This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File:                     Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier:          9H8JxuhK2eIm3Nwh2qKPVfT7FZEtiKKoY4Zbq0ywOZY=
Subject key identifier:   4A:F9:E1:05:92:DC:43:A6:CB:C1:81:CD:A5:4D:A9:20:21:E9:83:37
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer:       /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial:       019BF8765F45DAA2BE9EFEB0091F0ED8ED0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number:          069D
Signing time:             Mon 26 Jan 2026 04:01:05 +0000
Manifest this update:     Mon 26 Jan 2026 04:01:05 +0000
Manifest next update:     Tue 27 Jan 2026 04:01:05 +0000
Files and hashes:         1: 1-dWw94LOwYVb6Z8yvlC4x7hkhMc.roa (hash: e7q0PiGn+nkXQe803oPBPZRnyfk/0arkshZocK67CGw=)
                          2: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: bR0+ul5tJx6skeWrvkxqAD0EmPfee7FfVIzDWlqoZ3g=)
                          3: V4jhpHULY3kG-luzllvrbKQbZ9c.roa (hash: EMpkHgy+YsqyHIc2Gv/c4Vt6RakehqzKDgK4RNxTwag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:76:5f:45:da:a2:be:9e:fe:b0:09:1f:0e:d8:ed:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
        Validity
            Not Before: Jan 26 04:01:05 2026 GMT
            Not After : Jan 27 04:01:05 2026 GMT
        Subject: CN=4af9e10592dc43a6cbc181cda54da92021e98337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:31:f3:40:c3:11:2d:a9:d4:1d:5a:07:cc:
                    4a:b6:b8:a1:af:29:7d:c6:c9:e9:09:8b:b9:d1:70:
                    86:34:15:80:33:b5:b3:75:a8:9e:1e:90:de:f3:c6:
                    78:00:a9:3e:45:50:b7:19:12:1c:b4:2a:ce:b6:dd:
                    9f:7d:88:0b:4c:5b:d1:92:d6:01:e9:b7:bb:0a:e5:
                    f3:a3:6c:9d:e8:0f:58:7c:3a:df:35:ba:a2:2b:ec:
                    91:d2:dd:d9:d3:ab:09:e6:13:d0:3d:29:e3:ed:2b:
                    6b:d6:f6:6c:35:fe:fc:38:9b:c7:87:f8:ec:c5:39:
                    86:c6:04:d4:b6:be:87:26:e6:b0:3b:92:59:a5:6a:
                    02:35:93:20:ea:39:fb:ce:c4:d4:1f:32:5c:b4:57:
                    57:67:1b:36:5c:ff:72:8a:d0:f0:16:98:17:d2:88:
                    25:73:ee:41:c6:24:cc:d5:46:26:bd:39:e6:23:9e:
                    34:b4:54:a9:3c:0d:43:2c:72:51:e7:72:b9:b2:ac:
                    87:45:08:6c:21:24:85:7e:15:f5:c6:03:23:73:46:
                    62:c1:9e:3e:44:ed:f2:ac:bd:5a:cd:e6:cc:29:d5:
                    2c:c1:24:48:65:21:75:45:36:08:d7:e0:c5:6c:71:
                    71:9a:2a:b2:a8:77:b5:ef:a6:68:ed:a3:4f:58:df:
                    1a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F9:E1:05:92:DC:43:A6:CB:C1:81:CD:A5:4D:A9:20:21:E9:83:37
            X509v3 Authority Key Identifier:
                keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4e:a6:3e:08:ed:19:56:07:09:87:a3:86:b0:75:62:45:fc:
         c2:38:53:ef:8f:e4:9a:f1:2e:0f:63:dd:26:78:51:10:22:2c:
         03:a8:7c:f4:50:82:43:a5:48:53:41:f0:fc:eb:94:04:6a:8c:
         8d:a0:ca:50:0d:3d:58:a4:6e:9e:6a:bd:b3:fe:6b:46:31:a8:
         6a:d0:98:62:81:78:33:fe:0f:cf:a7:b9:be:37:d3:31:35:4a:
         0b:33:66:11:42:e7:8a:96:61:12:6d:51:ff:a7:30:a8:80:b5:
         03:4e:e8:29:76:8d:39:fc:4c:c5:6b:98:08:88:32:a0:cf:65:
         e5:1d:79:e1:ca:2c:26:fb:2d:17:1c:8a:01:f4:68:9a:6d:4b:
         d1:4e:dd:4f:81:34:9c:c9:5a:ee:4e:01:70:47:11:39:97:4e:
         af:b1:5e:47:8a:cf:60:18:63:d2:cc:60:66:a0:a2:24:5c:52:
         c5:df:b1:b0:91:b8:3c:a2:42:36:43:04:f7:bb:e8:12:98:c9:
         38:38:8b:ea:95:fb:92:c9:f6:97:d4:ef:47:62:bd:fd:f0:29:
         5e:21:a7:08:94:cf:88:ca:f9:dc:5d:54:a0:74:20:28:22:98:
         ba:d6:49:eb:1a:52:0f:aa:95:41:01:cc:0a:0a:7f:99:a7:f9:
         ba:aa:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:57:41 2026 by rpki-client