This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
File:                     TXfM16lEFd_GjMyodOlMLowiIC0.mft (raw, json)
Hash identifier:          Y2GJD7I4gYyKdzQ4DnIx2mUy40tRj35GjnPURD0rgwg=
Subject key identifier:   9D:72:AA:09:40:E7:BD:F7:05:F7:C3:D5:BC:53:11:56:3A:91:D0:AF
Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
Certificate issuer:       /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Certificate serial:       019BF4D07C4B1BE9BCEE93C4F1289A3F77D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
Manifest number:          17E7
Signing time:             Sun 25 Jan 2026 11:01:02 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:02 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:02 +0000
Files and hashes:         1: Na30MdB5zwEKr_r0SUKu8zdQTw4.roa (hash: xfnkXnSAbtguyfEj9MIvTb5o3BtX77AXLc2VZsYQIqg=)
                          2: TXfM16lEFd_GjMyodOlMLowiIC0.crl (hash: eoeCd9A0NIPRYrc9NiIfqywgJMcamsjhpxfAHFk9rro=)
                          3: gVi39EeTsdnoO7eTwDanhGM1H0I.roa (hash: DtiliU1JGliSpHI+PJT+vAy9Sc5gsRSb35eDO6PM7lY=)
                          4: iCDdGA_7tQsgfDibWuYcU70NfTs.roa (hash: BwHpqgb+51nQjkzwTsIhaODzLjTxX1oHWG2GvyC+9Qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:7c:4b:1b:e9:bc:ee:93:c4:f1:28:9a:3f:77:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
        Validity
            Not Before: Jan 25 11:01:02 2026 GMT
            Not After : Jan 26 11:01:02 2026 GMT
        Subject: CN=9d72aa0940e7bdf705f7c3d5bc5311563a91d0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:3f:5a:e1:d1:28:9b:95:8c:ee:5d:98:19:
                    8e:df:04:b4:ff:3c:b1:b5:66:a6:76:36:e8:39:64:
                    7f:95:c9:47:ec:e1:21:a2:5c:ca:d4:b6:9a:c9:f7:
                    13:8a:34:e5:fe:67:04:37:45:09:fc:0d:e1:50:47:
                    9e:37:15:b5:70:cf:0a:e4:fc:1c:5a:19:d0:0f:e0:
                    88:b9:d9:ea:1c:32:00:5d:e0:52:83:5c:81:32:71:
                    5c:e1:6d:f0:ec:50:0c:9a:bb:3a:34:5a:d3:40:84:
                    2e:b9:fd:31:2c:42:23:a4:a6:ba:91:58:09:a7:7c:
                    e0:2d:fe:76:7e:11:1f:4a:b9:35:91:68:34:d3:12:
                    7f:f6:72:8f:3b:09:e0:26:17:0c:b9:98:7b:43:37:
                    ef:40:7c:84:6f:03:81:ac:36:75:09:e9:49:6b:dc:
                    3f:ff:3b:54:60:fc:c0:d0:88:d0:f3:be:02:ed:96:
                    74:3f:09:27:c4:fc:a3:32:12:c7:a0:0b:23:c2:d5:
                    cc:6d:06:bd:b8:34:ba:f5:9b:21:80:e7:90:22:27:
                    81:f0:dc:50:be:e8:77:b0:2c:ba:2a:2a:4a:9b:44:
                    9d:68:b9:5f:f2:65:64:1d:0b:38:cd:fc:c8:0a:6a:
                    5a:b3:3b:f9:bd:15:00:da:d9:1c:fe:88:b9:f2:15:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:72:AA:09:40:E7:BD:F7:05:F7:C3:D5:BC:53:11:56:3A:91:D0:AF
            X509v3 Authority Key Identifier:
                keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0b:7a:ce:55:36:60:32:38:ee:74:3a:e3:ec:bb:8e:7e:aa:
         3c:b0:8b:1f:f1:62:be:11:c4:68:9c:01:50:fe:a1:10:d2:2e:
         21:22:35:9d:8e:e5:c4:c3:4c:bd:bf:9d:93:1a:62:b6:f6:79:
         7e:3d:f0:85:ad:f1:f3:a9:45:30:39:f7:bd:79:49:1c:74:e7:
         86:01:1c:c4:40:bf:40:cd:79:1f:f6:93:e1:4a:d6:2d:1a:4b:
         b5:f5:12:6a:db:22:71:c7:ce:a6:93:93:2b:18:6a:8b:bc:55:
         32:3f:fb:ed:fe:60:8e:cc:ac:98:f2:32:df:c2:d6:d4:85:c3:
         94:37:5b:ee:a6:81:41:bf:f6:d5:ef:cf:6c:2c:fc:12:f7:9c:
         26:80:0e:4d:12:0b:42:46:ea:09:8d:f2:0f:7e:42:fb:1c:d0:
         9c:a7:a4:d4:c7:f3:5e:d4:82:2f:d4:e7:4b:d1:5b:80:e0:b2:
         f6:c3:f6:9b:8f:5e:29:55:49:3b:af:8b:5a:2a:10:1a:47:8f:
         60:0c:f7:20:fd:3e:69:a5:f0:dc:dc:c4:64:03:98:61:2e:d2:
         4d:8f:83:51:00:19:13:e8:76:1e:c0:6c:2d:c0:d2:af:0b:2e:
         42:2f:6f:18:2c:03:6a:e3:3b:bf:10:e7:bc:59:e7:b1:62:da:
         a3:fc:4c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:24:40 2026 by rpki-client