This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
File:                     txLJ_svev1b4RdYHkT0bVXFZKio.mft (raw, json)
Hash identifier:          ujpVMvEVvzb9NRB3H7vcJWdH4w5YpogJ7gUh9r8G1i4=
Subject key identifier:   C0:6E:C1:FD:2B:F7:57:43:BC:3F:CE:9D:CA:90:D3:ED:D9:E8:45:3B
Authority key identifier: B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
Certificate issuer:       /CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Certificate serial:       019BF5074C7C1E81EEF1B185A6BF71ABE0D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
Manifest number:          04DC
Signing time:             Sun 25 Jan 2026 12:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:54 +0000
Files and hashes:         1: IF91kVRDdrzodh2Mtx752KpXv5s.roa (hash: bPW1vVJsM7mDfRcerRQP2xE13iLp87+EUfaxF1z9J4g=)
                          2: tLJeZp7omoDa-UyHTJ2AZxClz1c.roa (hash: if8frEcPhkRabYpv1UYuQXiutcrdTOivXcWxUGxry+w=)
                          3: txLJ_svev1b4RdYHkT0bVXFZKio.crl (hash: nGeXOfJggl1sOgcsrQeW9jaa1zBayKEKxNEvIAAvl0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:4c:7c:1e:81:ee:f1:b1:85:a6:bf:71:ab:e0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b712c9fecbdebf56f845d607913d1b5571592a2a
        Validity
            Not Before: Jan 25 12:00:54 2026 GMT
            Not After : Jan 26 12:00:54 2026 GMT
        Subject: CN=c06ec1fd2bf75743bc3fce9dca90d3edd9e8453b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:4b:7e:02:ae:77:f7:a5:c9:e6:98:e5:9f:
                    da:fb:79:52:20:67:ee:05:c2:d9:81:4c:59:93:4e:
                    37:c2:2b:ee:e7:40:f4:7c:d9:e6:2b:7b:00:36:b9:
                    89:e0:db:3d:9f:35:e7:08:f8:c0:17:51:36:13:6f:
                    19:a3:29:fa:a9:d9:e8:33:7a:cc:2a:0b:a2:a6:2a:
                    21:66:17:69:cb:3d:33:f7:1b:bf:c7:61:f5:2c:7c:
                    dc:57:e1:d8:dc:63:1e:89:72:8f:24:ee:4a:e4:5e:
                    b4:45:d2:78:b7:40:db:80:48:f8:2a:71:31:cb:8c:
                    41:e3:bd:a6:0b:3b:53:d8:d9:71:c3:b5:dc:21:2d:
                    2e:23:28:26:0c:e1:bc:16:9e:d8:1f:40:8e:77:18:
                    ea:42:5c:b4:fe:4e:79:ad:53:8f:2d:bb:49:b3:f3:
                    7e:3a:97:ea:85:ec:d4:2d:63:ee:90:58:b1:95:2f:
                    59:b4:3f:50:b2:4a:37:46:f8:e4:74:3e:63:04:9e:
                    65:70:fd:23:1f:32:52:55:ab:ac:61:d0:b7:85:a2:
                    c0:d5:18:a8:4f:03:94:3b:e3:67:88:67:5b:42:aa:
                    38:6c:20:fd:70:77:d4:3a:eb:d5:ef:e4:d3:7f:c4:
                    04:74:3a:3f:b1:54:61:d2:3c:8f:27:35:7b:50:7d:
                    0e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6E:C1:FD:2B:F7:57:43:BC:3F:CE:9D:CA:90:D3:ED:D9:E8:45:3B
            X509v3 Authority Key Identifier:
                keyid:B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b9:71:47:ab:76:5f:87:fe:a2:d2:b2:ed:f9:54:17:d6:15:
         64:a5:e6:de:ca:5b:d3:b1:2f:91:50:fb:25:b0:c3:be:39:da:
         d4:ad:f6:d7:d7:a7:96:a1:d4:f7:c5:1a:3d:fe:4d:45:d7:23:
         c7:8f:61:6d:9f:46:20:c0:d7:15:63:49:20:ee:ab:d5:90:4e:
         cf:51:e0:ba:0e:ef:d8:72:86:4e:22:4e:62:71:3d:78:3a:fd:
         d4:8f:32:01:12:ff:92:fe:0f:28:43:b8:c7:8f:19:34:a0:99:
         da:9e:e3:03:a0:84:00:08:d1:bb:40:f5:a9:f5:a8:0b:55:64:
         e0:4a:30:bb:0a:8a:0f:55:89:c1:3e:e5:1b:da:c9:6f:b1:07:
         e3:a3:3d:a2:05:7f:b2:25:6f:fb:09:c4:d0:ff:ba:74:24:16:
         75:5a:84:41:64:69:25:92:cb:3c:b6:d3:83:8d:8f:db:d7:1a:
         16:e8:10:56:c1:ea:eb:65:53:9c:09:20:99:20:c6:ad:6c:bd:
         02:94:3a:ae:59:8a:24:e4:95:b8:bc:a6:5b:92:04:93:8f:cd:
         b1:d6:16:e9:e2:fd:d2:ff:cd:38:83:97:c1:3f:a2:68:2b:38:
         ea:40:37:1e:ab:91:53:66:6f:1b:de:bb:8a:b5:c2:ee:dd:83:
         fb:a3:44:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:32 2026 by rpki-client