This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File:                     T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier:          8m2NXpqBH9CE5HMi9sse458h6PvbtxuzyYSRYy7YPTo=
Subject key identifier:   B5:00:FF:2C:9D:96:87:CE:25:7D:E8:3C:7E:F3:49:E4:1A:46:EF:47
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer:       /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial:       019BF79ACE223F353C8F0FA5DE99499D3268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number:          17E9
Signing time:             Mon 26 Jan 2026 00:01:16 +0000
Manifest this update:     Mon 26 Jan 2026 00:01:16 +0000
Manifest next update:     Tue 27 Jan 2026 00:01:16 +0000
Files and hashes:         1: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: Yo8n5pY8SaKH1U8zI1KJvsF/aoWq5uElglDx6hIJf9I=)
                          2: YrHkJUDzzHYV4NSM8kuc3mWA3No.roa (hash: XN+H9pEw3/RHdNbn4FFCp9WEa3ViQ6Ir6r897iLElR0=)
                          3: eczTTw63Z89Bvx_PDTMEgnxlsuM.roa (hash: EGjQDsuLjtgXMDaJKqFFVXP8wORi9rfRbOBnhjq8cf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:ce:22:3f:35:3c:8f:0f:a5:de:99:49:9d:32:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
        Validity
            Not Before: Jan 26 00:01:16 2026 GMT
            Not After : Jan 27 00:01:16 2026 GMT
        Subject: CN=b500ff2c9d9687ce257de83c7ef349e41a46ef47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:7a:bd:26:9a:36:45:50:32:6a:88:3e:fb:
                    f2:30:19:7b:72:ce:2b:98:68:6e:8d:d6:87:59:2a:
                    30:f4:99:4f:ce:21:71:9e:4c:7b:9c:75:cd:3b:d5:
                    00:01:f8:80:f0:f8:7d:68:0a:15:19:62:f8:af:b8:
                    23:1d:6a:88:77:2d:0a:54:47:e6:ad:b1:bb:11:c3:
                    72:15:7c:82:85:77:12:43:c9:2a:ec:0b:c7:0c:ce:
                    80:3d:83:b9:d6:18:19:2c:36:47:a7:0a:62:77:00:
                    cd:d2:43:ce:fa:bc:1e:33:0b:8f:f2:90:d5:27:e5:
                    a0:db:b1:d7:29:bd:e3:62:4f:f1:13:5c:60:04:85:
                    56:76:59:87:01:3d:ae:88:19:1e:8b:3d:2f:0c:5c:
                    58:64:2f:b3:a8:0d:7a:fa:8f:8b:58:1b:6e:66:71:
                    98:25:d4:62:a4:f6:bf:19:64:32:fe:cd:f9:33:32:
                    b1:31:2f:a0:b7:0e:d4:fd:75:0e:f9:4f:82:d4:3f:
                    6c:9d:8f:05:ea:c7:b7:00:cd:d4:cf:5d:2d:bd:f7:
                    ca:b6:af:16:ab:2c:e1:57:40:18:88:01:d7:e1:1a:
                    b4:54:95:b1:f7:9e:dc:0e:8d:51:ae:64:2e:f3:73:
                    aa:af:85:65:57:02:1a:8e:40:c5:59:8c:61:53:fc:
                    41:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:00:FF:2C:9D:96:87:CE:25:7D:E8:3C:7E:F3:49:E4:1A:46:EF:47
            X509v3 Authority Key Identifier:
                keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:17:83:9b:a8:df:aa:52:4b:2a:63:e2:ec:4c:de:31:bf:9b:
         55:da:c0:81:dc:25:7a:52:a5:f5:d3:1a:fc:81:72:83:bb:c2:
         8c:cb:61:58:e1:f3:2f:32:43:88:3f:73:3c:a8:10:22:25:e6:
         ee:e6:1c:51:9f:96:5f:e8:68:15:6f:db:64:3b:63:81:84:85:
         a0:cb:35:a0:c6:0e:98:17:6f:e6:cd:a2:ab:2a:bf:db:bc:a2:
         a1:2b:64:df:7f:cd:9b:7e:cb:1b:2f:59:6d:d0:56:b9:80:e3:
         1c:3a:fb:f1:92:6b:d3:77:cc:89:74:99:c9:15:6d:ef:92:b5:
         83:74:89:db:5f:ef:2d:03:f4:34:3f:bc:8d:61:f2:41:f5:34:
         45:05:8f:6c:ef:c0:6c:44:0e:58:a1:00:34:8a:e7:69:1f:b3:
         a2:63:d4:d1:88:f7:32:13:1f:1e:27:d7:52:12:a4:eb:f7:0c:
         9a:0c:72:09:ca:94:5c:44:90:d2:ff:c4:37:f9:3a:2b:10:c3:
         92:1c:4b:be:9c:96:19:a0:a0:1f:f5:54:40:f9:9c:26:61:66:
         e0:8f:c6:aa:d7:c9:1a:2d:58:5e:7f:2e:87:e7:57:49:7d:ff:
         28:39:67:cd:d8:69:54:45:6e:1a:22:b4:80:cf:86:ed:56:37:
         32:8c:f8:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3ms4iPzU8jw+l3plJnTJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZWI5NDU3ZWM1MTllODIzNzg2NzcxMGJjYzgyZmEzMGVh
ZTY3YzAwHhcNMjYwMTI2MDAwMTE2WhcNMjYwMTI3MDAwMTE2WjAzMTEwLwYDVQQD
EyhiNTAwZmYyYzlkOTY4N2NlMjU3ZGU4M2M3ZWYzNDllNDFhNDZlZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf96vSaaNkVQMmqIPvvyMBl7cs4r
mGhujdaHWSow9JlPziFxnkx7nHXNO9UAAfiA8Ph9aAoVGWL4r7gjHWqIdy0KVEfm
rbG7EcNyFXyChXcSQ8kq7AvHDM6APYO51hgZLDZHpwpidwDN0kPO+rweMwuP8pDV
J+Wg27HXKb3jYk/xE1xgBIVWdlmHAT2uiBkeiz0vDFxYZC+zqA16+o+LWBtuZnGY
JdRipPa/GWQy/s35MzKxMS+gtw7U/XUO+U+C1D9snY8F6se3AM3Uz10tvffKtq8W
qyzhV0AYiAHX4Rq0VJWx957cDo1RrmQu83Oqr4VlVwIajkDFWYxhU/xBmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUA/yydlofOJX3oPH7zSeQaRu9HMB8GA1UdIwQY
MBaAFE/rlFfsUZ6CN4Z3ELzIL6MOrmfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAt
NWYxMjM1NTVjZmIxLzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAtNWYxMjM1NTVjZmIx
LzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtBeDm6jf
qlJLKmPi7EzeMb+bVdrAgdwlelKl9dMa/IFyg7vCjMthWOHzLzJDiD9zPKgQIiXm
7uYcUZ+WX+hoFW/bZDtjgYSFoMs1oMYOmBdv5s2iqyq/27yioStk33/Nm37LGy9Z
bdBWuYDjHDr78ZJr03fMiXSZyRVt75K1g3SJ21/vLQP0ND+8jWHyQfU0RQWPbO/A
bEQOWKEANIrnaR+zomPU0Yj3MhMfHifXUhKk6/cMmgxyCcqUXESQ0v/EN/k6KxDD
khxLvpyWGaCgH/VUQPmcJmFm4I/GqtfJGi1YXn8uh+dXSX3/KDlnzdhpVEVuGiK0
gM+G7VY3Moz4EA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:02:23 2026 by rpki-client