This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
File:                     1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft (raw, json)
Hash identifier:          IatQHMpPykhpsEsIDBDsqoLGnYG7CsZcCurz5AaPto8=
Subject key identifier:   35:66:55:A3:1E:95:6B:3D:5B:2D:08:11:73:42:7F:A3:97:28:30:DE
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Certificate issuer:       /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial:       019BF23D2D930E2F1E233826193FE542649D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
Manifest number:          128C
Signing time:             Sat 24 Jan 2026 23:00:54 +0000
Manifest this update:     Sat 24 Jan 2026 23:00:54 +0000
Manifest next update:     Sun 25 Jan 2026 23:00:54 +0000
Files and hashes:         1: 00t4JlUtr46G1pEHPfG8CoCTEhg.roa (hash: SZsJbSiNkf6okAugBnwQT5cRtnNGeqe0R2EQOpPuW0s=)
                          2: 1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl (hash: 1SR5oF2X1BUnmFxWK15vPeRGk4usw8NOhBhPLkrKniM=)
                          3: 3YsQgb27UWqMlN954jmMKOEu_SM.roa (hash: MOWqK6cBdBGpbj92O0t42kX8k4E9W9yvyK9I1uW+++c=)
                          4: 3uJWZaSr28voCvJ3XvOZzVY97r8.roa (hash: JNQEcpLZ9GfOEBDsZ7o828ABuFDs9+kz0Q3kqrQJnzg=)
                          5: 5MG4H3ROi9Z_HuioIyFr8Hj8fII.roa (hash: Jk2exfePI/3H4jUbDZxVTlT7rkhDIkBPxTi1KyoHO34=)
                          6: DIgN1jFrT88h190mujGA-W_sLY8.roa (hash: dfAJ//9tqClZ6VrDShQWOByAfjbSoRaRLYUETj8i2rw=)
                          7: DwVnWS_n3oFRFU2iD-hTgfl9EFE.roa (hash: lKO0GSwPIB0MYiJPwXvuOUNFB8HjB0kL1GRgNk8PV/A=)
                          8: TlN565d74PyB9p0JXHH7JnDEmvE.roa (hash: r8GHTarKkex0XwFiQfJSY3kfdErHywHcCGk3qR2Tjec=)
                          9: U5rSDmrf4PlzCLlDWaskjjffVr0.roa (hash: vcOPT76+F+1LBT6UYH+sea2r4OZXBrlNwePW6nY/XiU=)
                          10: WO53TAvChGXXDpLngdjuE9kLPCg.roa (hash: t9C7935SqoAWtIKVzerLbCGooEBtDnGcFQNhviM2cFg=)
                          11: ZGJ8WhVJsv6_DZVx2zsNEqurhws.roa (hash: zsRDtxw8BLOr18CsA2qPwGsKzxSNIYKS0wdlcoLLn2Q=)
                          12: _vECo6V0OqVHvuSazkWJ0dvewy0.roa (hash: sG5pX1vWAXrVaFYMr9ZTJOYbhxs6iotv8DZ3G9v31xc=)
                          13: evA5C43jooCU-0KGVkbsaB2BBbU.roa (hash: eEukmHvEX3OYIrpleqcpAoYMp79go82LKu/wPivXwew=)
                          14: jM5XETy6HbMPiBgpmp_jnc2RKQo.roa (hash: xe+9tC5oSUg+0FmVWKdIx8uyl8eVmH5n2rzdeJX6xZI=)
                          15: jXBLpOdrpSK1mQdwZkoyJdJEfVI.roa (hash: qJzUahRGOfAEVZDxyvqsA7Ss9HiymeHgWnFp8HMjVVs=)
                          16: kvM6A0dHjKkllZQlI3CjetRcLH0.roa (hash: 5V7o5lSXn+7yqZx8dMRj6FHd+QV+Yb+1dqEPxXIYP34=)
                          17: nRBwQ2Y-9OgZ7RpCVcKZAJy4sZk.roa (hash: vJGnJ09KsNCLqUU0mMe45rZ6HVT1LYGlujB5Bsrl4iE=)
                          18: qmM745JG5d8A72hNRLQ9llmN77k.roa (hash: oG4zT6yCNtdrlBl0ys4LHmnKeKqhudHo7676jRW7Np0=)
                          19: r7r1Y-kSqsjCkN5g73HGn7i1zrM.roa (hash: MQaOsov42k9jc1VrZgl0fzxtEHOrx0ZX3W8NqjTVdN0=)
                          20: ukQY1BD04k-4MUx-U0jvExGFr_8.roa (hash: HuqS4CCgoqnj6fxM4PKH7DEP94I/EN45blM+J9stnFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:3d:2d:93:0e:2f:1e:23:38:26:19:3f:e5:42:64:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
        Validity
            Not Before: Jan 24 23:00:54 2026 GMT
            Not After : Jan 25 23:00:54 2026 GMT
        Subject: CN=356655a31e956b3d5b2d081173427fa3972830de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:eb:df:1c:17:d3:73:b7:b5:40:68:e4:51:
                    da:e5:47:2e:f9:19:58:d2:e8:83:a2:f0:f1:81:21:
                    77:7d:e0:68:b8:eb:90:48:db:40:cc:71:b3:7f:8a:
                    a3:81:81:c2:e2:17:1f:88:9d:ca:74:4a:a1:3e:12:
                    b6:15:e5:43:83:87:1e:a4:31:45:17:da:0f:11:7e:
                    5f:c1:89:c5:51:80:0b:71:41:72:95:df:78:62:93:
                    00:0d:d1:ec:1a:07:3e:7f:f7:bc:c5:37:86:20:b7:
                    fb:c2:7a:8c:f2:10:9e:59:96:ed:e2:4f:e6:6d:d5:
                    9f:da:04:55:d5:7d:30:72:05:f6:10:c3:5e:4a:6d:
                    47:94:50:fd:24:46:ac:13:ef:56:76:83:80:13:66:
                    16:b0:1c:67:f8:44:66:bb:69:ef:e2:ae:f2:f4:8c:
                    cd:c9:46:4a:60:67:be:b7:e1:c6:76:9b:ec:71:6d:
                    68:89:ba:a2:1a:97:65:be:e4:3e:4c:0b:61:fb:74:
                    4f:c7:41:ee:d1:ae:4d:47:41:4f:04:dc:08:8c:1a:
                    33:da:c3:ad:40:a6:f7:36:b2:99:ad:9e:f0:24:b2:
                    94:6d:18:a8:f4:40:fb:05:2d:33:60:aa:cb:ee:9a:
                    7f:6d:bd:b7:5a:85:5b:dc:95:53:60:a4:6b:98:41:
                    df:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:66:55:A3:1E:95:6B:3D:5B:2D:08:11:73:42:7F:A3:97:28:30:DE
            X509v3 Authority Key Identifier:
                keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cf:30:bb:5d:b8:fc:d4:85:fa:ba:cd:3c:1b:d0:94:9b:92:
         67:3c:81:0d:d0:82:6a:05:32:a9:83:0d:7f:9c:8c:fb:93:74:
         7d:b9:82:a3:fd:86:50:71:40:77:d1:d6:89:fb:7e:db:7e:11:
         fe:ca:54:a1:2c:a9:c1:cc:1f:9a:8f:ca:06:fd:c6:05:82:98:
         12:c2:eb:39:4b:9f:10:e8:5d:1d:bb:9c:be:a7:9c:f3:f4:89:
         e0:05:76:22:27:a8:f6:83:29:3f:53:c2:49:e1:c7:a7:56:2a:
         e4:3b:9e:ae:0e:9c:69:7b:f0:aa:1e:9b:98:1c:59:e3:a4:a4:
         60:72:5d:a2:36:be:bb:e0:9e:ba:4e:80:26:92:10:83:d8:f9:
         06:77:e3:97:48:3a:7c:29:a2:72:07:9c:44:29:8a:5a:f2:cf:
         6c:2b:03:8e:e5:1c:c2:16:66:b8:9d:ce:4b:ee:82:52:4b:10:
         63:25:b0:e0:c2:d0:4b:bf:0d:20:5c:3b:85:ad:2b:63:00:b1:
         c7:8c:20:82:9f:a9:7b:72:7a:d7:b2:f4:74:19:24:87:34:55:
         64:28:01:a3:26:67:af:ac:37:cb:24:06:47:0f:67:0d:c2:b1:
         7c:8f:7d:85:9b:eb:e2:5a:0f:cc:40:92:74:72:e9:eb:aa:75:
         6f:ca:93:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:42:44 2026 by rpki-client