This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
File:                     TEaPGBJltNlsooNaPlcMJnkDXf8.mft (raw, json)
Hash identifier:          hojMpfByCF7VOsEsi27cdkbiRnaPweHFeW5MVCq/mZg=
Subject key identifier:   6E:53:E8:62:70:28:0D:78:A9:17:07:9A:24:8B:ED:C8:0E:80:44:6E
Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Certificate issuer:       /CN=4c468f181265b4d96ca2835a3e570c2679035dff
Certificate serial:       019BAE01807D86BB3CAD6C7D6825B9945A5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
Manifest number:          16F5
Signing time:             Sun 11 Jan 2026 17:01:32 +0000
Manifest this update:     Sun 11 Jan 2026 17:01:32 +0000
Manifest next update:     Mon 12 Jan 2026 17:01:32 +0000
Files and hashes:         1: G5xYweczugT7y9iKv0C3tFH_n0s.roa (hash: mJ6ZUqGAfQj432UWOlXl+ZROquxNC18uSJrAS/I3FwY=)
                          2: TEaPGBJltNlsooNaPlcMJnkDXf8.crl (hash: CFHbn6o3XgZYQoAbI6OtmDm2uscNghc63Ur8eQ0WieA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 17:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ae:01:80:7d:86:bb:3c:ad:6c:7d:68:25:b9:94:5a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff
        Validity
            Not Before: Jan 11 17:01:32 2026 GMT
            Not After : Jan 12 17:01:32 2026 GMT
        Subject: CN=6e53e86270280d78a917079a248bedc80e80446e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:aa:b0:1d:9b:e7:cc:fc:30:7e:b4:88:78:
                    ca:fe:fa:a2:25:e7:97:c3:8b:d9:6a:a1:b3:cb:c9:
                    98:4d:59:d3:15:d1:3c:d9:80:9f:91:64:67:14:18:
                    a9:a9:b8:a3:51:dc:2b:b5:a7:cb:43:7a:e4:41:eb:
                    87:ee:30:ce:7c:4a:69:f7:e7:2d:ba:b5:fb:00:7e:
                    8a:4b:fe:29:9e:35:8d:17:7a:79:49:30:6a:78:e9:
                    29:ba:bd:ad:ca:a1:39:d6:0f:a4:c0:99:5a:e9:ff:
                    4b:aa:d7:57:13:00:78:e5:1b:fe:c7:e8:cd:49:c8:
                    5b:16:ed:75:93:4e:7d:61:64:0d:1a:36:f9:d6:3d:
                    d3:cd:6c:00:40:5c:1f:74:75:a6:8b:bf:68:38:b5:
                    29:43:cc:b9:fe:25:40:a0:06:51:07:c8:b6:58:16:
                    39:e1:07:e2:7b:c0:cd:e0:30:dd:0f:1e:a5:02:eb:
                    8b:9b:30:32:6e:9b:4a:43:e4:5b:46:01:27:f5:c8:
                    b0:be:cc:00:9b:e8:de:92:9f:84:d2:3a:80:11:d3:
                    c2:2c:ba:e2:71:fb:00:34:93:36:fc:01:8c:c6:01:
                    9d:4d:94:c7:28:6d:cf:10:b2:dc:5b:ec:fb:53:b3:
                    4e:76:dd:ad:df:c9:2a:10:2a:fa:10:7a:97:1c:70:
                    6b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:53:E8:62:70:28:0D:78:A9:17:07:9A:24:8B:ED:C8:0E:80:44:6E
            X509v3 Authority Key Identifier:
                keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:71:24:30:d9:2c:d2:9f:95:fe:c6:51:79:ee:ae:c5:3f:9a:
         17:34:25:b4:c4:9b:f5:21:1d:c5:1a:2b:1d:c0:bc:64:97:65:
         ea:85:f1:64:63:bd:ae:1f:f1:80:df:dd:22:73:ef:43:35:45:
         89:fc:da:f3:83:fb:68:c0:8d:0f:37:12:6b:8f:7d:ff:50:bc:
         80:a3:76:71:14:d6:92:22:47:7f:83:ec:5d:39:02:9c:59:71:
         1a:e0:11:24:38:37:6d:42:5f:19:3d:82:32:03:23:56:ee:61:
         ac:5a:34:9e:ae:13:b3:d9:0e:c0:ef:a2:1e:0f:cb:46:9a:ca:
         cd:d5:4f:ba:08:dd:28:2f:33:4f:5f:85:ab:0c:fc:d9:f2:31:
         36:77:8e:ad:86:73:ff:51:84:1c:1d:a3:62:c9:e4:b2:6c:ee:
         f5:47:d9:58:b2:6d:f1:7a:bd:c1:84:51:b1:62:b9:4d:5f:33:
         bc:a8:d8:84:78:c3:b4:48:f9:59:de:22:e7:c7:59:30:04:3a:
         c3:38:f8:8e:d9:98:fd:32:92:54:0d:46:3e:60:6e:32:db:80:
         92:8e:8e:0b:12:d0:d2:a0:7e:d4:81:8f:34:24:8c:4f:a5:00:
         f4:51:f5:58:8d:0f:37:bd:4b:01:5f:12:58:1c:b5:03:4f:3e:
         37:66:c0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:52:25 2026 by rpki-client