This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
File:                     T1VxCj6EBcGv2mxj6edzZu_GHnw.mft (raw, json)
Hash identifier:          r6P2VD5Uqb+XIKMczdqD09klis4GG16OpZwLYeGKXBw=
Subject key identifier:   56:48:BB:51:A0:7B:66:32:D9:34:71:A3:A7:47:86:8C:BF:EA:24:FD
Authority key identifier: 4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
Certificate issuer:       /CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Certificate serial:       019BF7D1AC5F34F95807DD9225AD51CF7043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
Manifest number:          03EB
Signing time:             Mon 26 Jan 2026 01:01:12 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:12 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:12 +0000
Files and hashes:         1: RNKA09gmabj2JlF4I1bGm-LyfJ4.asa (hash: 9aXjOvMKdj2EmkaeYTua4+aJ6Mm8p/TnOqM6sJ1bQoY=)
                          2: T1VxCj6EBcGv2mxj6edzZu_GHnw.crl (hash: BFyW0CLpJb6kOeDA6db8DHDsBFVWkpz6E3mSn9ZBvVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:ac:5f:34:f9:58:07:dd:92:25:ad:51:cf:70:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
        Validity
            Not Before: Jan 26 01:01:12 2026 GMT
            Not After : Jan 27 01:01:12 2026 GMT
        Subject: CN=5648bb51a07b6632d93471a3a747868cbfea24fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:18:74:2d:63:8e:db:76:56:c5:47:b8:ce:
                    13:7a:22:89:06:66:6b:15:f7:64:e9:a2:e6:1a:b3:
                    bd:5b:2f:bb:02:30:f1:6f:6e:0d:4e:93:09:af:97:
                    80:d4:52:79:cb:e4:ce:94:95:cd:53:6e:05:db:18:
                    75:5a:6f:9c:7e:1a:9e:01:f0:51:f1:e6:16:2f:38:
                    18:83:a1:16:d0:17:d8:49:46:ac:26:9f:da:73:95:
                    b9:49:99:e3:99:38:9e:a4:df:91:57:2d:1a:9f:5d:
                    f7:c1:a2:b0:35:54:78:3f:e1:4a:84:70:70:a4:c5:
                    51:88:d0:6b:0a:cf:66:43:4a:08:07:be:05:93:23:
                    ea:87:d1:7e:da:ac:e1:f2:fb:d1:33:6a:a9:48:53:
                    8e:9f:90:1e:07:b4:25:6b:c1:c6:f6:a5:81:2b:99:
                    34:f1:ec:46:94:37:d2:4f:d5:80:41:22:1a:7a:de:
                    0f:21:52:29:2c:9c:93:2c:7c:92:b6:c2:01:11:0a:
                    0f:09:ba:b6:c1:41:bb:54:1d:de:88:94:63:36:55:
                    3b:5e:b8:2c:65:e7:5e:33:82:04:45:0c:82:92:7c:
                    4a:a6:17:0f:4a:4b:d4:c3:d7:23:e3:c6:5d:7e:87:
                    b9:18:60:24:9b:14:f2:17:3e:f2:b8:04:5a:9c:82:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:48:BB:51:A0:7B:66:32:D9:34:71:A3:A7:47:86:8C:BF:EA:24:FD
            X509v3 Authority Key Identifier:
                keyid:4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:7d:ed:d3:d7:b1:29:17:b8:8d:d1:78:fd:93:c3:47:d6:4f:
         e9:ca:40:93:09:eb:47:c0:2a:8b:d1:ca:b8:f2:6e:58:36:f3:
         95:ea:01:4a:e9:97:c2:d8:90:db:76:93:7f:b0:85:4c:70:50:
         7c:2e:01:8c:06:a7:fb:a3:d0:04:da:ca:db:a8:db:4d:3b:f5:
         49:0d:6b:de:15:ef:27:87:e9:3f:33:2c:35:1d:3e:68:e9:d7:
         12:83:c1:a7:4d:95:87:f2:09:7a:b8:15:ad:fd:2a:f5:5a:37:
         96:2d:2c:4a:d2:a1:fc:90:60:ee:37:1b:14:f2:12:c5:2a:95:
         0d:a8:12:d0:e5:a5:fc:ad:a2:2b:fd:81:27:1e:8e:a8:20:ba:
         10:24:3c:3f:07:82:08:97:27:c1:09:41:c3:27:73:f6:ff:ee:
         a9:c9:58:d9:46:12:9f:38:e6:96:04:3d:98:ab:fc:06:c6:d4:
         e6:15:91:b7:55:d5:46:d5:b3:1c:3f:3b:a7:15:0a:15:a8:fc:
         e8:41:64:e9:ee:9f:29:4e:3e:f6:7a:14:d9:44:36:9a:2a:9f:
         62:98:8d:bf:e4:54:52:7a:01:ce:9c:ed:a6:a0:be:09:79:0d:
         c0:52:af:09:46:4f:3f:52:f9:d8:28:e7:34:35:20:cb:36:a2:
         fb:ec:2e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:50:42 2026 by rpki-client