This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
File:                     TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft (raw, json)
Hash identifier:          dudRFCZF84dJen0AyCXSIK9hJudArx9u0YbMrYyVEEM=
Subject key identifier:   8B:1B:C9:5E:C0:2D:FD:4F:B9:65:4C:9F:09:A8:F4:F1:F5:B1:14:68
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Certificate issuer:       /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial:       019BF72D7DB3AC74E763FFA9BB3BC5BC0FFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
Manifest number:          15F9
Signing time:             Sun 25 Jan 2026 22:01:51 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:51 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:51 +0000
Files and hashes:         1: 4T-klQ0-zYIxPmTZsZ2-ok9Fbqw.roa (hash: shJr+S/cUVw8cRqdTWBJxqKJ+82DH/XCvjPD8oWgejQ=)
                          2: Hhm4DnDPBgZDnzS_n_5iKji_VSo.roa (hash: FJuxABjvPtim7sn898zyARxoysAttjj41coyq99PNXU=)
                          3: IFNkQ1NSTzLF-9O_XttRckzFGrs.roa (hash: OBVZMQv/RI7RvgzmnrzRrU47aBDByk7IPhxiYPN1zGE=)
                          4: TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl (hash: H4l+d9FNO6YCk6vIbpWcWv4JbroVTHa0y2alvwNyv9Y=)
                          5: juQpA0Dx9CvCO8SdROPUgNn0R2k.roa (hash: eKvRL0aCTiGvMc9NYGY0zri6fq0p3BVgf8PAa3a2awY=)
                          6: lOMeSgGICNYFoZNF-4T9ut0M_ho.roa (hash: jzNt9rN3TGEUKNe3x8fnk+JbElUXlY3IzJITAj/xh2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:7d:b3:ac:74:e7:63:ff:a9:bb:3b:c5:bc:0f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
        Validity
            Not Before: Jan 25 22:01:51 2026 GMT
            Not After : Jan 26 22:01:51 2026 GMT
        Subject: CN=8b1bc95ec02dfd4fb9654c9f09a8f4f1f5b11468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:1d:de:5b:82:2b:0e:95:76:17:30:b4:21:
                    a2:a9:27:be:50:10:1c:83:36:cd:dc:c6:39:21:85:
                    02:2c:a3:ab:8a:7b:4a:0c:ee:ae:02:3f:f3:99:d8:
                    a0:9f:8e:bb:90:33:ed:57:43:1c:5e:38:a8:85:d5:
                    bd:ee:18:f4:05:7d:c5:60:44:10:bd:34:0a:17:2f:
                    0f:5b:3b:2b:cd:0a:3d:d7:4c:35:15:0c:32:7c:a3:
                    b4:44:1f:f2:ed:11:43:c3:1e:ce:89:b6:15:f8:2f:
                    09:7e:a1:4d:f8:71:94:79:5a:29:53:09:e7:f1:e1:
                    28:ec:e2:c8:96:d4:2a:a6:90:71:22:70:93:6c:01:
                    d8:a8:ee:b2:e8:f1:d9:19:ff:0a:c2:92:af:b8:9a:
                    82:52:47:80:a2:97:6f:97:e9:2f:f5:12:db:ac:98:
                    7a:be:ca:84:c7:5d:03:a1:8b:b8:27:89:d1:36:cc:
                    4a:fd:fb:a8:b8:97:5a:2a:f8:7d:6d:e8:7e:1e:72:
                    10:41:35:44:28:cf:16:35:8e:f8:ed:7d:09:80:96:
                    2a:67:29:be:93:94:68:1f:73:da:5e:de:e2:e5:a0:
                    3d:51:d4:68:b0:54:4b:37:aa:c9:fd:fa:0e:96:6b:
                    0d:23:c6:39:d7:ad:ba:d3:bd:e5:54:ac:0c:e0:54:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1B:C9:5E:C0:2D:FD:4F:B9:65:4C:9F:09:A8:F4:F1:F5:B1:14:68
            X509v3 Authority Key Identifier:
                keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:42:12:af:ea:d1:f1:24:02:9d:2a:3e:a5:68:44:f2:6b:0d:
         8e:da:21:dd:ad:1a:0c:da:62:8a:70:05:46:3f:95:14:3d:90:
         f6:0c:9c:63:84:f9:fb:ef:9a:00:ed:b8:67:17:22:99:87:71:
         52:eb:24:30:ea:38:d6:76:89:4e:dc:b6:56:72:f9:de:f3:18:
         e6:ad:e5:b0:e5:15:ea:76:e0:df:c3:11:71:d7:11:3b:58:71:
         2b:28:55:49:7a:66:bb:f8:cd:c6:32:b8:0e:71:73:f7:65:b8:
         b9:7d:f7:da:44:45:3a:3e:e0:3b:06:c5:04:3f:a7:87:8d:01:
         9b:cb:3c:e7:f7:9e:d9:29:d8:d3:f5:05:5d:90:fd:98:c1:60:
         23:52:a1:bb:11:d6:6c:09:16:1d:c1:09:0d:84:63:92:01:1c:
         4f:a8:a7:19:f1:d2:73:8d:54:28:fe:fa:d3:3b:47:71:99:f5:
         c0:2b:1a:d3:7e:11:36:11:aa:b7:81:25:71:ff:c2:89:f4:60:
         0d:9d:99:96:c5:d7:a4:ec:dd:f9:e0:21:2b:e7:e3:e2:22:70:
         ad:27:68:2e:17:17:69:44:9b:5a:5c:82:fb:ca:3f:95:e8:50:
         12:3d:67:a6:44:02:14:c1:ba:cc:ee:bf:25:32:0a:4d:15:fd:
         5c:43:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:47:33 2026 by rpki-client