This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File:                     tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier:          wLJ+BxdZ1BURfHq8t2ARI96lswSj9nZ5xxfNMlOng/Y=
Subject key identifier:   48:7C:2D:D7:57:00:34:5C:35:71:2F:0A:35:7E:AD:69:DD:CD:B8:70
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer:       /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial:       019BF6BF30899DA3CE268C1C9B620849A3C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number:          156C
Signing time:             Sun 25 Jan 2026 20:01:23 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:23 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:23 +0000
Files and hashes:         1: 7zP-vrGMSLLfqRfiE-wgv93MQnc.roa (hash: RFbWknjP21J0ZtXdcY+/jqdLrNcb7a87Mqd1uXals1g=)
                          2: GmKON0n4q41F09JbkIeSWlYg2vg.roa (hash: MA8HRllJQ5XTGjB4uhWUi8OdDfPzCM6iy7P4PReIInE=)
                          3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: AuJ+Vz8roTmDU6cUOkOfse35PuEWUtRE+P8j5kG5P+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:30:89:9d:a3:ce:26:8c:1c:9b:62:08:49:a3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
        Validity
            Not Before: Jan 25 20:01:23 2026 GMT
            Not After : Jan 26 20:01:23 2026 GMT
        Subject: CN=487c2dd75700345c35712f0a357ead69ddcdb870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:00:6c:41:62:2c:ed:f9:a7:3e:c9:a6:0a:8d:
                    3b:3d:0d:ba:30:04:12:1e:9f:c8:81:ad:e1:36:ab:
                    4f:4e:dc:8b:90:60:e4:33:bc:0a:ec:52:4a:59:1f:
                    93:b6:27:5a:ae:c2:90:13:77:43:f1:2b:85:84:10:
                    2f:90:1e:c6:98:2b:52:d6:3a:b3:95:ed:44:63:14:
                    0f:64:13:38:dc:60:b2:c1:49:23:71:b8:5c:1c:e0:
                    1d:eb:e8:44:0e:68:be:f7:83:95:3f:24:c1:1e:c7:
                    f6:a3:9e:d3:c3:0f:99:01:a8:89:2b:41:79:2e:f4:
                    85:0e:4d:6d:5f:b8:e1:ec:28:39:f1:92:a1:22:3f:
                    ea:77:5c:db:14:62:2b:2a:69:89:6b:2f:55:17:95:
                    6f:31:19:7e:58:70:bf:d7:ef:63:0f:c2:1e:57:48:
                    23:4b:87:c7:b9:5c:5d:dd:99:25:31:a0:48:30:5a:
                    97:2c:47:ad:db:70:0e:c0:4f:0d:e2:1e:bc:a8:5d:
                    97:61:3b:5c:9e:25:ed:f0:58:e7:25:b8:b6:01:c0:
                    24:9e:bd:bb:fb:dc:fb:6c:28:82:ae:fa:82:ac:35:
                    52:b0:38:09:dd:f8:a6:ac:2a:9b:31:7c:bd:3d:a6:
                    c9:48:94:37:68:78:d8:18:7f:d4:3b:c4:64:51:93:
                    31:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7C:2D:D7:57:00:34:5C:35:71:2F:0A:35:7E:AD:69:DD:CD:B8:70
            X509v3 Authority Key Identifier:
                keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ed:9c:79:9c:da:f2:d1:7c:84:32:22:21:02:9e:70:dd:9f:
         3c:15:97:3b:e3:76:07:ce:45:39:ec:35:32:bd:33:2e:20:81:
         a9:cd:5c:f7:d6:db:4c:c2:10:c7:cf:c3:d9:04:e0:8e:dd:83:
         3b:db:50:12:27:86:70:10:73:3c:2b:80:c0:56:9d:ac:b9:27:
         3a:02:c6:a5:91:4a:01:21:a4:58:e7:b4:63:15:3b:28:d8:09:
         fa:ef:6c:61:0d:83:ce:85:df:1c:f9:9e:0b:2b:dc:bd:8a:08:
         04:0b:27:54:ca:e1:e6:71:ed:63:93:b5:12:69:e2:aa:8a:eb:
         0c:2b:35:fa:97:e7:f8:04:47:2d:75:a7:a4:81:5b:b3:16:52:
         a1:e4:4d:6f:01:3f:6c:85:16:54:62:d9:01:cf:17:f1:e5:fb:
         a5:bd:17:95:da:8b:ef:7e:39:16:d6:fa:2b:bb:d1:22:9d:cb:
         1b:ae:1e:0c:62:be:f3:fd:3b:97:41:48:39:b1:82:7c:99:1b:
         85:95:30:53:62:55:13:08:94:88:c6:83:7c:bd:10:f7:95:46:
         78:c1:dc:08:5e:fb:d0:5e:7b:da:ae:e4:30:db:65:cf:e8:c4:
         5f:b3:1d:b1:3f:bf:b5:70:a1:1f:81:50:5c:c0:dd:e6:d0:dd:
         cf:c7:26:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:50:44 2026 by rpki-client