This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File:                     tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier:          HwzYx5nz+4vKLzRbKXfVTsiB7AvlWsQ/uUaCgKiec0k=
Subject key identifier:   C6:F8:E9:7F:BC:47:11:A7:8C:6B:A2:48:C1:69:EB:0A:0A:C8:31:60
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer:       /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial:       019C1B6FF122FFB0AF5515C231418835CA63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number:          17FB
Signing time:             Sun 01 Feb 2026 23:00:46 +0000
Manifest this update:     Sun 01 Feb 2026 23:00:46 +0000
Manifest next update:     Mon 02 Feb 2026 23:00:46 +0000
Files and hashes:         1: 9zCWH-Ac1Rhc3_vCx_Ixlkh16vw.asa (hash: 1GzmLCaUmzKWkWm0Xkaj4ZmWi88kwnMLhp1nR2/73XM=)
                          2: Ay40Es4lmjK5Q5DTaQo_Rj0Il34.roa (hash: l6a+NksOUtbW9bPUki0o5wq7kn4tvxRKIpI840BR/qo=)
                          3: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: z10sxTPNOgtZtwujiyCnzwZ2FHXjBQ2acODBcaPeZnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:6f:f1:22:ff:b0:af:55:15:c2:31:41:88:35:ca:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
        Validity
            Not Before: Feb  1 23:00:46 2026 GMT
            Not After : Feb  2 23:00:46 2026 GMT
        Subject: CN=c6f8e97fbc4711a78c6ba248c169eb0a0ac83160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:c0:5e:8c:f3:24:2f:98:d2:f3:ea:8a:2e:
                    c2:cd:2f:50:14:d3:0e:84:a1:ca:cc:9b:a9:61:0d:
                    81:cc:21:f3:14:33:b8:be:c2:91:59:5f:41:7f:0e:
                    b4:ce:5d:c9:9a:5a:5a:1e:d1:aa:cf:f1:0a:81:d1:
                    c1:36:f2:8b:62:47:46:70:54:30:70:53:af:fa:d9:
                    0e:e6:43:be:21:ee:76:41:04:60:3a:76:1f:a8:07:
                    ca:7e:19:fa:61:b2:d0:27:68:96:95:ad:58:72:bb:
                    68:e0:9f:3d:51:87:5e:c3:b5:a6:a0:74:f4:e5:8c:
                    cd:85:8b:e8:f3:45:a5:c9:1f:26:01:be:65:19:c6:
                    70:3a:3b:ed:32:6f:8c:9b:5e:96:8b:95:dd:97:16:
                    f4:d1:1c:4b:38:0c:66:59:30:86:39:fc:30:96:80:
                    98:90:92:34:cb:7f:09:0b:94:8b:0c:b8:9e:3d:07:
                    92:3e:72:7f:cb:b9:6c:fd:5c:4d:ca:cd:78:bd:71:
                    41:fc:c6:cf:6c:1e:45:39:6a:71:c3:0e:1c:8c:ed:
                    35:cb:36:2f:1d:34:11:09:cd:3c:3c:26:95:97:45:
                    3f:a9:4b:46:ba:24:8a:39:d4:ae:73:e5:e2:ce:cc:
                    8a:a0:3f:50:4a:84:db:c3:56:ef:05:b9:5e:8c:e3:
                    36:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F8:E9:7F:BC:47:11:A7:8C:6B:A2:48:C1:69:EB:0A:0A:C8:31:60
            X509v3 Authority Key Identifier:
                keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d7:72:2a:42:0d:5f:08:8e:27:4f:30:3c:f9:3b:2c:5c:5d:
         1c:fb:6d:94:3f:a9:11:fc:99:5d:e2:b9:a9:ed:d2:66:b9:9b:
         8b:db:b7:72:8e:f6:40:e6:8b:01:bb:0b:f8:23:e6:df:cb:42:
         44:5b:9f:8c:58:46:f1:b6:36:e8:84:13:c3:a0:59:29:06:1e:
         68:c7:19:aa:da:98:7d:c0:d1:b0:9b:f9:55:57:75:94:13:f6:
         29:ec:86:07:d4:fe:f2:ab:91:74:f8:5d:cb:32:db:6c:b5:06:
         13:4b:1a:f0:26:82:44:ff:2b:77:fa:b8:c7:5f:7e:e0:7e:28:
         05:b7:34:a3:0b:1e:37:24:3b:fe:57:08:2b:57:7a:fc:7b:17:
         8f:cb:42:77:c7:85:5d:ec:e7:f2:6c:aa:19:2c:de:86:61:bc:
         c4:b6:35:17:08:83:17:f8:63:54:f0:67:c4:f1:af:d9:b7:90:
         a5:82:13:97:a4:37:10:15:60:cc:6c:68:af:b5:05:1c:5a:8a:
         01:34:c8:f7:d1:af:32:94:83:e4:65:9b:a3:29:0f:67:d1:92:
         76:cb:4b:8c:6f:47:c9:56:cc:83:3c:62:3c:b4:ed:65:54:23:
         f6:bb:a5:a9:de:dc:ea:00:ce:5a:2c:c9:60:d1:c3:b8:80:a2:
         19:53:3c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:16:11 2026 by rpki-client