This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File:                     T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier:          QTxZBH+7cMNfsZnyf2eJsR1Qux2aHr1Eqe0hzUbMS0U=
Subject key identifier:   F1:30:FC:4B:F5:1E:AF:DB:6B:E1:91:9A:51:D4:48:F2:27:D3:F6:7B
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer:       /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial:       019BFB40789F47FD9A785B624810B478CC1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number:          02C5
Signing time:             Mon 26 Jan 2026 17:01:04 +0000
Manifest this update:     Mon 26 Jan 2026 17:01:04 +0000
Manifest next update:     Tue 27 Jan 2026 17:01:04 +0000
Files and hashes:         1: 9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa (hash: +HQk05zntNehbdvu8V8NKlpGF7j4PZhXHS02uV6BN8A=)
                          2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: aVCxADVwyRkkwNF+eee7bp3YOyu8c/wCurMbN96xgmg=)
                          3: oMePamcSuXSxfmF39ynMXweabv4.roa (hash: rGoYrQCZs2IM8glBNFHp5PUVvbo0qB19ajmf0wK0f8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:40:78:9f:47:fd:9a:78:5b:62:48:10:b4:78:cc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
        Validity
            Not Before: Jan 26 17:01:04 2026 GMT
            Not After : Jan 27 17:01:04 2026 GMT
        Subject: CN=f130fc4bf51eafdb6be1919a51d448f227d3f67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bd:1a:c8:de:77:df:ea:36:f5:df:b3:71:48:
                    1e:49:33:e2:93:b8:4a:5c:c0:15:78:4c:90:cb:7b:
                    bb:1e:d0:68:0d:2a:fb:cc:2a:50:ce:ec:f8:6e:40:
                    86:cb:e3:65:d1:37:fd:5f:dc:de:0c:3c:3b:a8:8a:
                    7f:cf:bd:d7:2a:ac:46:1c:b7:52:76:5a:35:b8:b5:
                    dd:51:a3:6f:a4:7a:05:df:7a:9f:89:eb:6c:26:8c:
                    c9:5d:1e:55:e3:a5:85:a8:2f:4a:e8:4e:fe:0a:f8:
                    b6:95:09:39:1e:26:b4:5a:fa:c7:70:6e:ec:5f:32:
                    a8:dc:1b:20:ab:0d:f4:02:7d:94:d8:38:be:f8:4e:
                    3d:81:af:14:82:f8:29:20:2b:51:0c:39:ed:34:f3:
                    5c:61:8e:d7:70:01:bc:3c:75:45:84:f2:9e:12:04:
                    d3:93:3f:eb:3f:fd:f9:66:51:43:9b:22:db:f5:8c:
                    55:7a:9b:ec:b0:0c:7d:60:3d:4f:da:35:8e:3e:b3:
                    7d:70:c5:77:23:a7:49:d6:c9:67:af:5c:3c:67:c7:
                    6d:33:26:f3:d5:c0:56:55:c7:d6:8a:a9:3b:f7:cd:
                    98:6c:b0:e7:99:de:fc:15:cf:4f:a9:2e:62:df:ce:
                    2a:44:ae:88:20:05:8c:5c:ea:69:f0:e6:a7:b6:c9:
                    f4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:30:FC:4B:F5:1E:AF:DB:6B:E1:91:9A:51:D4:48:F2:27:D3:F6:7B
            X509v3 Authority Key Identifier:
                keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:38:f8:db:26:5e:49:7a:38:32:72:b1:16:e0:8e:df:ee:96:
         c0:99:b4:01:8a:a7:4a:dd:02:20:8e:9c:2a:6e:df:86:9f:53:
         14:ce:58:b5:be:12:4d:70:af:55:bb:ba:1e:3e:ec:1c:11:17:
         a0:ac:12:f3:ad:44:a8:c0:9d:35:c2:4f:ff:e0:88:9c:9c:e2:
         4e:a8:3a:08:21:96:4f:91:43:e0:4e:4a:d0:cb:96:8c:45:a2:
         aa:c9:7c:ad:bb:70:32:92:3b:93:85:80:5f:8f:87:2a:23:dd:
         29:6b:37:8f:27:3e:02:74:e6:3f:3e:53:fd:12:c9:f6:76:71:
         55:3e:d7:0d:33:c5:ca:70:1c:b6:89:d7:34:67:8c:a9:73:0d:
         62:53:c8:f4:52:46:9f:89:d5:19:1e:f6:08:95:72:6a:25:cd:
         63:00:62:85:0b:36:26:cc:e6:a9:2e:ed:f3:65:fb:37:45:79:
         fb:01:b5:f8:b0:4f:c6:a8:1d:ef:cf:f7:a9:64:2f:cc:f3:be:
         2e:5a:d7:31:cf:84:6a:20:3e:c5:32:36:2a:88:05:a2:7e:e6:
         b3:2b:24:d8:00:3a:fa:4c:ff:da:7f:ae:80:50:04:9f:d1:93:
         14:a0:d1:e3:d1:db:77:ac:35:d5:a0:37:3c:ee:4b:cd:a0:fc:
         ed:f7:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:11:59 2026 by rpki-client