This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
File:                     TC9Y05SvcD-57w_FN77Q6X23Wo8.mft (raw, json)
Hash identifier:          xThENn4Cod0CPwP6nKr3Uo4UEeNL1Y/WksDm+OdZ/E4=
Subject key identifier:   6A:75:A4:38:F5:C7:08:AA:67:12:33:26:36:E7:B0:B5:37:39:B0:1F
Authority key identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
Certificate issuer:       /CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Certificate serial:       019BF650DB4E25242048562DE8B3DD9D0B03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
Manifest number:          177D
Signing time:             Sun 25 Jan 2026 18:00:52 +0000
Manifest this update:     Sun 25 Jan 2026 18:00:52 +0000
Manifest next update:     Mon 26 Jan 2026 18:00:52 +0000
Files and hashes:         1: TC9Y05SvcD-57w_FN77Q6X23Wo8.crl (hash: GMbvHjzs1AEYCMXWDJ54OQbEivc7v2aONNIYGYBtX1c=)
                          2: f1_YlMHXkfEcxm8CmCBrCLxkGqk.roa (hash: nGiLxaL0gxMQlJ8QNtQpsASY+2PMktxV9lPqNFVspg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:50:db:4e:25:24:20:48:56:2d:e8:b3:dd:9d:0b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
        Validity
            Not Before: Jan 25 18:00:52 2026 GMT
            Not After : Jan 26 18:00:52 2026 GMT
        Subject: CN=6a75a438f5c708aa6712332636e7b0b53739b01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:cb:54:9e:fd:b9:05:f0:fc:95:06:ed:e7:
                    5d:5c:d3:dd:fb:c8:e4:2c:1b:fa:fd:63:41:d1:0f:
                    c3:c7:6e:12:61:9e:e2:13:30:ad:d0:dc:4b:46:7e:
                    6a:63:82:69:23:91:de:fc:7c:0c:98:bb:eb:9d:42:
                    38:0d:62:9a:d7:fa:70:c0:96:d7:67:2c:9e:cd:2f:
                    4f:fb:61:16:9a:23:f6:ef:20:a8:69:c3:f9:ef:d5:
                    7e:e9:8b:ad:b7:2b:67:4d:1c:26:52:d0:42:79:45:
                    7d:df:f5:7e:83:b6:77:ea:a4:0a:30:ad:31:fb:9e:
                    6f:a9:bd:c4:ac:20:54:fb:64:61:f7:6f:ce:6c:66:
                    5c:08:c1:74:42:fd:ff:40:b5:92:c5:a1:ef:ae:9b:
                    a1:96:a2:db:8e:37:bb:2a:03:74:bf:d1:64:17:e4:
                    36:ac:76:fc:86:5f:a1:e0:85:56:79:eb:6a:c3:bc:
                    d2:99:ca:e3:b8:d5:de:74:93:ac:7a:d7:11:79:7f:
                    f3:69:38:d5:c7:1f:30:a2:74:83:b2:2b:f0:6f:a7:
                    8f:3e:98:05:bc:0c:30:c7:18:c5:9b:5c:11:2d:38:
                    76:92:48:ee:bb:fe:aa:1c:a4:a8:d3:99:de:f2:25:
                    57:ab:10:b1:b6:c4:3b:0f:ff:ea:ba:dc:5b:55:04:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:75:A4:38:F5:C7:08:AA:67:12:33:26:36:E7:B0:B5:37:39:B0:1F
            X509v3 Authority Key Identifier:
                keyid:4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b3:ed:f1:ce:0f:c7:48:65:ec:e5:bd:ec:48:40:66:c1:d9:
         ad:cc:65:95:30:a5:90:cf:02:f5:f5:c5:8a:12:bb:11:49:90:
         81:58:dd:61:f0:ec:09:56:61:c8:07:1e:9f:8c:58:a8:25:81:
         1a:a4:33:b6:ab:b3:8c:53:33:8e:0a:36:e4:d7:c6:96:fd:8b:
         c5:3a:61:95:43:cb:b2:09:bb:fe:28:d0:7d:af:c8:92:9e:eb:
         ba:67:d0:69:4c:f0:d2:0e:af:0b:dd:48:c2:2f:71:44:25:f9:
         91:70:5b:3b:d2:a7:63:4d:31:99:c8:36:af:fa:af:e6:54:28:
         ea:51:50:e7:6c:35:4f:93:1b:a8:5e:ba:f4:ad:8a:9a:f7:ac:
         a1:c8:40:92:de:b0:8e:27:38:d7:4a:cb:8c:37:0b:99:80:bd:
         c4:f1:03:5d:79:fa:6c:24:28:e0:6c:b3:96:ee:bb:77:e7:45:
         75:56:ce:e8:e4:2f:4f:47:d5:2f:0b:68:9a:ef:83:5f:be:ec:
         cb:ee:5d:85:a4:99:9e:bd:de:fb:e8:78:84:8e:60:f8:9b:a4:
         0b:1c:70:98:16:db:c6:f0:ab:28:71:cd:86:2a:ca:93:2a:67:
         90:cf:4a:00:ca:22:39:13:5d:ea:81:6d:b5:70:11:f2:48:e5:
         60:bf:a9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:18:32 2026 by rpki-client