoGWRavp5IqwW9ySIPh79lk.roa (hash: rq7BHpoO+/BSPP6hcjEqbUgUHas+lRS8Sfpjq0LOIgU=)
                          3: G2MOc8TWFDIMMJqGe6NYQzJGJRc.roa (hash: 6e+/w4+tJC0z0SxMPZdExM5pB9/UDFdAttq+Dk7OWZs=)
                          4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: 4YhhQdHftUolqZII8pZQsDwMgSkP7LQMgLaHh7g14Ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e2:88:3d:0a:1c:76:fe:e8:58:89:b7:37:95:21:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
        Validity
            Not Before: Jan 25 02:01:30 2026 GMT
            Not After : Jan 26 02:01:30 2026 GMT
        Subject: CN=af173629246b6e5e939bcfb4f783f38a7e7deba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:28:5b:c1:67:65:2c:3c:83:8c:b5:22:5c:
                    c3:2a:34:1d:af:71:88:fa:08:3e:c9:80:71:38:1b:
                    10:77:ad:c8:ac:58:85:f5:2f:57:03:1c:ac:e5:18:
                    c7:cd:64:01:a8:06:2d:ef:73:fd:9b:78:13:ba:3e:
                    22:0c:d6:08:2e:c1:31:ba:66:c6:94:27:cb:ee:6c:
                    07:55:a3:0e:c0:db:a2:07:dc:df:f3:57:88:fd:c0:
                    eb:9b:a6:e4:9a:09:d6:b7:b0:96:1d:67:09:1c:34:
                    ed:af:b7:f1:85:29:bd:3c:6c:d6:27:d3:9a:d6:68:
                    f8:7b:35:4c:e4:44:e4:1a:c4:f7:04:b1:b7:c4:d4:
                    d3:c7:a0:12:a3:1b:df:fa:c0:33:35:44:5b:13:b3:
                    7f:14:df:cd:3c:73:4e:d3:66:34:ea:32:74:82:ca:
                    08:45:1b:0c:6b:f9:08:a8:a8:28:0f:8a:fb:fd:6d:
                    79:ed:0b:92:8b:cb:08:12:90:ff:39:46:36:a1:af:
                    17:9a:16:62:1a:d9:1d:a6:c9:04:6a:64:2f:1d:29:
                    29:f0:b4:43:08:89:1c:11:64:d5:43:3f:c9:29:f1:
                    b7:2c:50:82:ac:e3:d4:c0:63:c3:8c:70:cd:e0:48:
                    21:7a:a7:dc:6b:3d:de:1d:18:c5:c3:11:70:08:5f:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:17:36:29:24:6B:6E:5E:93:9B:CF:B4:F7:83:F3:8A:7E:7D:EB:A5
            X509v3 Authority Key Identifier:
                keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:96:7c:8f:ed:b0:f4:2e:bc:78:10:70:56:7a:0d:c3:d6:29:
         b6:b9:60:d7:d4:04:e4:7f:d0:1c:e9:a6:e6:27:a0:37:69:d3:
         11:3c:d5:b2:32:dd:55:0c:45:ac:36:0c:8c:07:7b:a8:9f:88:
         7e:8c:d0:4f:c9:87:92:7c:d3:4c:d6:a7:16:6e:6a:40:a0:c9:
         e5:e5:57:fd:e8:f9:18:d9:6a:3c:01:29:4e:68:24:34:f4:f6:
         ea:d3:0f:14:25:6a:bd:b0:bc:c9:97:04:0c:2b:ae:34:a5:ae:
         6a:81:72:dc:0a:75:a8:19:15:71:52:3e:c7:7a:3a:ae:a2:aa:
         9b:80:a4:d7:06:f5:2c:8b:b6:ac:7b:2a:90:37:86:cc:aa:e0:
         42:1e:06:65:6e:96:cf:af:b3:cc:b8:e8:b0:2f:d5:d5:ac:d8:
         b7:65:ef:f7:48:2d:68:62:46:e1:5c:9c:e5:36:50:db:d1:a3:
         49:61:aa:b6:cd:35:28:88:60:ab:a8:ca:15:f4:3b:58:0d:0f:
         d4:6e:5e:0a:7b:b5:a2:3a:31:64:f0:13:b5:0f:67:34:b0:8d:
         cc:4c:66:50:07:dc:ce:ab:39:70:e0:ad:b5:d7:ba:64:d5:d8:
         b2:bc:79:6c:83:7d:aa:da:1f:fd:52:24:c7:9c:d1:35:44:a9:
         68:ec:14:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:48 2026 by rpki-client