This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File:                     t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier:          mdhOL8s/CKee1co7rRWaCVXXw440Er5HWDlR90QaOfQ=
Subject key identifier:   A9:61:BA:4C:85:E3:A2:B6:ED:3A:38:B3:39:63:C3:B5:CF:39:14:F8
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer:       /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial:       019BA72426BE8DB22CEB5A41E7C7B6188F25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number:          12DB
Signing time:             Sat 10 Jan 2026 09:02:02 +0000
Manifest this update:     Sat 10 Jan 2026 09:02:02 +0000
Manifest next update:     Sun 11 Jan 2026 09:02:02 +0000
Files and hashes:         1: 7yXVbkDIped5AlVJWBLhNwB93qU.roa (hash: U+X2A4hl4OztYccmnndX5mgP9l1pKYkV+aIE4TVtE9o=)
                          2: Lac9mI8_0GODDuYUWUFmqBSt9mc.roa (hash: CCm67OvIIp58ZZddyH8lbNoIHH7qksW59/3/CScmsJ8=)
                          3: g4mflD0Y4dFeWIYXrHeIdFF1Tzk.roa (hash: LWoE8PLWl9I6/87QZF5e3VTAa9OFMyf8LK0mAIwQhYU=)
                          4: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: 5qcU/gYhYYVBg9ZgSbVSWSvcn3a/X+1UJCvLJfP1jS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a7:24:26:be:8d:b2:2c:eb:5a:41:e7:c7:b6:18:8f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
        Validity
            Not Before: Jan 10 09:02:02 2026 GMT
            Not After : Jan 11 09:02:02 2026 GMT
        Subject: CN=a961ba4c85e3a2b6ed3a38b33963c3b5cf3914f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e5:0b:a9:3e:7c:ff:4f:f8:75:b4:81:15:5b:
                    c6:e7:8c:fe:96:f8:f1:83:a8:66:01:25:2e:9e:ab:
                    1c:96:33:f7:90:e4:99:3d:de:73:5d:d4:bb:7e:09:
                    37:47:ca:36:bf:df:96:6e:ab:63:a4:84:07:e0:1b:
                    b4:88:f4:0a:42:bb:9b:ac:34:5d:27:18:7e:46:da:
                    ec:4b:51:70:10:48:bc:7b:b6:0e:fd:41:9a:15:06:
                    da:b4:8a:23:12:c5:7e:64:79:95:00:0b:4b:9e:67:
                    01:00:88:d4:36:21:6f:f5:e4:2d:60:c4:4a:3d:77:
                    da:e6:87:62:8d:b8:b0:fa:af:07:38:1e:64:1c:40:
                    d6:1e:10:5b:b6:15:72:f3:9a:49:98:22:9a:e4:c9:
                    bf:46:4f:47:b9:5c:2c:f5:92:53:06:9e:d5:a7:19:
                    cf:61:75:7f:57:3d:60:13:d3:5c:7b:8c:a1:ee:7f:
                    a3:a6:26:03:9c:1f:a9:a6:b3:85:d2:5d:8e:60:d2:
                    21:2b:46:fb:5e:2a:13:e0:1e:a7:ea:ea:51:be:c4:
                    11:e8:a2:22:46:25:4e:7a:fc:6b:fc:e8:df:8a:54:
                    6e:3a:df:5b:cc:57:f1:65:90:79:68:ed:04:43:54:
                    d8:87:ba:da:fb:cc:0f:48:0b:e1:b2:eb:40:b7:af:
                    cb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:61:BA:4C:85:E3:A2:B6:ED:3A:38:B3:39:63:C3:B5:CF:39:14:F8
            X509v3 Authority Key Identifier:
                keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e7:3a:3f:6e:43:6b:ab:17:dc:ff:70:48:9c:3f:2b:6d:6a:
         40:b0:3a:2d:15:7d:9a:75:dc:38:1d:1d:6b:a5:aa:70:c4:26:
         76:0c:48:09:b5:52:7a:e1:b5:67:f8:de:68:76:7e:01:c4:3d:
         1a:01:10:7d:3d:9d:a4:f9:02:e4:6a:1c:4d:6c:2e:cf:4c:89:
         56:3c:23:49:b3:ca:4d:24:ff:f2:f1:bd:48:d8:82:37:93:17:
         76:3b:f9:92:81:07:74:3c:50:e3:bd:21:53:87:be:2d:11:b1:
         b4:3a:d2:ef:f9:d9:e2:06:f1:5c:7e:e4:47:a6:34:fa:ca:9b:
         8c:29:1e:33:4d:ba:1d:ad:34:5d:b9:3e:94:f3:74:15:1c:ce:
         ae:96:02:57:09:0b:ef:08:d7:d4:a4:3d:1e:77:e9:37:03:99:
         28:33:79:6c:94:29:4d:e2:02:2e:44:2e:22:5a:8a:ce:81:5c:
         f0:f4:2a:e3:93:f1:71:39:0e:d1:0e:9c:ac:af:28:cc:af:0f:
         71:e8:20:a2:e8:fc:d4:17:1e:6d:59:87:d8:ec:78:68:93:5d:
         a9:c5:5f:13:50:5f:d1:81:48:45:a2:ea:34:70:78:a3:29:02:
         90:74:ad:4e:af:ec:05:34:68:19:fd:08:43:c0:4c:56:b6:a9:
         10:35:af:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 14:31:03 2026 by rpki-client