This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
File:                     txLJ_svev1b4RdYHkT0bVXFZKio.mft (raw, json)
Hash identifier:          ChJeB78EWXGm/QHcF09cMgbUUCe6yQ0CGU703PMSRGU=
Subject key identifier:   74:5F:BE:12:8B:C9:AD:BA:A9:7A:0B:87:BF:02:09:A6:DD:FE:48:E2
Authority key identifier: B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
Certificate issuer:       /CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Certificate serial:       019C1D95347FEA4CFAE92876AF62941D3C4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
Manifest number:          04F1
Signing time:             Mon 02 Feb 2026 09:00:43 +0000
Manifest this update:     Mon 02 Feb 2026 09:00:43 +0000
Manifest next update:     Tue 03 Feb 2026 09:00:43 +0000
Files and hashes:         1: IF91kVRDdrzodh2Mtx752KpXv5s.roa (hash: bPW1vVJsM7mDfRcerRQP2xE13iLp87+EUfaxF1z9J4g=)
                          2: tLJeZp7omoDa-UyHTJ2AZxClz1c.roa (hash: if8frEcPhkRabYpv1UYuQXiutcrdTOivXcWxUGxry+w=)
                          3: txLJ_svev1b4RdYHkT0bVXFZKio.crl (hash: zDaEnd8kSvUUS10xxp/YvD4xUuCiyBm1rhf6gbtOnhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:95:34:7f:ea:4c:fa:e9:28:76:af:62:94:1d:3c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b712c9fecbdebf56f845d607913d1b5571592a2a
        Validity
            Not Before: Feb  2 09:00:43 2026 GMT
            Not After : Feb  3 09:00:43 2026 GMT
        Subject: CN=745fbe128bc9adbaa97a0b87bf0209a6ddfe48e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:e3:ee:c6:e9:fd:7c:a0:62:6d:4c:fb:03:
                    19:f7:13:8e:db:a5:c1:9a:ae:c1:67:44:3a:45:d7:
                    53:89:eb:c5:12:c0:8c:6c:21:8f:82:01:f2:35:28:
                    ef:2f:3f:da:46:33:1c:e0:ac:c0:63:80:10:55:df:
                    79:21:bc:34:5e:f7:3c:96:13:bb:ab:ec:c3:36:8e:
                    84:73:e3:28:a9:65:75:3b:5c:80:1e:ff:6c:2d:54:
                    bf:8f:31:6b:6e:a1:38:6f:79:44:d6:ce:6c:82:0e:
                    ed:00:42:63:a0:57:f9:43:3a:21:2c:90:1b:f7:96:
                    1f:d0:ad:34:43:13:d5:a2:0a:25:7e:ec:25:ca:3f:
                    e1:fe:6f:7b:96:7d:44:30:34:c2:df:f9:d3:7f:2e:
                    23:e5:dc:e0:1f:58:74:d7:48:6b:27:43:a1:97:53:
                    18:5e:f7:21:63:22:7b:c5:4e:e2:2b:36:bc:d0:d6:
                    51:ef:cf:54:2c:60:17:dd:95:f1:4c:00:6c:29:86:
                    0e:66:59:f1:2e:c8:f5:dd:04:6f:b1:98:c9:2f:e7:
                    50:81:dd:17:44:90:bc:93:99:34:45:67:f0:89:cc:
                    3a:df:a6:ba:22:9d:c7:46:0f:c0:28:95:b3:54:a1:
                    ac:96:74:0d:11:22:f2:ed:42:60:2e:14:cb:54:b7:
                    80:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5F:BE:12:8B:C9:AD:BA:A9:7A:0B:87:BF:02:09:A6:DD:FE:48:E2
            X509v3 Authority Key Identifier:
                keyid:B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1e:bb:8e:8b:13:ee:4e:83:8f:fa:bb:51:31:96:0a:34:f8:
         e6:87:b8:98:f2:53:e1:6b:1e:bc:ad:d0:55:ad:50:c2:cf:92:
         01:be:1e:eb:fc:e6:00:f2:ec:2f:2e:4e:91:84:d4:70:f4:60:
         33:14:e5:6e:b4:65:ea:93:91:cb:fd:0b:57:a3:76:ed:d7:a7:
         61:27:81:ad:4c:4d:04:b7:40:a1:91:02:52:b7:6c:35:68:53:
         bc:ad:c0:07:c0:06:8c:24:74:ed:dc:25:f8:11:6b:46:72:f9:
         aa:7a:f4:58:f9:99:7a:d5:f3:48:22:38:c4:11:10:e5:14:31:
         1b:7e:b7:cf:1a:27:eb:43:06:ae:d4:2a:3f:3b:17:44:41:d7:
         a0:b0:86:06:64:f1:6f:b7:1f:8b:11:30:94:1e:10:02:e1:11:
         cb:b2:6b:2f:fd:f1:07:b2:8e:68:3e:a7:29:53:05:c4:46:57:
         5a:d0:0f:3c:1a:7e:48:68:50:bb:c0:90:ef:ac:10:04:df:57:
         ed:99:60:00:db:09:83:ec:50:25:f2:ad:32:76:4b:7e:29:40:
         31:f5:5b:99:65:e4:57:45:3c:96:e8:10:eb:9e:9d:0f:0e:29:
         52:6b:3d:26:41:4b:58:2e:88:86:c0:9e:b0:17:c4:02:13:c6:
         0e:d5:79:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:57:50 2026 by rpki-client