This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File:                     t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier:          NXUL6P97WBpgKmQLa+RtNW1ntjaQ0FyVp4uN3iwnYb4=
Subject key identifier:   10:11:F7:72:7B:80:1B:D7:43:B1:8F:24:00:DE:EA:EC:D3:91:A7:E8
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer:       /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial:       019BF574F06550A55ACD95807E2C7129ADB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number:          0C88
Signing time:             Sun 25 Jan 2026 14:00:40 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:40 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:40 +0000
Files and hashes:         1: UCdBL2cD1nASc373rfpJddfKBRk.roa (hash: lFmC2crxbHri6/LBkNCkhFFRFW/esHZK/bXeT9XM8CQ=)
                          2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: AFfUYt3ghjfl/KVU0CxS+y19oEz6zF6dbTeO8Lyz/9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:74:f0:65:50:a5:5a:cd:95:80:7e:2c:71:29:ad:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
        Validity
            Not Before: Jan 25 14:00:40 2026 GMT
            Not After : Jan 26 14:00:40 2026 GMT
        Subject: CN=1011f7727b801bd743b18f2400deeaecd391a7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:14:76:01:9b:5b:a4:ad:cc:b2:53:c6:b2:e4:
                    f4:52:05:36:b5:ed:d9:7d:fa:31:d9:71:84:a0:ec:
                    0b:9f:a9:83:13:ee:9e:e5:4c:33:87:c1:48:90:38:
                    ad:7c:aa:8b:46:cc:e0:d1:24:a6:e9:26:27:f5:1c:
                    60:5a:29:66:9d:b1:5e:86:99:5e:68:f2:8d:c7:59:
                    b4:7a:8e:7e:70:ad:0c:ee:ee:07:35:9a:d0:39:38:
                    25:60:56:dd:f1:a0:a5:c6:97:75:9d:d2:2b:70:33:
                    cf:e3:0a:d3:20:72:78:76:fc:66:61:7d:f7:bb:c7:
                    c0:13:cf:1e:f2:a6:41:4b:4a:5d:9a:05:05:2b:77:
                    24:4d:3b:f9:26:5f:b4:90:e8:cf:75:09:2a:5b:e0:
                    f2:b5:01:ae:b8:92:16:a5:ee:a2:ba:eb:3e:2f:d0:
                    85:71:49:2d:b3:39:9e:19:17:6d:e3:68:e9:e1:20:
                    8b:af:f8:bf:89:09:64:0d:c8:06:e4:de:46:a6:de:
                    dc:72:76:e1:11:6b:2e:55:4e:0d:1e:71:da:0b:fb:
                    1b:d4:8f:66:15:5f:0d:16:16:96:e0:11:2b:36:b6:
                    bc:25:f6:e3:14:df:9a:14:b9:82:22:8e:4e:f3:ab:
                    d7:4b:07:6a:c1:c7:cb:76:9d:5b:20:c9:89:30:be:
                    9a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:11:F7:72:7B:80:1B:D7:43:B1:8F:24:00:DE:EA:EC:D3:91:A7:E8
            X509v3 Authority Key Identifier:
                keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7c:a3:16:eb:af:8f:54:be:fb:e4:67:86:f9:16:42:f6:2d:
         b6:02:6d:e1:9b:3c:15:4d:48:a8:e7:d3:cb:a0:d1:9d:a0:a2:
         55:8f:62:c3:58:a8:59:7c:66:46:3f:f1:3c:ce:f1:50:c6:4c:
         62:47:2c:3b:49:17:d3:d8:64:8f:93:b7:8e:6a:08:70:98:c4:
         64:cf:ed:cc:35:46:67:64:c5:9a:97:bf:05:f1:87:74:cd:34:
         d9:7c:b4:0c:70:ea:85:b1:d1:53:42:52:90:19:2f:9c:a6:08:
         bf:3e:78:f5:9b:d0:92:43:4d:0b:98:db:cd:80:d7:96:90:09:
         ad:54:1b:3f:14:65:ac:5c:54:ff:8e:ad:f4:14:48:5d:68:33:
         6b:ad:af:f5:75:ae:92:4e:b2:31:bc:b9:9b:22:fa:b9:bc:0a:
         9c:3b:2e:52:d1:12:03:77:00:74:6f:64:02:b6:54:bf:31:67:
         73:5e:b2:67:fb:1c:6e:2f:b2:02:1d:98:4e:1a:c5:84:b1:b5:
         e2:c8:b3:87:b3:1a:c2:8f:f6:5f:90:2e:a6:ad:75:79:b8:60:
         bd:c5:2c:23:5d:14:11:4c:a3:fa:a4:64:63:f5:d8:4f:8c:d6:
         10:f1:9b:91:3c:64:5e:7d:b7:3e:43:3c:bb:1b:cc:16:24:4f:
         71:f1:9e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:52:54 2026 by rpki-client