This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File:                     TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier:          AQ5Mlq1mC+nc6c54A/vu3Uj9llJ59/muWhWNE/V/BAs=
Subject key identifier:   E3:22:B8:38:FF:D6:BA:D8:44:E6:CA:AB:BD:49:2B:F1:17:EA:2B:BF
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer:       /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial:       019BF72D1227AAD30E19D79FED2CBE52787D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number:          0C44
Signing time:             Sun 25 Jan 2026 22:01:24 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:24 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:24 +0000
Files and hashes:         1: HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa (hash: bmQ/ag1Lu6nwLlZv2LxE+C1ZMBCU64BZNJ1w9Xn7AYU=)
                          2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: H/fTrpFyYWoA5pwWPfl+WY2CuLYnOvPtS/Xmcdae5vI=)
                          3: Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa (hash: rinRF7QuUuJdb4wOaRb/y6P9GDaazeTC1vT+KTNoxt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:12:27:aa:d3:0e:19:d7:9f:ed:2c:be:52:78:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
        Validity
            Not Before: Jan 25 22:01:24 2026 GMT
            Not After : Jan 26 22:01:24 2026 GMT
        Subject: CN=e322b838ffd6bad844e6caabbd492bf117ea2bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:39:d7:0c:70:13:82:b5:cb:3b:37:97:de:
                    82:40:bf:38:1c:26:68:57:28:f4:41:57:b6:74:43:
                    27:6b:a2:68:e9:a9:17:35:0f:4c:ba:c2:7a:17:f2:
                    ff:5e:35:4b:d6:02:8f:02:b7:ed:f2:25:81:b5:7b:
                    ec:df:f6:94:39:96:9d:14:6c:22:83:fa:ff:de:7d:
                    d5:3c:b7:76:bc:66:91:c8:14:eb:ff:01:ef:53:9a:
                    87:ab:3f:cb:bf:0d:05:4e:a6:6d:4a:ba:b1:7f:fc:
                    d6:86:35:03:c0:34:16:ac:b1:1d:9b:17:e1:5b:53:
                    ad:a3:20:c7:0c:6d:6c:91:b1:1e:34:c7:f3:c1:ee:
                    92:19:98:fd:5c:99:2a:93:30:7f:af:9e:44:d7:c3:
                    8d:74:2c:98:cc:24:48:bb:11:e0:b8:55:54:15:e5:
                    4b:23:60:47:00:e4:97:01:d6:fe:e9:79:53:73:5d:
                    33:d5:77:78:04:b3:82:90:c2:13:05:9f:c1:42:e3:
                    96:47:e5:5e:d9:bd:ee:1b:ca:a3:86:fe:86:3f:8f:
                    a2:e0:75:19:2e:a7:6d:ca:0c:93:24:12:d1:6a:80:
                    d4:a2:6b:4c:95:33:89:8a:31:79:a9:8a:b9:73:26:
                    7b:b6:e2:f9:eb:56:7e:25:7e:d5:73:46:57:29:8b:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:22:B8:38:FF:D6:BA:D8:44:E6:CA:AB:BD:49:2B:F1:17:EA:2B:BF
            X509v3 Authority Key Identifier:
                keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3d:7a:e6:73:82:b8:1e:e6:23:60:81:98:08:28:cb:e9:d7:
         44:b5:e2:2c:bf:ff:de:09:c0:62:1a:7d:a0:52:cc:2c:df:9e:
         56:dc:4a:ac:2b:72:3e:31:89:99:30:6d:ad:05:59:53:cb:77:
         c3:c5:9b:d1:c1:41:a2:89:06:7b:39:bf:cf:c7:88:03:ec:f9:
         e6:eb:56:64:42:74:5f:64:c9:e8:af:37:0c:85:6d:d5:b1:dc:
         e7:f5:c4:6a:54:35:40:ce:c1:0c:ec:93:39:9c:de:4f:02:5b:
         28:f7:7c:26:10:9c:25:d8:74:d5:30:67:2f:78:bd:9d:0a:88:
         5d:3f:bc:d2:dc:61:8e:30:a4:20:10:47:d7:bb:04:7b:ac:cf:
         22:55:81:64:2b:6c:f0:13:f6:15:bc:40:a2:e9:39:a2:26:ff:
         c2:41:23:ef:74:4a:52:f7:cb:66:1c:85:57:62:64:5e:c4:f7:
         8a:05:37:72:fb:93:f3:9a:65:41:ad:c1:c9:f7:f3:cc:83:4b:
         70:0e:8a:20:45:ea:77:f7:cd:ef:cc:75:d7:e9:cd:82:b5:e8:
         5f:50:d0:f3:cd:c9:4e:04:ee:93:4c:ea:10:8e:39:17:ec:24:
         a1:e1:33:fa:d4:76:c7:4c:dd:47:93:7a:cd:d2:4d:64:2f:dd:
         48:9b:c8:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3LRInqtMOGdef7Sy+Unh9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODk3ZjFhMzQ5N2ViYmUyN2I5ZTJmMGQ2ZjNlYWUyYmJl
NjhiMjcwHhcNMjYwMTI1MjIwMTI0WhcNMjYwMTI2MjIwMTI0WjAzMTEwLwYDVQQD
EyhlMzIyYjgzOGZmZDZiYWQ4NDRlNmNhYWJiZDQ5MmJmMTE3ZWEyYmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr451wxwE4K1yzs3l96CQL84HCZo
Vyj0QVe2dEMna6Jo6akXNQ9MusJ6F/L/XjVL1gKPArft8iWBtXvs3/aUOZadFGwi
g/r/3n3VPLd2vGaRyBTr/wHvU5qHqz/Lvw0FTqZtSrqxf/zWhjUDwDQWrLEdmxfh
W1OtoyDHDG1skbEeNMfzwe6SGZj9XJkqkzB/r55E18ONdCyYzCRIuxHguFVUFeVL
I2BHAOSXAdb+6XlTc10z1Xd4BLOCkMITBZ/BQuOWR+Ve2b3uG8qjhv6GP4+i4HUZ
LqdtygyTJBLRaoDUomtMlTOJijF5qYq5cyZ7tuL561Z+JX7Vc0ZXKYs8WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMiuDj/1rrYRObKq71JK/EX6iu/MB8GA1UdIwQY
MBaAFEyJfxo0l+u+J7ni8Nbz6uK75osnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEt
YTc5ZGExYTg1NTEzLzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEtYTc5ZGExYTg1NTEz
LzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEz165nOC
uB7mI2CBmAgoy+nXRLXiLL//3gnAYhp9oFLMLN+eVtxKrCtyPjGJmTBtrQVZU8t3
w8Wb0cFBookGezm/z8eIA+z55utWZEJ0X2TJ6K83DIVt1bHc5/XEalQ1QM7BDOyT
OZzeTwJbKPd8JhCcJdh01TBnL3i9nQqIXT+80txhjjCkIBBH17sEe6zPIlWBZCts
8BP2FbxAouk5oib/wkEj73RKUvfLZhyFV2JkXsT3igU3cvuT85plQa3ByffzzINL
cA6KIEXqd/fN78x11+nNgrXoX1DQ883JTgTuk0zqEI45F+wkoeEz+tR2x0zdR5N6
zdJNZC/dSJvIwg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:21:27 2026 by rpki-client