This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
File:                     TTxfCqFBARzi2_GMzOqsjSOoAlM.mft (raw, json)
Hash identifier:          ndBwuhq8sCjyKuqNcZkAv1EKsqO1R1dTt1SQGbAnFdQ=
Subject key identifier:   10:84:9B:6C:E4:0C:5B:24:4C:8B:4B:9F:CF:C5:6D:85:A3:E4:D1:E8
Authority key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
Certificate issuer:       /CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Certificate serial:       019BF6881DD335BEA2409080CDA38631528B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
Manifest number:          0515
Signing time:             Sun 25 Jan 2026 19:01:14 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:14 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:14 +0000
Files and hashes:         1: 25Z4VEtMdr8mirSyT68RGYIDnRA.roa (hash: lvnbo3XhmGJZhSdH7jyEy3U5ULLTyPw51UAj+VCuEeY=)
                          2: TTxfCqFBARzi2_GMzOqsjSOoAlM.crl (hash: PME9IrufYrQP7Ny3GepUZ4ZBSes1uL47tdEpQHxOnvQ=)
                          3: dqMlRayS2Zk8T9yw4HnObXcfkFs.roa (hash: ZflJfUfYgkfuQwoF8VaNgzB/zsaQQoupZA9LCKNCHvw=)
                          4: n8CSKoRLuT4x4jI0qfGa0BhbHd8.roa (hash: n2uonuz5ZghRs61kAlvv99Bmctae2IN7sgoaLTAtaIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:88:1d:d3:35:be:a2:40:90:80:cd:a3:86:31:52:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
        Validity
            Not Before: Jan 25 19:01:14 2026 GMT
            Not After : Jan 26 19:01:14 2026 GMT
        Subject: CN=10849b6ce40c5b244c8b4b9fcfc56d85a3e4d1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:11:b5:d8:88:bf:f6:69:44:c9:fe:f4:86:
                    7d:43:6f:23:bc:c7:0c:23:c3:aa:e4:ab:58:e1:ec:
                    dc:42:10:2e:df:f5:bf:f2:83:99:1b:f9:e3:fc:bc:
                    4d:b4:2d:21:20:75:53:d9:c8:f3:1c:f5:b7:d9:80:
                    f4:5d:ec:90:b4:d9:8f:a7:30:32:5c:c6:af:b3:f2:
                    d3:d9:c0:41:09:13:fe:c3:a3:af:c6:1f:3b:39:21:
                    6a:f7:02:c2:11:ed:d1:30:b2:c5:b0:69:c7:6f:af:
                    af:be:35:02:03:54:d0:d5:2f:d2:2c:81:b9:ab:d0:
                    c9:52:e4:52:fd:0d:4b:d6:58:d1:0f:da:50:a4:c0:
                    be:8b:ec:11:ab:92:38:a2:ae:52:58:fc:73:be:3d:
                    79:93:64:52:63:fd:66:83:94:25:04:5e:fd:92:e2:
                    f7:c1:aa:40:91:d3:27:30:3b:db:df:f3:9b:79:cd:
                    e4:2f:db:5b:1e:3c:af:fb:82:67:fb:f9:f7:cf:12:
                    b8:98:5f:84:e4:40:8e:6e:4b:d1:4e:4c:0c:49:c9:
                    c4:71:b1:7b:4a:07:cb:9b:0f:f5:27:0a:5c:78:a4:
                    14:62:fa:ea:65:a8:fa:e7:f3:a3:45:05:4d:cc:cc:
                    e8:1d:1d:d8:31:eb:65:a4:e0:d2:63:99:25:b5:8e:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:84:9B:6C:E4:0C:5B:24:4C:8B:4B:9F:CF:C5:6D:85:A3:E4:D1:E8
            X509v3 Authority Key Identifier:
                keyid:4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:70:2e:27:8e:83:2c:f1:67:d1:23:60:41:94:51:f2:cb:87:
         a5:a5:6d:bc:09:89:26:ef:27:dd:4f:be:a7:ac:a5:f3:fd:05:
         7f:39:17:6e:c4:40:64:75:02:97:a3:7a:4e:c7:cf:9d:3e:55:
         5e:24:19:2b:45:f1:5d:62:69:97:7b:f7:7b:68:02:6f:89:40:
         16:7c:97:b0:32:10:c1:b0:b1:d2:b7:92:8d:01:a9:29:d6:65:
         0d:9a:d4:a1:5c:b2:aa:12:84:f7:f5:fd:a1:e4:c3:d8:da:a9:
         cb:95:0e:f0:17:0d:ca:8e:26:d8:37:5f:a1:af:f2:81:d6:08:
         e4:1e:fb:6f:b9:eb:08:0d:c5:f4:42:c2:2a:75:f7:11:c7:a6:
         f2:18:50:3f:9e:f4:a4:80:51:0c:a0:5e:40:60:44:63:b5:72:
         17:68:a1:03:3f:11:32:37:92:a0:e7:e7:30:47:50:3d:b2:62:
         39:c0:b6:76:2e:27:ce:a8:93:d7:e1:20:bb:6d:ed:50:a3:50:
         fd:f0:d0:5e:2c:26:9b:2e:88:34:7e:16:b0:e1:17:9e:b9:72:
         7e:65:77:67:d9:ba:de:60:92:e0:70:18:e6:f4:dd:9c:c3:c1:
         2d:40:83:0b:b9:54:5c:fe:39:0c:d1:ff:6a:75:a4:70:8f:d9:
         8b:3a:2a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:03 2026 by rpki-client