This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          wTcOhj39t5tazOZlJr8jIx/5Ej9GtQX/Mb6obReC7jw=
Subject key identifier:   D3:06:21:A6:84:40:FC:72:A4:A2:9C:1F:58:F0:3B:E6:43:3C:7D:96
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       019BFA2D89594733787FBCEECAB7B0539C16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          1800
Signing time:             Mon 26 Jan 2026 12:00:46 +0000
Manifest this update:     Mon 26 Jan 2026 12:00:46 +0000
Manifest next update:     Tue 27 Jan 2026 12:00:46 +0000
Files and hashes:         1: 02kOZkpvmw6H06A_7TJUg4SFXaQ.roa (hash: TpRuYePLiA4791T1EEAGr2x5CqL+fTtzRjsvGFbZMFE=)
                          2: 2uonQk8lw16FeBIvKKSSmhsYIS0.roa (hash: 2dNCmgQW6KMhs3bZJLn40BJuFp8E7ETzKi/EDLa0p5s=)
                          3: 5ziyZMsm-eF8rQKEiPIRLUjKrJc.roa (hash: ST0tOCj/lVMKy70YCsjUG8APQaOubaCeSEbJbdk4mkA=)
                          4: 8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa (hash: PZyLvuJ766MtPxGWe7ycqZ9uJ2ybPMELzypr1ODKQyU=)
                          5: FwWBUFukI5sYaoIJXPQl_VpBKGw.roa (hash: 1A5Wlz49N8I7V2ONwfh6sYJRe2syIOSrNYZlIXmZWdY=)
                          6: Gy-LFbASJWTVYACt4LtWc2cmLuw.roa (hash: ujJsb5LhZ8X8O1ISoHR/MP5k+2QVAPis3/2ApXdZZ3g=)
                          7: MO6J3ImYDWqYVzymL0l4FvP1thU.roa (hash: e0dvPY/H6He44W+ZncCzFUHFzRAKvhD4nFOOCJSgnhw=)
                          8: NjCxVetchGZ0XWn7taqHcdtexeY.roa (hash: luZWHi8jfVZ+lGh40HXz9Aj5QcdjwpUbYNovF4whMXA=)
                          9: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: mf7uMjT5/WdKUmwbVmjTC9zY1ZpuqfiEHRCyk+OJE+8=)
                          10: V9xlTmLwNKweV-zsTwryoAjMjQE.roa (hash: LIOx8KKkz2konfrXlfZi+6hVeDXTVaCFSb7b61C2Cs4=)
                          11: YtD0hgbunNZVqmVM-mTLvyyQEfg.roa (hash: bXNfm9p7iVN39qRXUc3z+rEBdxvoCN2D2p6tjPh77Uk=)
                          12: aXSOc-PVHMUBKt_487iYToOm7qo.roa (hash: TgcrpfHL47vgaiMhXn3iuqbilgXgoWpFYf29PAeU7PQ=)
                          13: esYBbdHlmzNrFPaZHG9t4u-VPHc.roa (hash: lkNqbXeTq7xSvC4HTyeLweRSSMj+JVz2/1P8Io014A8=)
                          14: gH8loGqHuQUgS7s-27j8UFtooRI.roa (hash: 3c/uPZsoFkC/+vu1WnVFt+9jcD0vxFLrQc/tSOZVhig=)
                          15: irMc3rrBTtXnxu6Y6x7SlrREl3k.roa (hash: odarHoY4Wy3X+9/gV/9gi100gxxZ4b3sXjkX8UmBWCw=)
                          16: jSXCL2nU6ig_-VGukqzzbg83BZk.roa (hash: Az+cF5wKpW/d6F9stZPF4IUccQjeYz6jWseSjP0L2T0=)
                          17: kYEWFQU5-czKs7zv1vGT343BJ-g.roa (hash: xWtvvMN7qcqpohmug6+MXQLfldtO5B6k2u+O9bf+VTA=)
                          18: oitUYkAPeYiroXJK68BhqiN_Xek.roa (hash: zYA61o9aLXKLXeSg2vp84zehihqtVq61hd+jWJCYfGg=)
                          19: rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa (hash: OT7C6O/C6TgYrrzLBRPYDZUiybzraaRPGIJN5wW++Ak=)
                          20: u0RIuGfpHnx-Tn2Xp-wlaIQU95A.roa (hash: VuT5SalQp4yYIzm6lgKxTmu1Rlv5TD85uBnxUVTY7eo=)
                          21: yLMV5lCxmugxTcjR0kvs8qTvDQs.roa (hash: VAFUfjT6/8ZbId3UHCjjJDfpK2X5rUeLGtPsXPOBDAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2d:89:59:47:33:78:7f:bc:ee:ca:b7:b0:53:9c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Jan 26 12:00:46 2026 GMT
            Not After : Jan 27 12:00:46 2026 GMT
        Subject: CN=d30621a68440fc72a4a29c1f58f03be6433c7d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:60:5e:bf:4f:5c:ce:b5:86:21:da:32:47:
                    b5:03:0b:2e:8b:c5:47:9a:84:22:9a:e1:fe:6d:bf:
                    80:db:59:14:ff:3c:42:87:2f:54:6b:3b:9d:78:d8:
                    a3:9f:43:c8:08:73:2c:77:e4:fc:51:be:af:45:d7:
                    e8:9e:c9:11:7a:de:78:cc:7d:01:15:e7:19:eb:df:
                    6e:97:44:06:11:2f:59:3b:b5:d6:23:86:f8:da:9d:
                    00:b1:d4:66:46:b1:ba:2c:0d:7b:ab:4b:52:01:ae:
                    4c:2e:52:a4:cf:11:c0:38:e5:06:4e:d0:e2:05:29:
                    b4:52:3a:58:cb:d4:5f:bd:53:7b:a4:c2:20:70:b0:
                    57:17:de:93:2e:79:85:a4:4d:a2:76:72:78:80:0f:
                    cd:3d:a1:00:76:ed:83:2e:92:85:58:7d:9d:0e:37:
                    40:97:05:ca:8e:be:4a:73:a0:6a:99:46:e3:a8:88:
                    2b:84:68:da:e8:b2:67:c3:40:76:4b:42:a1:56:f0:
                    e8:b1:f5:b0:a7:36:1b:87:d2:ed:3a:53:d0:8d:c0:
                    a6:c3:e8:3c:0c:a8:9d:ce:dc:fe:38:31:3a:e6:ba:
                    a6:ce:77:54:ad:e8:0c:91:8c:76:87:39:f7:35:a7:
                    c4:6e:f1:d1:44:64:98:ce:e3:24:59:50:3d:9e:1b:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:06:21:A6:84:40:FC:72:A4:A2:9C:1F:58:F0:3B:E6:43:3C:7D:96
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2c:a0:d7:8d:32:33:f7:11:af:f7:ba:13:c6:9f:d8:40:a3:
         13:15:52:3a:0c:d9:5e:1a:1f:fb:15:42:d5:72:d3:93:b4:27:
         9f:85:84:5e:01:0d:c8:d7:4b:e1:a9:bf:73:e6:b3:63:08:b3:
         7d:f3:a0:96:8e:16:9d:08:5c:b2:bf:c4:28:15:8d:fe:d4:e7:
         4c:03:9f:f0:b9:a3:01:87:13:2f:fe:b9:0b:f3:9d:67:0d:1a:
         23:a1:52:0c:89:a7:be:7d:b2:44:4c:0b:29:b7:be:a6:99:28:
         96:78:87:17:d0:f7:68:c5:25:24:41:c4:e6:81:36:ea:fc:c4:
         a4:83:cf:f3:5f:51:fa:5c:25:4f:55:ae:79:b0:45:9d:b1:bc:
         89:f1:4d:e9:ea:9e:72:78:7a:ad:f0:17:ff:07:3d:4d:d1:ef:
         cc:bb:a2:1e:d0:91:b6:53:71:ab:52:e3:92:58:cc:2b:30:25:
         7a:45:cd:f8:d0:4f:03:c8:ae:37:ce:cf:8a:a1:29:69:d0:6d:
         a8:ef:f8:11:64:94:44:7e:a0:b4:4d:0b:5a:a1:39:e4:f3:4f:
         7a:09:30:e2:c6:8c:82:04:e7:28:8e:75:63:ed:73:63:18:8c:
         ba:4d:e2:f6:af:4a:48:51:cb:22:79:75:30:7f:ee:24:25:aa:
         d8:56:51:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:39:36 2026 by rpki-client