This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
File:                     tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft (raw, json)
Hash identifier:          k5tRx+I6Uy8EpHOeh2V7LtnL2dKk9D3yPLWDWKQTYfY=
Subject key identifier:   3C:96:E3:01:08:AC:0E:BC:48:B4:FD:13:62:79:EA:B7:29:56:74:1B
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Certificate issuer:       /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial:       019BF72CE179775909D8CA6EDF18946502C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
Manifest number:          17F9
Signing time:             Sun 25 Jan 2026 22:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:12 +0000
Files and hashes:         1: 1VuGqO-b5-MAfDRweaNuv06UwQE.roa (hash: 5cmqBdE+cZUafwo3gwOznhicqwBl1Y6l9Jg+XAX1liI=)
                          2: 9823jxXqdCSIxcH288HnqavucSI.asa (hash: 3zFrnCZ3fk7mBk5UudxYVrRpKBD3GP7IzVn6x67AU6o=)
                          3: EwhrUJlTerpzDSxGJYXhc1ipbvY.asa (hash: Kifw3U236SfBdGCg3lUHGjK23zhhUU5LfhGOnN6eMXs=)
                          4: FhIJYPne7gPWVQQPlSNOQDYojyw.roa (hash: K6YwsovdJ/O0GUapO1LURNQtSxCoIhGALa7CIvhy8bI=)
                          5: Qqt98OgHdyagvtzakVb3zNMmwKs.roa (hash: BpO8bWnBPYn/bYjQyXDccWI2949LL94WM+S3q4wZu/4=)
                          6: VvqzmjNZq8EAn7upk3HKESnO2Sg.roa (hash: zi8li6T/eNUQAuUi6F1iTu5taSL1qMtfO51QFh76N4Q=)
                          7: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl (hash: 40qq8TOpkXwrnVW1dxQ78MOZCjnrdvaVl8t59agQBDE=)
                          8: zfs1n8rEspCcwaljPO1LWoriK7A.roa (hash: Cw4La7Iv+J3S/kv3dOrnyO46Wye0r7XGdA/N85GgLG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:e1:79:77:59:09:d8:ca:6e:df:18:94:65:02:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
        Validity
            Not Before: Jan 25 22:01:12 2026 GMT
            Not After : Jan 26 22:01:12 2026 GMT
        Subject: CN=3c96e30108ac0ebc48b4fd136279eab72956741b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:83:41:5d:d4:83:88:4c:b5:b3:a1:40:69:
                    67:7b:73:b5:c1:0a:7b:c8:9e:b9:05:9e:48:2c:2a:
                    ce:7f:56:5f:54:ba:de:5c:5a:fb:11:37:6f:a7:0e:
                    70:1d:8a:f0:e6:47:dd:0d:0f:78:82:9b:c2:a5:34:
                    7d:91:d6:95:43:0b:ce:b2:12:e1:1a:42:71:a2:03:
                    d0:0b:af:3b:87:c1:ba:1e:f0:7d:2b:8f:13:35:ef:
                    2a:2c:d8:74:b5:b7:3b:5e:33:78:cd:84:48:0c:5e:
                    0a:a3:f0:87:be:3f:a3:06:9c:e1:67:a2:ab:8d:c2:
                    32:84:22:7b:4d:4f:1f:ff:1c:3a:dc:b4:ef:c7:84:
                    41:9f:2a:ef:2b:e2:df:70:98:73:16:45:5e:e8:e9:
                    d3:51:4e:30:31:8e:fb:eb:a3:fd:93:51:4b:cf:1f:
                    9e:57:5d:0c:c0:14:b4:93:5f:82:84:50:0e:0f:01:
                    43:06:20:91:1d:5d:21:6c:af:3b:45:b9:5b:c5:68:
                    f6:8f:18:84:f7:98:8b:af:53:c6:54:b6:9b:af:70:
                    cb:cb:30:8e:89:4d:92:83:68:dd:07:b6:6a:7c:14:
                    27:71:ed:8b:ad:f1:6f:e0:5c:eb:b6:76:19:f9:6e:
                    e2:8d:03:d5:7e:16:e8:e9:e6:2d:ac:81:b3:25:03:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:96:E3:01:08:AC:0E:BC:48:B4:FD:13:62:79:EA:B7:29:56:74:1B
            X509v3 Authority Key Identifier:
                keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:42:8a:15:c3:26:1d:58:8e:ab:ab:80:d4:96:6c:94:44:93:
         98:8a:e7:a1:15:e8:69:ab:a4:29:4a:7c:9d:7f:3a:9e:1d:ce:
         a7:47:8a:33:4a:da:1e:98:0d:eb:9e:f3:f1:b0:7d:01:12:e8:
         cf:f4:57:fd:ed:0a:dc:2c:71:6d:ad:ea:fb:96:0b:39:bc:f9:
         2f:0d:37:59:83:b5:d7:4f:24:c7:97:dc:52:69:f5:4b:8f:12:
         1b:ee:e6:d6:3b:6b:46:5f:00:05:ee:6a:cd:6b:80:02:19:cf:
         ac:6a:21:e9:55:8f:5e:2f:d5:11:0c:d5:22:3a:cc:b7:3c:ba:
         a7:60:0e:0f:2b:bc:9d:96:4a:85:0d:00:48:13:a8:fe:02:db:
         54:d9:53:74:40:39:36:7c:61:ad:9e:fe:df:9f:71:5c:5d:15:
         7b:38:38:2f:e8:3b:1e:89:f4:b6:ba:28:d0:72:d7:25:d8:f4:
         20:b5:ee:55:c4:45:8e:fe:bd:57:cb:1f:b3:d8:90:23:d1:68:
         e4:8a:9c:43:47:d1:8b:a3:9d:cc:59:7f:6e:a0:25:f0:3c:d8:
         62:9f:d8:f8:94:2c:bc:82:1d:a8:15:42:37:2d:e6:cc:f0:2f:
         bb:2b:20:17:17:f1:7c:4d:ad:e2:1e:bb:41:ed:aa:55:86:f8:
         fb:8a:21:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3LOF5d1kJ2Mpu3xiUZQLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MzI3NjJhNWU4NjFlOTc2ZGU1M2QxNDc4NmYzOWUzYTY2
OTY4MWIwHhcNMjYwMTI1MjIwMTEyWhcNMjYwMTI2MjIwMTEyWjAzMTEwLwYDVQQD
EygzYzk2ZTMwMTA4YWMwZWJjNDhiNGZkMTM2Mjc5ZWFiNzI5NTY3NDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KODQV3Ug4hMtbOhQGlne3O1wQp7
yJ65BZ5ILCrOf1ZfVLreXFr7ETdvpw5wHYrw5kfdDQ94gpvCpTR9kdaVQwvOshLh
GkJxogPQC687h8G6HvB9K48TNe8qLNh0tbc7XjN4zYRIDF4Ko/CHvj+jBpzhZ6Kr
jcIyhCJ7TU8f/xw63LTvx4RBnyrvK+LfcJhzFkVe6OnTUU4wMY7766P9k1FLzx+e
V10MwBS0k1+ChFAODwFDBiCRHV0hbK87RblbxWj2jxiE95iLr1PGVLabr3DLyzCO
iU2Sg2jdB7ZqfBQnce2LrfFv4FzrtnYZ+W7ijQPVfhbo6eYtrIGzJQNPAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyW4wEIrA68SLT9E2J56rcpVnQbMB8GA1UdIwQY
MBaAFLcydipehh6XbeU9FHhvOeOmaWgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDct
NjNiNTJhYTdmOGRhLzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDctNjNiNTJhYTdmOGRh
LzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkKKFcMm
HViOq6uA1JZslESTmIrnoRXoaaukKUp8nX86nh3Op0eKM0raHpgN657z8bB9ARLo
z/RX/e0K3Cxxba3q+5YLObz5Lw03WYO1108kx5fcUmn1S48SG+7m1jtrRl8ABe5q
zWuAAhnPrGoh6VWPXi/VEQzVIjrMtzy6p2AODyu8nZZKhQ0ASBOo/gLbVNlTdEA5
NnxhrZ7+359xXF0Vezg4L+g7Hon0troo0HLXJdj0ILXuVcRFjv69V8sfs9iQI9Fo
5IqcQ0fRi6OdzFl/bqAl8DzYYp/Y+JQsvIIdqBVCNy3mzPAvuysgFxfxfE2t4h67
Qe2qVYb4+4ohDg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:37:31 2026 by rpki-client