This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File:                     TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier:          +zNKjDfG5pc9YMforEElmK6kn+SeQvrRhihFc2BQksk=
Subject key identifier:   22:22:12:FC:7F:77:39:8C:CF:41:2B:7C:AC:E9:9E:8B:38:80:94:1C
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer:       /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial:       019BF507327324DE771AF2813331FFE9405A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number:          06AD
Signing time:             Sun 25 Jan 2026 12:00:48 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:48 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:48 +0000
Files and hashes:         1: JAiGMFKKZfeARhCIuVLbMeZNXJY.asa (hash: BVYEISvT/4Z21IuD9kN936xR94O9xS00DBa/dc3qsv4=)
                          2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: ovxXUZF0lY1AIotDZa4vSoRfbIUJNLef9qaeJFPrNeE=)
                          3: gKnl6zVoIeKgo92UVGQsPpHqtzE.roa (hash: 56ktfiqABwMNzwOBBq7mQNUi4gG3qwUkwZC4BiFM9Oc=)
                          4: lSVqAAvEWKUv1GrOr_KbEfWQpGk.roa (hash: Ugj+m6NNSZeK/sMmtv36B6LB9pkXvcsE/Io4aKNy8r8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:32:73:24:de:77:1a:f2:81:33:31:ff:e9:40:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
        Validity
            Not Before: Jan 25 12:00:48 2026 GMT
            Not After : Jan 26 12:00:48 2026 GMT
        Subject: CN=222212fc7f77398ccf412b7cace99e8b3880941c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:9e:4f:c5:2b:04:04:49:ca:6c:a0:3f:bc:
                    10:82:43:8c:97:4c:f8:a3:3f:84:e2:b5:ed:9b:0d:
                    88:43:5d:2b:b3:5f:a0:28:1e:2b:3f:e6:6e:18:ee:
                    c1:99:61:bb:39:83:c7:31:12:67:af:be:e4:05:32:
                    07:59:b4:b5:e4:91:a0:3a:83:71:e9:87:80:2c:f5:
                    6e:c9:83:9d:e9:0a:45:1a:67:4c:cf:02:c4:fc:2e:
                    66:d4:ba:66:a2:e1:34:66:88:3b:a4:d4:08:02:64:
                    35:14:4d:16:14:16:a2:29:b9:86:8e:15:59:a9:8b:
                    6c:8c:de:54:7c:09:b3:5b:4f:19:6b:ec:09:90:43:
                    4a:4e:ce:b6:07:cc:1f:13:61:cb:a0:34:3e:1c:12:
                    01:c6:8c:d4:3c:2b:60:01:8f:7c:9a:85:fb:86:5c:
                    47:71:60:91:12:39:9d:ae:06:86:f2:31:ba:3d:7a:
                    99:be:e1:31:c9:9a:4e:17:4e:b6:a7:cb:25:ab:87:
                    2c:6d:58:5c:e1:3a:c2:0b:83:95:47:74:eb:d8:86:
                    06:2b:fd:89:f2:91:8c:8e:6e:91:2c:4d:38:25:fc:
                    3a:5e:7b:7a:dd:90:64:fa:59:79:48:f9:b2:40:07:
                    ba:66:1a:d0:90:b8:55:8a:6e:06:2b:d9:a4:44:7e:
                    d6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:22:12:FC:7F:77:39:8C:CF:41:2B:7C:AC:E9:9E:8B:38:80:94:1C
            X509v3 Authority Key Identifier:
                keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:3e:96:73:0c:d5:55:60:07:f4:ba:35:f8:86:81:31:27:
         10:00:89:33:ee:76:8f:11:b3:2d:f5:18:6c:cc:d6:99:50:d9:
         55:2a:73:c3:7f:62:18:9f:40:57:43:12:b3:7b:2d:81:f4:dd:
         35:20:01:36:ea:2f:3a:b6:d6:7c:51:39:60:ff:27:84:2d:c9:
         37:6a:7f:e2:e5:22:5b:cc:fa:51:b5:39:d6:b7:55:ed:0c:5c:
         47:53:6e:2c:e2:75:c9:ec:98:67:f2:90:c0:15:ab:c6:6b:20:
         6f:03:48:18:09:b0:2d:4c:37:9a:f9:e7:8e:5c:e9:e4:9b:84:
         61:c3:fb:eb:26:93:de:16:25:ba:39:c6:01:14:f5:25:52:7b:
         40:4e:4b:c6:1e:5a:89:a1:e1:1b:1e:c9:7a:92:0e:24:cd:83:
         b5:db:a9:4b:aa:e1:af:a9:78:b2:b0:21:26:06:9b:05:c1:81:
         d2:d2:43:f2:f7:9c:db:db:88:b1:cf:83:1f:5e:bd:78:11:4e:
         88:db:4b:79:5c:ac:67:47:d8:f6:0d:12:63:da:0d:d3:01:32:
         86:47:48:01:8d:bb:31:1a:34:25:67:18:4e:86:47:89:cd:5b:
         b8:03:94:40:e5:22:a0:ee:a2:da:ad:c6:34:63:ee:98:d3:0b:
         b7:66:b6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:52:35 2026 by rpki-client