This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
File:                     tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json)
Hash identifier:          /nbjEUNFls1VT5c8EEFM+oqedOAPYH4SmNwEMq8R0IQ=
Subject key identifier:   9D:03:3E:29:26:00:F2:69:4A:93:FC:3C:3D:4B:73:90:AD:5F:80:80
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Certificate issuer:       /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial:       019BF9C05F4FC9E377C105E351C7DE369089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
Manifest number:          17F4
Signing time:             Mon 26 Jan 2026 10:01:32 +0000
Manifest this update:     Mon 26 Jan 2026 10:01:32 +0000
Manifest next update:     Tue 27 Jan 2026 10:01:32 +0000
Files and hashes:         1: 7gdlonHkctidA_Jgo0e1sPluTfw.roa (hash: L7iWiH+YVCR3BgQWnot+ADKst5Rvum0Fp/JtCnJ65RY=)
                          2: cz3i4996YniCM04uBoqxYULZ1OE.roa (hash: nyw3jhYkbjvahgBCKXr44jUJF3r/xMEzYzkBBzdxVio=)
                          3: dnlzr7T-KrzC8dTpRdaUUBCb42k.roa (hash: FlF41xrTHYEZQDWnwHhEl5bQr7qiicPhhj7kefuMDlI=)
                          4: dzLIS_uUBmT5ML31y6NFSMyd71k.roa (hash: DlezeaLLQKyU+Fuzh+ngOJx/wOMos/kw2vfD167ugl8=)
                          5: h3NO-bNRnKL0h-LwaiCjswg7_nY.roa (hash: nge/dAbyC8BEKmPsWUQCbHBH18ANQj9ceVjvT5f7JS4=)
                          6: le7g6AeqMWo8tC4Pm6_9GuPpA9Y.roa (hash: M3GaptBPUtevgfpamZx3KC2EjkI+htg/GGtdiA7/WxU=)
                          7: o2KmTBSx7YAGDylX3itL6SdPUZE.roa (hash: lugrh1NUXlse4UYLEWT+hm10hbsF+hFuCCQ7+JOgu7c=)
                          8: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: udTHZo85MGtUXDzkyqMmP6QK46emJ1sSVm765XvovwY=)
                          9: v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa (hash: oqxmALkOA6EG36s93nwvrqkYRgI5R7v2/8FaBvM3TLU=)
                          10: zMhciCUgU6J6shiNhaiwocMfw14.roa (hash: c8SQXIzHCbyAhdC6MEvd2MwYwyUckczcTmVUE35TvUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:c0:5f:4f:c9:e3:77:c1:05:e3:51:c7:de:36:90:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
        Validity
            Not Before: Jan 26 10:01:32 2026 GMT
            Not After : Jan 27 10:01:32 2026 GMT
        Subject: CN=9d033e292600f2694a93fc3c3d4b7390ad5f8080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a5:0a:29:67:72:09:b8:2f:ee:ee:60:db:dc:
                    90:e2:91:60:77:f5:14:8e:ca:49:41:bd:8a:51:bd:
                    de:44:33:aa:c7:dc:4e:75:86:d1:bd:3d:07:d6:c2:
                    b4:0c:c2:35:46:ea:83:d7:83:8d:72:98:71:85:82:
                    06:07:49:d2:eb:52:e6:c5:9d:90:2a:b3:ef:34:d8:
                    cb:f5:99:b1:e6:6c:f5:88:0b:ab:f0:a1:ad:8b:1f:
                    22:aa:c1:a3:a7:bd:81:ab:70:69:2d:e4:31:fd:a0:
                    ac:86:f6:76:cc:66:a1:5b:12:71:c9:ca:21:1d:dc:
                    ec:8e:db:3d:d6:e0:e3:46:f1:ab:4a:3f:30:b1:3c:
                    0e:93:aa:c0:62:b8:88:66:9f:ff:f6:0b:e9:5d:af:
                    06:93:02:76:17:fd:ce:44:5a:e3:68:aa:1f:7a:5f:
                    da:90:83:dc:7f:26:32:cc:14:25:a9:49:c0:9c:05:
                    57:4d:08:d8:59:35:19:88:89:3b:fc:13:1c:d1:31:
                    e9:bc:54:2d:e6:e5:ef:fc:d8:97:39:af:99:2d:a3:
                    58:ef:0a:f7:cb:92:2a:62:73:4a:80:b5:f0:36:aa:
                    27:e5:67:15:41:e9:e8:82:7e:9d:7e:ca:a4:68:9d:
                    29:fa:84:9c:13:70:1d:6d:52:0a:77:ce:b0:ec:3b:
                    79:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:03:3E:29:26:00:F2:69:4A:93:FC:3C:3D:4B:73:90:AD:5F:80:80
            X509v3 Authority Key Identifier:
                keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:54:c5:f5:0c:2f:b0:da:ba:7a:6f:9a:07:81:c1:9a:be:16:
         6f:74:d1:6f:fd:3c:a3:e8:80:4d:ce:0b:48:de:74:0f:22:ea:
         96:99:c2:0b:ef:cd:2b:d8:12:81:49:b8:7b:87:d2:f2:cf:97:
         75:67:a0:e0:3b:72:a5:20:cd:b3:02:6a:05:bc:ac:d4:1a:1e:
         14:cb:27:72:31:ad:ac:7d:47:d8:45:4c:b5:39:f8:f4:d2:82:
         68:06:8d:d8:26:63:37:50:29:b0:18:76:63:2b:c1:51:15:69:
         71:10:47:cd:5d:aa:23:ae:16:d8:23:d0:2d:e0:7a:62:0e:cb:
         0d:63:2a:65:a1:a6:46:98:44:3c:61:65:21:f0:08:54:92:af:
         a4:c2:cc:ac:28:fa:80:e6:b2:33:ff:67:8e:2b:ac:fa:8a:9d:
         bc:06:c3:b5:ce:65:71:21:bf:08:01:ae:0b:85:2c:a3:dd:ca:
         eb:58:c5:ff:29:23:c5:6d:c2:d6:9e:33:8b:1a:8f:12:0d:4b:
         df:8a:37:e4:7f:28:ab:69:21:8e:b8:5d:71:02:f4:6d:f3:68:
         7f:39:83:ab:1f:b4:cd:80:d9:aa:43:83:21:27:39:4d:1f:05:
         df:65:93:7d:54:1b:58:05:85:88:dc:0f:90:50:bb:c1:2e:00:
         5c:1b:13:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:05:26 2026 by rpki-client