This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File:                     tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier:          5l1AJfg8EUzxZZHC4Y9EZKdVs66SEkysjbxGoYjguns=
Subject key identifier:   76:43:8A:7A:0B:9D:C0:AD:CE:68:E5:35:E1:26:76:D6:72:B3:24:2A
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer:       /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial:       019BF2E2A8614CEE43FF53CB1C84B064D935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number:          17E7
Signing time:             Sun 25 Jan 2026 02:01:39 +0000
Manifest this update:     Sun 25 Jan 2026 02:01:39 +0000
Manifest next update:     Mon 26 Jan 2026 02:01:39 +0000
Files and hashes:         1: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (hash: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o=)
                          2: S_kn4DkQroHqq7HAquDXguodEnE.roa (hash: 9xxNTgjpkgjoYZUn/S2u9DKQyLLVAn0QlTy3a/LjFvI=)
                          3: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: Ui01q/K8lXlPUiXTXMYSptqYQ0kZWmdSXdeApGbM/PM=)
                          4: wkBj6meKGNLkzfK8dNJpio292qU.roa (hash: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e2:a8:61:4c:ee:43:ff:53:cb:1c:84:b0:64:d9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
        Validity
            Not Before: Jan 25 02:01:39 2026 GMT
            Not After : Jan 26 02:01:39 2026 GMT
        Subject: CN=76438a7a0b9dc0adce68e535e12676d672b3242a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:5d:a5:f1:ec:f3:9d:74:94:a4:ae:79:53:
                    4a:96:15:82:81:8c:ef:77:9f:f9:a4:d0:a0:53:f7:
                    9d:25:b1:5c:63:fa:cf:e7:ec:5d:f9:38:4b:44:67:
                    aa:32:11:96:a7:c4:e3:53:87:ac:d4:c4:15:3d:b6:
                    11:6e:48:1c:a8:cc:1d:1d:03:64:5d:1a:87:d1:4b:
                    f4:16:76:8d:d2:f6:f3:ff:1e:89:78:9f:7d:45:fc:
                    3c:8d:53:79:0d:45:35:34:75:67:25:31:cb:7c:fa:
                    bd:74:d2:c5:5a:27:30:a4:77:aa:15:d0:60:a7:1b:
                    7d:3d:0b:43:49:05:2d:6b:f7:09:95:16:2a:1e:eb:
                    48:ae:d3:f0:c2:86:2b:de:67:34:fb:a1:ed:38:6b:
                    fd:21:0d:89:e8:83:78:18:21:52:d8:1c:1f:47:02:
                    c1:5a:c4:e7:b1:19:12:f9:7f:81:72:4f:c4:2a:f1:
                    96:ba:9e:45:a9:56:61:94:6d:ab:4c:38:42:c0:6e:
                    2d:3c:5e:3e:ee:70:7c:73:f7:a5:0b:fa:ea:b3:6b:
                    6f:1d:56:0f:ae:34:76:ec:cd:29:89:f9:67:f2:55:
                    6c:8f:1d:d8:64:08:23:f5:b9:d3:b2:e5:1a:d3:c9:
                    bf:9d:c2:1d:58:25:3b:7b:12:52:22:ba:8f:c4:c8:
                    5d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:43:8A:7A:0B:9D:C0:AD:CE:68:E5:35:E1:26:76:D6:72:B3:24:2A
            X509v3 Authority Key Identifier:
                keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:43:50:26:c6:8a:7e:98:78:b1:03:ab:cd:ef:39:df:04:31:
         31:88:d8:ff:9e:f2:07:bc:b6:e7:2f:b9:ec:1f:24:a7:04:54:
         2a:36:41:7a:bb:91:cd:3b:78:1b:87:52:ba:10:1a:34:eb:14:
         78:a4:f5:99:c9:3a:5d:0a:fe:1c:52:71:e3:c5:95:51:ee:58:
         12:30:04:e1:8b:42:dc:98:a9:18:19:bc:81:60:c7:bb:e6:02:
         c3:91:af:44:c8:b6:ff:4c:3f:5f:46:99:4a:08:a4:62:38:ee:
         30:16:36:e8:a4:d5:b7:29:c5:4d:be:72:3f:92:6f:2f:d2:f3:
         e8:48:cc:bc:3f:a9:57:5e:3c:49:61:2f:1e:03:25:de:e3:d0:
         49:13:6e:1b:57:d1:05:61:cd:9d:31:71:49:fc:c0:c8:4a:6c:
         00:47:88:4d:9e:5a:6b:33:d9:bb:55:47:03:52:fa:f0:1f:12:
         ff:6b:3f:ea:af:23:38:73:7f:d0:fd:d4:ef:6a:9d:d0:ac:ed:
         b2:bf:4a:c7:db:75:f8:7f:ea:c6:cb:8e:0e:9b:b0:36:b4:4b:
         a5:15:88:db:0e:09:6a:65:64:93:56:c5:31:e0:40:75:99:f5:
         df:78:3e:c1:8e:8e:a8:92:e0:fb:08:ef:cf:0b:19:61:17:34:
         f0:03:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:13:48 2026 by rpki-client