This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File:                     TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier:          rt4G5eDzMdllC6Kxoiyw+YYsIF+BzDuOdZzp15dRmkM=
Subject key identifier:   F2:78:F6:82:15:1B:12:F8:12:90:22:F2:AC:77:0D:BD:B6:6B:46:23
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer:       /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial:       019C1E035C3426567D6E600CF3B13ACCD69B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number:          17EB
Signing time:             Mon 02 Feb 2026 11:01:02 +0000
Manifest this update:     Mon 02 Feb 2026 11:01:02 +0000
Manifest next update:     Tue 03 Feb 2026 11:01:02 +0000
Files and hashes:         1: 87ELvGR-tVd6OIalv11-VasMdI0.roa (hash: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM=)
                          2: 9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa (hash: NhpPo4MiaM2h+3uIW+206u04bojlNWdCKr/u5d1izOo=)
                          3: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
                          4: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
                          5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: gG0pah2NPIu0KtotrzyJREaDqk5N9fn4m1HY3ccxoQ8=)
                          6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
                          7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
                          8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1e:03:5c:34:26:56:7d:6e:60:0c:f3:b1:3a:cc:d6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
        Validity
            Not Before: Feb  2 11:01:02 2026 GMT
            Not After : Feb  3 11:01:02 2026 GMT
        Subject: CN=f278f682151b12f8129022f2ac770dbdb66b4623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:db:b8:30:3e:06:4b:80:8d:3c:27:fa:d6:
                    09:a4:95:31:3a:7e:cb:bc:af:61:b9:18:54:9d:9d:
                    19:17:bd:17:f2:da:c3:63:ba:f8:2f:51:b7:68:fb:
                    5f:3d:9f:9e:b5:95:66:03:c7:1c:30:a5:05:0d:0b:
                    5a:00:e8:66:55:15:53:d8:93:a8:36:57:e6:58:bd:
                    df:11:e8:61:f9:1f:95:a1:74:d5:04:b6:57:de:77:
                    38:e1:a9:1c:38:28:60:ba:7a:a7:99:80:bd:db:f0:
                    a6:c9:a8:3e:33:fe:50:a3:89:eb:5a:7c:81:54:ed:
                    41:09:2f:b5:87:38:42:49:11:21:90:62:fc:50:96:
                    11:2f:09:92:fa:17:5e:94:44:dd:d7:2a:3c:06:5d:
                    20:f0:5a:de:81:07:2c:06:0a:c1:87:20:71:02:b7:
                    9a:d5:00:98:57:37:ec:e7:90:89:92:5d:c2:b1:a5:
                    b3:a0:ab:0a:63:02:b4:92:31:f1:26:fd:5d:06:43:
                    97:a3:af:79:fb:d3:e8:ab:b6:63:64:39:16:ff:9d:
                    1a:15:99:3f:bd:6f:7f:e8:dd:68:6a:00:2f:e4:31:
                    b3:7a:23:8b:f3:5f:6c:65:ad:fb:01:0a:29:76:d5:
                    8e:cd:46:73:9f:45:7a:43:4c:8f:21:28:91:b4:dc:
                    1c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:78:F6:82:15:1B:12:F8:12:90:22:F2:AC:77:0D:BD:B6:6B:46:23
            X509v3 Authority Key Identifier:
                keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d5:52:5f:a5:11:41:e9:63:2d:d1:58:25:cb:5f:21:48:1f:
         96:b7:c3:f1:b5:bb:f4:2e:14:2c:4f:05:9e:90:59:5f:6f:9a:
         2b:27:5b:34:96:34:e4:95:4d:a5:d8:11:25:74:2e:01:55:aa:
         02:10:c8:ba:bf:6d:5e:cf:97:5d:cc:d8:d7:7b:92:8b:60:16:
         a6:d1:b0:61:4e:06:a9:fa:82:1b:fc:13:84:9e:de:2c:9c:87:
         bf:1a:7c:be:ab:74:b9:02:1a:a6:6f:b5:7c:2d:b2:53:79:34:
         30:2d:77:e8:10:4b:8e:8f:26:2f:91:2c:7e:7a:72:fe:2f:0e:
         15:c7:9e:ff:0e:8e:ea:56:a3:96:aa:c7:a1:0c:11:6e:ee:d0:
         a5:1a:66:17:8c:50:d7:03:a5:09:c8:5d:60:10:9f:e6:45:59:
         b1:4a:fe:eb:21:c6:e5:49:a3:26:81:82:04:b6:10:c0:4c:21:
         ed:34:ef:f1:27:48:38:23:4b:a8:fb:69:11:11:9f:64:98:fb:
         e0:b6:0f:0f:92:cf:88:75:b9:3d:73:da:7f:82:a5:81:a1:93:
         67:3a:1b:c2:bb:50:53:22:9c:5a:a8:d2:c1:fd:fa:32:29:a9:
         ba:e4:2b:0e:e1:ae:7d:9f:5d:67:3c:fe:c8:83:3e:89:71:07:
         ca:de:ac:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 20:53:46 2026 by rpki-client