This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File:                     Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier:          RdN7knCEqxzz07hYg3zd1BuFEIlcMMLt/8HaHHzQqiU=
Subject key identifier:   5C:DA:61:DC:FB:FD:A6:C1:DC:35:EC:27:F9:13:B7:BA:B8:4E:3C:77
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer:       /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial:       019BF83F5C381061CF937B78F2EF791617F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number:          17F2
Signing time:             Mon 26 Jan 2026 03:01:00 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:00 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:00 +0000
Files and hashes:         1: 3XPbOVP5LZm9gbvbxeYXvE-UXNY.roa (hash: P5VCL1xp51uhegWvbhWmEVzPBE26QsXY7i6bNOoE28E=)
                          2: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: rXC4AQPEecHeEeHV5YJx2Dl37C2u1RpuEDZY+HsdmPE=)
                          3: cqsm3cZPpf_tObwDEACdHxs7fkA.roa (hash: d+AU9b3PeXFxvtfVifLL55zjYWSVguy94TW2GQv8rLQ=)
                          4: pX8l7e8dfhbW65DaAWMvZir4D4A.roa (hash: rP/wNiuFImRcrlBBzDobCHFxpCegdp7a41cw4Hhw6Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:5c:38:10:61:cf:93:7b:78:f2:ef:79:16:17:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
        Validity
            Not Before: Jan 26 03:01:00 2026 GMT
            Not After : Jan 27 03:01:00 2026 GMT
        Subject: CN=5cda61dcfbfda6c1dc35ec27f913b7bab84e3c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ae:d0:c3:69:0d:91:bc:a2:a2:4b:f6:cc:69:
                    70:13:b3:61:5c:06:cb:cf:68:fc:5d:5a:cd:d1:d2:
                    e9:9b:8c:0e:24:eb:56:93:4d:a3:08:91:cc:49:fc:
                    70:41:89:f4:23:93:dd:96:a5:23:d9:3d:fc:1a:df:
                    82:ed:6c:8d:fc:62:53:88:08:40:da:63:39:51:d3:
                    b9:57:dd:2e:a0:98:81:63:6d:cb:c1:cc:ad:80:08:
                    2d:79:e7:d9:d4:f8:82:7e:b3:ff:38:c3:85:b2:c7:
                    d1:29:88:98:b5:4b:de:a6:0e:ca:32:1b:94:76:80:
                    fe:24:a4:b1:69:67:c3:70:b1:85:6b:32:c8:b1:a3:
                    46:18:5c:c5:6e:90:ae:f3:09:34:03:26:6f:b0:8f:
                    22:51:2e:d7:ac:87:21:a5:7d:0f:80:00:1d:e1:dd:
                    19:d0:42:6a:4b:fe:56:db:e1:e0:bc:6b:d9:69:74:
                    8b:3f:c9:5e:50:81:9d:e4:59:fd:38:49:c9:08:f3:
                    da:a7:ec:94:19:eb:bc:3c:4b:08:fd:61:96:ff:a5:
                    e3:1c:18:e5:1e:7d:20:4a:f0:b9:e1:fa:de:07:27:
                    3f:ab:3a:4f:79:0c:eb:c3:14:69:91:0d:7b:13:89:
                    7b:8e:78:7a:b8:45:55:d2:57:a3:33:b5:af:e7:cf:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DA:61:DC:FB:FD:A6:C1:DC:35:EC:27:F9:13:B7:BA:B8:4E:3C:77
            X509v3 Authority Key Identifier:
                keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:14:b4:cb:c6:2b:bf:56:f3:50:14:72:6e:c9:70:5d:d5:02:
         3b:73:bb:77:ea:b0:7a:46:d9:f9:26:e1:b2:59:72:5a:31:6e:
         4d:21:67:c9:a8:1e:07:1e:5a:36:3b:49:c2:98:96:cf:d0:60:
         ec:15:4d:24:12:ee:64:a7:93:e8:7d:0e:76:83:e4:78:96:5b:
         4e:ce:14:3e:4f:fc:fd:33:fb:68:54:68:13:5b:fb:f6:4d:00:
         2c:cc:89:ea:91:f5:77:81:7f:dc:0a:b8:93:2f:ce:20:7b:64:
         b2:27:64:bb:fc:cd:e0:c1:90:e1:8d:33:1b:6d:99:db:f8:29:
         b9:9b:cb:ad:98:8a:f2:4b:57:67:75:2b:be:42:9e:c6:43:f9:
         32:eb:f0:fa:aa:7e:77:6b:b5:f8:06:d5:86:c0:32:89:74:ff:
         22:5a:68:e2:2d:80:29:c3:0e:bf:cd:a4:de:a0:88:2f:38:a4:
         d4:42:31:d5:66:d5:42:f5:5c:21:54:d2:f6:16:29:5e:94:d2:
         74:75:38:3a:3e:e4:f3:72:2a:81:20:28:eb:b4:04:a8:b5:23:
         55:d1:b0:f4:94:45:0c:1b:34:9a:02:79:ac:b5:5b:32:6f:9d:
         83:a6:38:95:6b:82:df:e9:4f:c0:34:0b:1b:d1:21:f2:04:fb:
         d3:7a:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:46:01 2026 by rpki-client