This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
File:                     TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft (raw, json)
Hash identifier:          pT3s5/j9MmYanwY+0ce775gGhLXUv+2CVsoZNW3iCuM=
Subject key identifier:   53:C0:83:B3:1D:0C:6E:A0:BE:13:98:D5:06:7D:4B:35:89:FA:E1:74
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Certificate issuer:       /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial:       019BF72D4CBFFFB7FB828591849298F03BF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
Manifest number:          33
Signing time:             Sun 25 Jan 2026 22:01:39 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:39 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:39 +0000
Files and hashes:         1: 7zHV66w7Bkb2Ny1dDTCLE7Wl8ao.asa (hash: lHxtADA9XD8WHImnlrIbVNB8iNbIHqkbRGv2EysJnKE=)
                          2: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl (hash: DaggpRocRruQXQBzWWbVaxYnrOUe+2DcYZzpDbPDn0Y=)
                          3: g5lz44oaHgbAB8tPjhDR8m3VlM0.asa (hash: GFreKE8YNMVh0XaKaq38gtGUXblHDe8NuVM3cQov9gc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:4c:bf:ff:b7:fb:82:85:91:84:92:98:f0:3b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
        Validity
            Not Before: Jan 25 22:01:39 2026 GMT
            Not After : Jan 26 22:01:39 2026 GMT
        Subject: CN=53c083b31d0c6ea0be1398d5067d4b3589fae174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:0b:41:c8:f7:ed:7b:77:06:2d:d0:cc:f0:
                    7b:e5:1d:20:da:be:a3:6d:e3:82:19:7d:4c:47:4e:
                    c9:be:19:65:41:14:81:68:ba:50:b3:c6:9b:ce:c6:
                    7a:44:cc:17:17:09:bc:95:64:19:b9:9e:9c:7e:e5:
                    b2:f2:e3:de:ec:79:8b:c5:a8:09:90:a2:98:7f:b8:
                    d0:f3:92:68:c4:16:ab:35:69:81:fd:64:77:81:ec:
                    85:fe:5b:3b:e4:ad:c7:40:6e:af:60:98:9e:b4:1a:
                    4a:92:44:b3:33:74:d4:76:a6:58:68:83:62:0d:91:
                    28:cd:43:48:34:d9:9e:eb:19:fb:ac:bb:f5:0c:e9:
                    e5:4c:a2:8d:4b:f4:47:c0:15:f7:39:c7:d7:86:a8:
                    f3:e3:0e:d0:dd:41:84:ea:9b:e0:06:8b:a8:35:32:
                    db:9e:1b:fb:7a:67:a5:26:79:66:96:42:15:19:b6:
                    2f:f2:e8:91:ff:10:ec:b7:8f:bc:74:fd:08:a5:cb:
                    02:65:ff:1d:78:10:9f:8d:43:d4:21:e9:e8:39:d4:
                    98:67:cd:99:87:19:5e:cb:a3:18:e3:2f:3b:c7:82:
                    44:f4:ea:4e:0c:87:5a:f3:6b:f5:4d:57:7f:42:13:
                    ce:2c:34:2c:b6:89:6c:b5:5d:3d:96:d6:e0:0f:51:
                    6a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C0:83:B3:1D:0C:6E:A0:BE:13:98:D5:06:7D:4B:35:89:FA:E1:74
            X509v3 Authority Key Identifier:
                keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ae:21:b4:a4:3a:54:54:bd:10:77:f2:b6:2f:dc:4a:6f:5e:
         51:50:95:c4:69:f6:3c:9b:0f:d0:1c:e2:94:96:57:4b:e5:35:
         5c:67:d0:9d:23:e4:4f:84:da:41:b8:c7:20:de:18:62:c7:3b:
         d8:d2:b9:48:9b:53:bf:86:58:42:c9:b5:36:9f:3a:e5:11:8d:
         77:41:58:50:43:cc:12:29:90:ef:5a:de:ca:41:a9:20:bc:5d:
         cd:35:9b:b6:01:93:3a:5d:15:41:57:ee:4c:c9:32:97:4b:d1:
         55:3e:03:d5:8b:0c:58:0f:14:4b:3a:f8:32:6f:a4:07:7f:b6:
         be:50:11:bf:f2:92:a5:de:29:26:d5:58:45:44:66:e2:fe:09:
         6c:47:fa:7c:13:15:ac:01:8f:b7:92:31:79:74:36:c3:19:15:
         ef:d7:11:5a:74:5f:34:fd:ea:67:1c:6a:72:5c:a4:de:e8:bc:
         30:2b:16:a8:1c:d7:89:4d:c5:46:a0:c0:14:06:b9:c3:fe:5d:
         42:23:90:33:d6:57:96:5c:fb:a8:b5:6d:cc:80:e9:82:25:63:
         24:33:8a:66:02:e1:db:70:16:b7:8c:8a:de:de:9f:c1:da:71:
         f1:15:52:e9:53:62:71:4b:62:06:71:d7:c4:a2:c6:14:7a:a3:
         01:15:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:02:56 2026 by rpki-client