This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File:                     TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier:          VtMQWDz/bVhjR19qYdLOTVrixfysTSR5HeCqtbmw3ag=
Subject key identifier:   54:61:A0:62:D8:4A:A2:AD:BC:F1:24:4A:37:67:1E:CA:22:41:14:CA
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer:       /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial:       019BF5E37BF7A44F212352D51DA9005C0E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number:          129E
Signing time:             Sun 25 Jan 2026 16:01:24 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:24 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:24 +0000
Files and hashes:         1: SFGE70vQYmz_oKTtZMgB-YKUyZc.roa (hash: lZ0OnAmHAxbwpz0Bf+bKQq6tPOf7KpsPHIF+YP1ggzc=)
                          2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: jOnAlJzYJ/ZhKjaFHZ8XN5tLmbWD95HD/04nRNqr2p8=)
                          3: eHNuPU6iYgVIfZ9NIp8A3552y-I.roa (hash: AOM1Ajc5ONgwd+E4wuOhZtP8/uws9RFZszPyOYWcL2Q=)
                          4: vP7G0LDj9js2uqV_dVx329H3yeM.roa (hash: fyHdxLq/9tcpLwgIyk0ErgVx3QqPOxT/MFLUCo0yJ0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:7b:f7:a4:4f:21:23:52:d5:1d:a9:00:5c:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
        Validity
            Not Before: Jan 25 16:01:24 2026 GMT
            Not After : Jan 26 16:01:24 2026 GMT
        Subject: CN=5461a062d84aa2adbcf1244a37671eca224114ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c1:fe:46:87:24:2a:2b:60:d7:bb:89:e4:2c:
                    54:ac:07:d6:86:21:61:09:70:f7:66:99:b9:4a:a6:
                    62:70:de:f2:49:f0:c0:59:af:0d:c2:62:16:ce:ef:
                    fb:fb:48:be:81:08:2e:8b:60:31:34:d5:38:00:22:
                    8d:e8:b3:02:e0:b4:45:fe:6f:75:4b:81:df:34:04:
                    47:9f:5a:c4:9a:04:78:dd:e9:ca:9e:d3:11:9d:1e:
                    e0:64:27:07:ea:c6:9a:90:5d:56:8d:36:5e:58:da:
                    82:42:60:03:ca:9c:ec:0e:7a:11:f1:9d:0e:49:9b:
                    e1:74:57:f8:d3:36:cd:c5:3d:54:84:e1:0d:f5:af:
                    83:be:f0:31:d4:d6:24:4f:8b:75:de:f5:e9:09:f1:
                    08:71:c9:d3:8c:98:97:30:04:5f:a6:9b:8c:bd:f1:
                    5b:4a:1f:75:5a:32:47:23:a3:d0:1d:5f:81:4e:40:
                    d5:8f:00:45:9f:56:60:04:17:30:aa:a5:ec:21:2c:
                    d2:e7:3d:0a:da:f9:a0:26:3d:45:25:9f:c4:6e:fe:
                    44:2a:90:dc:63:bb:54:d2:7e:14:28:2f:4c:eb:0f:
                    12:04:55:e0:b5:d4:ac:ab:7a:0b:96:11:fc:22:2a:
                    5f:1e:f1:41:55:47:b5:cd:d8:d4:82:b7:f9:85:b0:
                    64:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:61:A0:62:D8:4A:A2:AD:BC:F1:24:4A:37:67:1E:CA:22:41:14:CA
            X509v3 Authority Key Identifier:
                keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:cc:48:7a:57:1b:3e:19:3f:3d:f6:59:7c:89:93:b1:88:58:
         0a:16:b6:25:f7:c2:81:2d:26:01:d2:f9:82:6c:51:32:13:51:
         7d:12:05:be:10:14:c6:47:0d:79:0a:2b:bc:e3:3c:65:15:48:
         1d:ad:5f:1c:35:70:25:6b:33:c5:b4:67:b7:15:f1:02:5a:56:
         48:b7:7d:85:1d:50:59:9e:10:e2:46:a3:76:20:91:2f:af:2c:
         6a:e5:7d:41:48:cc:51:fd:fc:79:54:76:1e:bd:d0:9d:32:df:
         9c:51:f7:d2:aa:b0:60:02:ee:63:db:0a:f6:5b:02:b6:f7:b3:
         2f:cf:c5:64:f0:72:d3:16:70:d2:ca:57:bd:7e:c3:b8:4e:29:
         f3:6e:f0:52:fb:bf:fe:e9:39:b4:ec:d5:e5:c1:e2:00:83:6f:
         0a:cb:2d:32:10:c3:08:8a:34:e2:48:f5:03:ab:59:6d:d3:96:
         42:7c:78:05:55:11:5b:80:2b:d9:41:0f:8b:e5:3e:1c:52:7a:
         8e:05:96:b1:b7:31:f2:0a:e2:32:2e:b5:18:27:28:55:3d:30:
         64:8a:ee:78:6d:10:06:38:65:01:72:1f:16:ef:eb:26:fc:2b:
         cd:7a:52:2a:e3:25:1f:21:18:1e:f7:39:1f:05:97:7b:c5:63:
         64:e7:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:52:01 2026 by rpki-client