This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File:                     TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier:          pNHcMJAf4Zifq1BesxdNrqaJzif6XzhF5Dy8hStEtq8=
Subject key identifier:   7D:BD:BE:CA:4E:38:1E:D9:88:19:A6:81:42:25:71:51:98:42:AC:39
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer:       /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial:       019BF72C8649F0F53B6F693420D26B8C51C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number:          08A9
Signing time:             Sun 25 Jan 2026 22:00:48 +0000
Manifest this update:     Sun 25 Jan 2026 22:00:48 +0000
Manifest next update:     Mon 26 Jan 2026 22:00:48 +0000
Files and hashes:         1: 5cyx45wBsDWUW4HLBveZ_qT2fcI.roa (hash: 8zrBvmy9ZVUIH/JDFlTLI0bEMjkf56i51k/bt1Lb1pQ=)
                          2: BGnZrxh766n-RwiVyZM8GwNTqh0.roa (hash: /zWDyCDhQQVXOZUHRipaDLFDgbYWX/UYPO8XJtBp0uE=)
                          3: JI6F6sKwmFDB-S9XODKhAA660AM.roa (hash: /b/qNAizl4V5sFYHPlaPbBReehGSPPstai3HlyE9iGo=)
                          4: OB0voxOvgqvD6w4CwDmCo19dJlY.roa (hash: 9mhFY39YjN1Cc/funyTGbxD0WJvEdMakoR8u2Fsujz0=)
                          5: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: I4lxbKlIdkTlD/IVvmzThckilnrEfmFPzZMpT00w2tc=)
                          6: X14l7kvlYYBF3EHNWSg-svsFuOQ.roa (hash: Y9BNprLjsgal1cKXYYlZbO0fiea/j/rMdHY3dC/wqFY=)
                          7: sGobVjVtmpTG3eIQoRngSBlxcMU.roa (hash: UMoTBGpuj0hrOh47PvNUlOhwfEbv/t4MSoG5XZ2RuSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:86:49:f0:f5:3b:6f:69:34:20:d2:6b:8c:51:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
        Validity
            Not Before: Jan 25 22:00:48 2026 GMT
            Not After : Jan 26 22:00:48 2026 GMT
        Subject: CN=7dbdbeca4e381ed98819a681422571519842ac39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:e7:bc:3b:49:c7:6a:cc:20:6b:6b:0a:33:
                    58:20:24:48:7a:80:ca:c7:e8:f8:db:e4:60:21:fb:
                    ef:3a:c8:7e:d5:72:c9:dd:fb:0b:7b:1e:ca:55:49:
                    c5:94:83:ef:99:c2:87:92:f5:3a:e1:f1:66:73:ad:
                    e0:c9:e2:df:7d:ed:0a:50:97:1b:cb:1e:85:47:f7:
                    d0:94:aa:29:82:06:78:24:7d:6b:12:53:dc:00:53:
                    65:7f:cf:bc:cd:9f:90:7e:a3:02:a7:3e:8d:03:65:
                    e2:05:d7:27:d5:aa:22:fa:c4:c6:ff:02:31:d5:a1:
                    43:59:f9:a2:f1:59:10:b3:ac:81:4f:c3:e0:1d:b4:
                    f9:f3:e9:0a:1f:ec:9b:06:42:e4:91:8a:74:2e:ca:
                    b9:fc:96:e2:a0:38:2b:48:74:cd:2b:8f:65:9e:64:
                    36:25:99:ef:67:23:14:a1:47:bd:5b:2a:e4:53:c4:
                    30:d5:67:d0:1e:a6:ce:c6:68:d3:35:32:af:19:6b:
                    12:7d:67:1e:ed:a4:4c:50:47:93:77:fd:9f:7c:e8:
                    23:4d:3f:78:52:8f:0f:28:12:40:de:42:4d:9a:5f:
                    24:c5:7e:29:c9:bd:28:f4:e0:52:9a:af:e2:85:34:
                    4c:aa:8b:f9:79:29:6f:9c:6c:56:90:0e:52:1c:6c:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BD:BE:CA:4E:38:1E:D9:88:19:A6:81:42:25:71:51:98:42:AC:39
            X509v3 Authority Key Identifier:
                keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:19:1e:9a:4e:ed:a5:c9:81:50:64:9a:1c:6b:5e:88:f4:26:
         b2:4b:36:62:55:b6:04:dc:f6:4a:c0:59:06:2e:3a:af:ed:a3:
         f4:12:05:26:90:a0:2d:22:03:a7:49:22:00:80:71:74:3f:2b:
         63:b8:e1:85:c4:9b:13:64:28:2d:a0:67:4f:87:3c:37:e9:73:
         4c:46:64:6b:b3:cb:dd:bc:9e:d6:02:9e:05:16:bd:05:9d:1a:
         e9:28:de:bc:60:69:00:81:1b:25:c1:73:7d:19:58:12:f8:81:
         46:7d:01:5b:97:16:0e:ca:5a:fa:c4:d9:57:0a:bb:4b:14:d4:
         73:4a:d0:23:1e:9a:b1:a1:e9:9b:f2:0a:60:4c:06:8c:67:5b:
         c8:1d:b2:04:8b:95:dc:08:5d:15:a8:bd:c4:b8:6e:00:9d:59:
         13:10:2b:f9:5f:f1:14:c7:7a:d5:04:f4:fe:1f:0f:44:93:7d:
         23:30:99:38:52:13:54:27:60:a8:be:3f:af:5b:2d:67:5d:e9:
         29:9f:fd:35:83:92:57:30:3b:c7:e8:cc:bb:82:a4:b2:7e:3e:
         e8:7c:54:27:f8:d3:20:e5:d7:d6:93:97:b6:ae:c3:d1:53:dc:
         d2:6f:8c:b8:05:4d:7a:03:15:eb:5f:0a:0b:f8:76:6d:94:c3:
         8c:97:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:46 2026 by rpki-client