This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
File:                     tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft (raw, json)
Hash identifier:          IWWB/l7GE5l1kqFh4HVBCqrApSgs5M6+ZwOyKhTmX/k=
Subject key identifier:   78:30:87:A1:7E:72:81:DD:3D:B3:5A:AF:B6:51:97:05:4A:C5:0C:9E
Authority key identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
Certificate issuer:       /CN=b56b5b54decf43e964f4be6d304e480a386cb794
Certificate serial:       019C1CF0DABC9F2D8EA1F8B2F76D4F5C72AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
Manifest number:          8C
Signing time:             Mon 02 Feb 2026 06:01:12 +0000
Manifest this update:     Mon 02 Feb 2026 06:01:12 +0000
Manifest next update:     Tue 03 Feb 2026 06:01:12 +0000
Files and hashes:         1: tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl (hash: E5zZBfI7Z9Fm0nxpCXX/DXUoBGDyWo9JwmCLtp8/7wM=)
                          2: wc35MgYGPiVoITK8dBRVt7Icluk.asa (hash: A16HGxaZ77Lcix1Lc05fm2biWcgZ/EQMJRjj60DKa2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:f0:da:bc:9f:2d:8e:a1:f8:b2:f7:6d:4f:5c:72:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56b5b54decf43e964f4be6d304e480a386cb794
        Validity
            Not Before: Feb  2 06:01:12 2026 GMT
            Not After : Feb  3 06:01:12 2026 GMT
        Subject: CN=783087a17e7281dd3db35aafb65197054ac50c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:d2:4b:80:78:9c:21:3d:f8:d7:e8:5a:82:
                    65:77:5f:9f:d7:fa:fe:91:43:ce:9a:94:bc:da:03:
                    89:be:44:c9:e3:dc:fc:b2:41:a0:0a:84:b7:e7:ac:
                    48:25:a1:f4:9c:4e:88:92:cb:55:7b:80:f8:29:63:
                    b3:88:de:ba:e4:e7:0f:3c:e3:a4:30:2c:29:5f:f9:
                    c9:a6:72:5b:aa:0f:96:6e:d8:04:35:ad:d1:37:d4:
                    4a:68:b6:2a:13:6e:d7:ce:0e:61:bc:13:35:06:50:
                    11:91:7b:4c:42:2c:09:f1:51:be:e9:80:b5:25:9e:
                    be:8c:2d:4c:50:00:8c:d8:a2:4a:1d:cc:16:64:d8:
                    66:de:b3:8a:b9:9d:7a:16:e0:ac:89:c6:7f:79:db:
                    29:66:66:40:50:4c:34:e0:05:cf:24:f5:de:75:5f:
                    ae:8d:32:02:9e:b0:60:e6:30:d4:df:6e:1b:0d:52:
                    c5:64:10:44:ee:66:3b:55:62:7f:d3:a5:49:c6:b9:
                    1f:c7:5b:2b:10:ae:4c:33:3e:a9:04:c8:b7:50:db:
                    33:0d:a3:f8:22:22:c2:a0:16:ac:a5:f2:94:f1:3e:
                    9e:53:db:e1:cc:45:00:3b:7f:2c:5e:90:4d:7a:ce:
                    b6:1b:56:3a:48:f2:52:cf:56:a3:25:5a:d5:e4:b4:
                    d4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:30:87:A1:7E:72:81:DD:3D:B3:5A:AF:B6:51:97:05:4A:C5:0C:9E
            X509v3 Authority Key Identifier:
                keyid:B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f5:f5:02:fe:d1:4c:6a:7f:e6:c9:a3:51:e7:98:ce:62:34:
         3b:85:88:c4:20:09:f7:79:50:b0:42:e5:1b:1a:a0:7b:1b:9d:
         94:93:34:3a:05:d2:5d:5e:5e:53:e0:e5:ce:c5:6e:74:26:f3:
         f2:a7:63:df:61:05:44:ef:0a:4f:1b:fa:94:f8:b1:8f:f3:20:
         11:54:09:c2:7c:51:5f:08:ca:ea:4d:1d:41:89:a9:72:7c:92:
         16:32:f9:60:c4:3d:43:60:31:f6:b8:1f:15:46:f5:82:01:67:
         40:e5:f3:28:96:bc:1f:08:bb:5c:90:60:e7:a5:b1:77:01:5e:
         ac:f6:f7:94:12:fa:f5:73:98:01:5d:c1:3d:b0:5d:42:14:17:
         db:bc:3f:d5:f9:5f:b9:b5:52:92:f3:46:50:2c:9b:06:3d:af:
         fa:5b:0b:25:39:0f:af:f4:92:2d:0b:72:47:ab:d1:38:d9:68:
         46:05:dc:56:a7:fc:74:53:78:d6:cd:c3:8c:d4:23:b7:bc:24:
         4c:95:6b:12:cd:aa:21:bd:05:ff:72:ec:16:5c:7f:a8:31:c3:
         e2:79:8f:aa:9b:4b:25:ff:09:42:4d:f9:96:51:f8:2d:0e:98:
         57:d0:07:da:16:8f:30:d8:c7:c1:1a:82:8c:bb:b0:af:6b:2a:
         05:a7:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:22 2026 by rpki-client