This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File:                     tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier:          HFW4K0PYIEpWnWcNg36GDgTRpYtPgzFTtsTJKz/dJ44=
Subject key identifier:   3E:F0:C1:A9:34:CD:ED:B5:67:43:AC:D4:06:96:59:64:F7:F0:82:72
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer:       /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial:       019BF53F04C70A3A9252453B3DB7E0192C0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number:          0A86
Signing time:             Sun 25 Jan 2026 13:01:46 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:46 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:46 +0000
Files and hashes:         1: c1T_ugUar9ceFcuB3HM0intn2C4.roa (hash: r2UF6QghR5sMhXjvwfbc2TQkLc9tI62JzcSjSV6zEYY=)
                          2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: 7Aqn2Xp4YgpfOP0O+QyOjDTOdn8zo6HsBYnIhAOi7hE=)
                          3: zn5qo0nWrzLZmASHG4XfqLmagKc.roa (hash: lbZiqoyBwXfTKlcc0WAFe6dfCHt4tuz6Zs1OJOLtDmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3f:04:c7:0a:3a:92:52:45:3b:3d:b7:e0:19:2c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
        Validity
            Not Before: Jan 25 13:01:46 2026 GMT
            Not After : Jan 26 13:01:46 2026 GMT
        Subject: CN=3ef0c1a934cdedb56743acd406965964f7f08272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:89:43:86:61:3f:0f:bc:44:44:01:38:1d:
                    56:37:0f:e6:c3:9e:9e:99:11:0e:f4:02:57:22:8f:
                    92:de:6a:5f:93:18:a5:74:4e:fc:9d:f5:45:54:30:
                    56:6e:a7:ca:d0:ab:02:9d:98:e7:39:8f:a0:2d:35:
                    77:cf:ae:45:c2:66:25:01:8c:6b:69:f5:28:f3:b3:
                    24:fa:59:9d:e7:15:38:ad:ef:11:54:43:b7:4b:e7:
                    70:2b:2a:60:12:08:be:eb:c7:84:e0:39:5b:66:a3:
                    d2:5e:ea:ef:d0:c7:10:a0:e0:7a:cd:2d:b0:b8:e2:
                    5c:4f:43:7c:cd:f1:8f:58:27:f9:8e:f9:9a:81:77:
                    f3:9c:17:7d:c7:bc:66:1c:6a:f2:37:13:d4:18:c0:
                    bf:3d:f3:a7:e2:d4:24:f0:5a:94:b0:88:11:ba:78:
                    7c:0f:b3:e7:49:50:f7:67:a2:dc:0a:db:d3:62:7b:
                    95:28:e9:1f:b9:bd:95:4c:04:6f:09:72:28:63:57:
                    31:94:76:e3:46:07:0a:08:bd:3b:48:e3:3f:c4:fc:
                    6c:6e:f8:f4:69:4a:8e:6b:b7:c8:92:4f:1b:22:2c:
                    84:6f:1b:fd:e1:8a:48:18:49:69:9e:6b:35:42:5a:
                    69:aa:87:4c:12:ac:e4:90:9f:11:6c:85:78:b7:3c:
                    02:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F0:C1:A9:34:CD:ED:B5:67:43:AC:D4:06:96:59:64:F7:F0:82:72
            X509v3 Authority Key Identifier:
                keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e0:7c:13:5b:7e:aa:ea:c6:2d:ce:3b:d0:b3:33:44:51:ad:
         af:6b:3a:1d:65:ca:28:fd:4c:89:fd:c6:4f:87:45:4d:7c:14:
         2e:fc:44:ec:76:86:60:50:68:7f:9e:29:3b:a3:85:cc:cb:91:
         d0:73:b0:06:fb:1e:1f:5d:a2:27:cb:c0:72:a9:36:68:54:47:
         3e:71:dd:6d:84:69:c6:a7:ea:7c:ab:ab:5d:0b:53:4c:85:99:
         82:15:75:4f:22:6a:19:61:c2:6a:f1:68:70:70:92:de:28:a4:
         b4:f0:e1:9c:9e:77:b6:d1:21:49:37:25:0e:92:dc:c1:aa:07:
         05:bb:ff:64:ec:ac:88:82:8e:47:83:13:d0:51:a7:d1:42:7c:
         c2:32:f4:ab:28:8e:f8:9c:db:69:6c:23:73:93:93:71:26:e7:
         50:99:eb:02:ce:58:48:f0:bb:cc:3b:94:a9:7f:d0:ba:49:84:
         ae:19:54:c1:86:44:ab:20:56:08:44:16:0f:ba:73:33:24:17:
         bc:f7:76:33:55:bc:c9:71:1c:f2:82:56:61:a9:c5:23:53:a5:
         e8:95:39:0c:83:b0:18:f6:ae:c0:18:dc:89:96:15:3b:f8:9d:
         07:e2:4d:2e:01:be:bd:0b:e3:c6:c2:e5:12:71:a2:be:92:84:
         d7:c6:bc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:44 2026 by rpki-client