This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File:                     TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier:          ICQ8MEX31OCrmyeKnCHBuiu42PaEUpZ6pXkpau64Jr4=
Subject key identifier:   01:38:2B:4F:33:80:02:76:7E:80:00:0B:FE:30:62:7D:C0:35:CB:17
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer:       /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial:       019BF72CD4636492BBAAEF95519B51807615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number:          17EB
Signing time:             Sun 25 Jan 2026 22:01:08 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:08 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:08 +0000
Files and hashes:         1: 6h3DLRd0aoO08FWkuvK-DIL1TAI.roa (hash: QbNhinBRvnYOWmudxD6YkQ5YvTv3wj3nF5VH2568D0c=)
                          2: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: HFnEclmGw+vTuuoRUQTTMMrDd0CPTRUGtvAcfaPOkrk=)
                          3: kzYQmwQKzbuQvS3iB2mDUlnw91Y.roa (hash: bz4ecHp+kkkRf1WW8soaqZgJTcHf8FiOXW+H4gSzf48=)
                          4: lv8af-jyuveaHC9x_OKdx2NgSxI.roa (hash: qC6P7LJylLpMoNR/tNemeZF9+aw6XACba3yU1fASXaI=)
                          5: wMLINqfRL31emUgeWzPrQ7en_WU.roa (hash: 28WktakjRSH95PtqAXbEMoIgPvxQiYsWki+RGQe70G0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:d4:63:64:92:bb:aa:ef:95:51:9b:51:80:76:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
        Validity
            Not Before: Jan 25 22:01:08 2026 GMT
            Not After : Jan 26 22:01:08 2026 GMT
        Subject: CN=01382b4f338002767e80000bfe30627dc035cb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:f2:ac:41:61:8f:15:51:c9:7f:4e:e6:1a:
                    72:c4:d7:ca:c7:d8:f2:23:28:c2:27:51:95:8a:61:
                    9c:90:57:4e:e1:b8:a0:bc:bc:2b:f0:f4:b5:98:b3:
                    ad:f0:3d:7f:f3:12:ed:08:ba:63:df:63:bd:f0:5a:
                    ea:77:3c:51:ae:6e:9d:d9:e5:0d:b1:95:a7:20:93:
                    14:28:08:ed:ea:00:78:f4:45:71:f2:92:cd:80:9a:
                    1d:bf:04:2a:af:6d:a2:6a:d5:01:da:1c:9f:56:02:
                    9d:db:d1:7c:47:50:0d:75:34:27:0c:68:1b:c6:a5:
                    b8:71:4b:57:0d:35:7e:78:4a:88:5f:e1:85:92:34:
                    28:7c:59:42:5c:52:b4:02:81:66:67:61:d0:f3:14:
                    4c:81:bb:87:a6:bf:5c:6c:16:20:c5:0f:6c:35:b9:
                    af:68:3a:e8:64:90:ad:62:2b:a8:3b:94:62:d3:1d:
                    13:ad:d7:3e:d0:f0:91:d3:89:84:28:69:d9:b7:12:
                    10:4f:a4:e6:8d:d6:67:4b:01:83:1e:3e:4d:f0:c5:
                    0f:0c:37:cf:f3:5e:31:c4:47:e4:41:8a:dc:7d:19:
                    9f:e0:4b:9a:3d:ec:ae:7b:dd:89:10:f8:e8:f6:88:
                    77:24:19:1c:27:c1:ac:89:c4:78:70:ed:44:fe:5c:
                    0c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:38:2B:4F:33:80:02:76:7E:80:00:0B:FE:30:62:7D:C0:35:CB:17
            X509v3 Authority Key Identifier:
                keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:24:fb:af:a9:0e:0f:41:f7:3f:c9:38:30:e3:39:d0:45:b9:
         04:0c:ef:76:6a:7c:fa:e3:20:12:3e:b1:61:fa:5a:15:4e:a8:
         22:ee:01:49:88:34:04:18:6e:16:fe:2e:28:8a:b2:d1:d0:d5:
         ba:24:90:b9:12:a2:d9:f0:fc:e9:b4:3b:d7:d6:be:5c:6c:12:
         f9:2f:ba:8d:48:a6:43:29:1a:40:bc:5f:c4:43:9f:e7:1c:21:
         e5:6a:99:6a:6b:d3:c7:63:bb:3e:4c:61:a3:ce:d3:f6:f3:b3:
         70:a0:0f:7a:b6:72:b7:c3:ef:8f:4d:e8:d3:46:23:ea:73:75:
         29:cc:ee:2f:dd:b4:f1:5f:3b:30:0c:26:c8:70:6d:4a:ea:27:
         7c:e7:a4:5c:86:bd:14:c1:ab:0b:bd:b1:b1:c5:d2:35:e7:a3:
         81:73:4e:b8:23:c2:21:c5:25:b2:57:d2:82:32:15:90:8c:6f:
         14:4e:06:f1:f2:75:1a:d8:3d:4c:fb:a5:b4:4f:66:ed:c2:bd:
         e6:ee:8f:4e:da:e3:46:12:8e:ee:32:ba:df:5c:7c:f3:e8:e3:
         f2:37:f0:da:5f:3a:40:5c:b0:06:11:10:e9:6d:cc:b2:a7:e8:
         34:ab:2d:21:c8:ce:e1:a9:27:c0:12:5d:ff:bc:2f:b4:31:f6:
         92:9d:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:20:04 2026 by rpki-client