This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File:                     tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier:          DRRplB2kVtgVnEKPJ93z7PVCbzGR7hDB6HqSyE4rI38=
Subject key identifier:   75:33:49:E2:23:18:6B:97:A9:FE:00:6A:BC:F6:46:C7:C9:25:9C:8E
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer:       /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial:       019BF9F6DF298F62A9ECA3D85FBBE1AA976A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number:          01CD
Signing time:             Mon 26 Jan 2026 11:01:04 +0000
Manifest this update:     Mon 26 Jan 2026 11:01:04 +0000
Manifest next update:     Tue 27 Jan 2026 11:01:04 +0000
Files and hashes:         1: GJGcFx0xGAuamOa3lmo_7TyCIas.roa (hash: qw0UBzd9Mkc6V2U3rQ/Tp5ymNOy4O3f5at2SdO5Hyh4=)
                          2: JD-_RMbQpF-pKZOnXs4mYFjjidQ.roa (hash: kFiezG9HvRIWsHO1y6hBEeY1FqGlLKVulu5N0PlRmH8=)
                          3: mOOpQixSR_G0BkBLz_pfNJqCpPc.roa (hash: J7597tV7KTTIerXR1FKozSh7ddWeTNBPbVoOCxMRSXM=)
                          4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: rY1/Elqt5C3ACo61Wv51cWmzoSBk2hbayTiJe2dJIcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:f6:df:29:8f:62:a9:ec:a3:d8:5f:bb:e1:aa:97:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
        Validity
            Not Before: Jan 26 11:01:04 2026 GMT
            Not After : Jan 27 11:01:04 2026 GMT
        Subject: CN=753349e223186b97a9fe006abcf646c7c9259c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a9:87:2d:1b:c8:20:e8:c5:a6:39:4c:69:2c:
                    82:31:52:e9:f5:6f:1a:71:ad:c9:13:c9:ac:39:c0:
                    5a:ee:18:4a:15:0f:02:68:76:8b:bd:5a:8d:de:29:
                    e8:fa:86:f0:ba:b9:4e:69:a7:28:a3:dd:ed:73:5f:
                    ce:4a:20:26:6d:a0:55:66:bb:f3:72:78:c5:78:8d:
                    77:1b:9c:f0:f3:c8:3f:dd:18:09:02:20:1c:7c:b7:
                    11:ae:3a:52:8b:60:e4:b1:74:a1:ad:c6:c7:6e:98:
                    c8:4a:84:a9:e0:64:9c:fa:f5:a3:52:d1:b7:5e:dd:
                    b6:bc:54:c9:f8:8b:30:56:0f:fb:b3:0a:37:43:e2:
                    a3:1c:9d:7b:c9:23:a8:1a:00:7c:2b:c1:a7:47:36:
                    fd:1e:86:5d:52:c9:5d:46:1b:fa:5a:64:f5:d9:63:
                    ad:f7:02:17:d4:f2:30:98:56:11:2d:82:2b:8a:18:
                    3f:3c:9b:1d:65:fb:74:94:e1:e0:6a:48:e4:14:fd:
                    b0:ab:c1:ff:02:dc:00:1a:ff:7d:b1:61:e6:9a:07:
                    4f:bf:45:55:8e:98:f8:3c:96:85:f3:94:30:49:5a:
                    ae:de:18:2a:27:b1:14:84:6e:b2:e2:3b:47:e0:1f:
                    c6:9b:1c:13:92:5c:06:0a:a1:8a:92:c0:ba:f2:d6:
                    d4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:33:49:E2:23:18:6B:97:A9:FE:00:6A:BC:F6:46:C7:C9:25:9C:8E
            X509v3 Authority Key Identifier:
                keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f2:11:5b:10:54:23:e1:ad:5e:35:9f:1b:ad:d1:21:ec:6a:
         ce:1b:33:00:78:b1:3a:37:31:74:99:0c:cd:03:82:f7:22:e6:
         b3:44:6c:a1:5e:9e:a5:2b:e2:63:5d:4f:6f:ba:10:ba:10:6e:
         d3:b5:60:6f:a9:ec:e1:7c:28:c0:6d:e5:01:d9:6a:25:f1:bf:
         6e:29:0a:29:d7:15:fd:f1:b6:23:5d:db:7c:29:6e:18:55:9d:
         21:ab:9f:b3:f7:d4:89:17:e9:0b:78:e9:e9:ff:b7:29:36:ac:
         fa:1d:b6:c4:b6:8a:2c:a8:4f:2f:6e:b4:c2:3a:27:14:d4:fb:
         61:ad:de:1c:8e:6a:5b:a0:a5:cb:f1:47:34:0d:1d:fe:06:0e:
         39:61:44:81:a5:83:3e:b6:40:c9:f7:f1:9e:fc:a1:39:44:97:
         ca:14:1b:4c:10:02:89:8e:8d:08:c1:51:8c:d0:63:a6:5e:ff:
         3f:a7:ce:a3:d9:67:ce:d2:79:55:0f:79:63:9c:dc:84:e7:f2:
         72:a7:5e:f2:5b:e9:26:8f:78:fa:4c:04:52:b4:20:4e:34:b7:
         11:72:61:da:00:d2:b6:1d:80:5d:3e:21:d0:dd:26:a6:4e:5a:
         d3:5f:da:59:9a:13:a7:6f:ae:ff:2b:9b:06:09:cd:61:ad:ff:
         07:ee:7b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:06:17 2026 by rpki-client