This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
File:                     tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json)
Hash identifier:          eNHLOLWztRUsa9SROgEn5p7Q3+9ELLjNnQ0KXZX/vlc=
Subject key identifier:   EE:FC:8F:B0:93:45:69:03:96:3B:2C:4A:4F:57:1C:6A:FD:57:D4:1A
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Certificate issuer:       /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial:       019BE180D2116AC126A8E5DEB1FE1CB9595F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
Manifest number:          17EC
Signing time:             Wed 21 Jan 2026 17:01:14 +0000
Manifest this update:     Wed 21 Jan 2026 17:01:14 +0000
Manifest next update:     Thu 22 Jan 2026 17:01:14 +0000
Files and hashes:         1: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: Y1yHsdxFVxjfbeAxkH7x09r6kR6ZhEz5K6GWlEOQ58E=)
                          2: xE2y3RI3nuzZANWmX6fxwf9bkMg.roa (hash: SegO1prKKRLU/fQqPq9kWO/VrlLtICljHXGoFYxWh5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 15:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e1:80:d2:11:6a:c1:26:a8:e5:de:b1:fe:1c:b9:59:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
        Validity
            Not Before: Jan 21 17:01:14 2026 GMT
            Not After : Jan 22 17:01:14 2026 GMT
        Subject: CN=eefc8fb093456903963b2c4a4f571c6afd57d41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8e:bc:7b:31:e5:63:16:70:16:5f:61:de:74:
                    ae:39:78:96:8a:34:b7:52:7f:24:c3:c9:53:51:e6:
                    f9:25:af:d2:ac:8b:61:bc:ae:a1:f7:a7:1e:71:74:
                    d8:63:1b:cf:28:21:2c:70:3a:b6:43:28:60:58:5d:
                    23:c2:39:9a:de:9e:7b:3c:37:9b:78:59:dd:83:50:
                    bd:49:cc:f7:ad:e3:e7:25:ed:b6:64:d7:24:e1:6a:
                    bc:56:75:fc:79:9a:17:99:ac:1d:e0:f5:87:4e:da:
                    4b:93:fe:06:c1:f3:4c:71:b5:2b:5b:19:88:5b:6b:
                    49:06:c9:e2:8e:22:75:f7:32:3d:f4:7e:3d:1f:eb:
                    81:7b:5e:17:27:ab:8a:64:23:06:dc:41:ef:76:08:
                    b1:df:cc:5f:32:4e:e6:af:eb:8d:df:6e:73:b0:9c:
                    94:e4:ca:f4:ec:d0:fe:23:d6:39:98:4d:73:a7:a0:
                    9e:7e:24:b8:85:84:9e:06:6c:98:8e:65:2d:af:e2:
                    ce:10:4f:30:e4:23:ce:c4:9b:7c:07:62:38:69:cd:
                    d5:58:e2:d8:18:dd:ad:5d:ad:bd:48:7a:fe:19:05:
                    7c:de:8e:fd:bd:c6:aa:c1:ae:4e:13:87:2f:64:a9:
                    bc:3d:60:97:d2:56:22:bf:ff:fd:67:7a:6b:83:59:
                    1e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FC:8F:B0:93:45:69:03:96:3B:2C:4A:4F:57:1C:6A:FD:57:D4:1A
            X509v3 Authority Key Identifier:
                keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ad:71:b7:40:24:b6:2a:ac:e9:35:88:9e:cf:8c:5a:c4:71:
         ba:22:32:a5:96:6f:f0:77:d8:ba:d1:fb:fc:27:f6:58:e7:66:
         26:f8:cb:e6:2e:ac:c0:ce:d2:32:8f:c7:53:40:e7:3f:4e:9e:
         8a:53:94:ae:04:f9:26:bb:5e:ff:25:1d:7f:49:32:f8:c5:d7:
         41:f2:08:38:41:87:94:3f:1b:78:5b:c2:a9:21:07:24:d6:6e:
         59:9b:ea:8b:33:e8:78:a8:7f:ec:f0:94:b9:14:9a:95:54:83:
         83:1a:75:7f:03:b9:70:ba:ce:c4:89:e7:4d:51:ce:cd:e5:bb:
         3e:52:07:29:db:af:96:7e:6b:42:3d:b0:39:3d:3f:74:a0:1b:
         43:ce:71:90:41:52:12:ad:d2:0e:b2:c0:e3:d5:5b:e1:45:ec:
         6f:36:f6:be:b9:f8:20:30:7d:e9:07:c6:63:44:f3:3b:00:74:
         97:3d:5e:d4:1b:0b:e3:2a:f1:15:09:f6:81:4b:20:de:61:54:
         da:a0:e5:71:75:51:3d:15:dd:22:44:fe:73:03:10:39:3b:e7:
         8d:09:56:b8:e9:6f:a4:27:d4:5b:cb:e9:b3:9e:b6:40:f8:df:
         6a:a2:fc:56:69:48:62:a9:b4:ff:92:03:1a:e2:78:e0:88:83:
         20:4f:e8:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvhgNIRasEmqOXesf4cuVlfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MzBiNzNiNTFjYmM1MzgwZGQ0YWRiM2Q1YWFmZjRkN2Ez
MzRjNWUwHhcNMjYwMTIxMTcwMTE0WhcNMjYwMTIyMTcwMTE0WjAzMTEwLwYDVQQD
EyhlZWZjOGZiMDkzNDU2OTAzOTYzYjJjNGE0ZjU3MWM2YWZkNTdkNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY68ezHlYxZwFl9h3nSuOXiWijS3
Un8kw8lTUeb5Ja/SrIthvK6h96cecXTYYxvPKCEscDq2QyhgWF0jwjma3p57PDeb
eFndg1C9Scz3rePnJe22ZNck4Wq8VnX8eZoXmawd4PWHTtpLk/4GwfNMcbUrWxmI
W2tJBsnijiJ19zI99H49H+uBe14XJ6uKZCMG3EHvdgix38xfMk7mr+uN325zsJyU
5Mr07ND+I9Y5mE1zp6CefiS4hYSeBmyYjmUtr+LOEE8w5CPOxJt8B2I4ac3VWOLY
GN2tXa29SHr+GQV83o79vcaqwa5OE4cvZKm8PWCX0lYiv//9Z3prg1kenQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO78j7CTRWkDljssSk9XHGr9V9QaMB8GA1UdIwQY
MBaAFLYwtztRy8U4DdSts9Wq/016M0xeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQt
MGQ0OGU2ODk1ZjEyLzEvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQtMGQ0OGU2ODk1ZjEy
LzEvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEK1xt0Ak
tiqs6TWIns+MWsRxuiIypZZv8HfYutH7/Cf2WOdmJvjL5i6swM7SMo/HU0DnP06e
ilOUrgT5Jrte/yUdf0ky+MXXQfIIOEGHlD8beFvCqSEHJNZuWZvqizPoeKh/7PCU
uRSalVSDgxp1fwO5cLrOxInnTVHOzeW7PlIHKduvln5rQj2wOT0/dKAbQ85xkEFS
Eq3SDrLA49Vb4UXsbzb2vrn4IDB96QfGY0TzOwB0lz1e1BsL4yrxFQn2gUsg3mFU
2qDlcXVRPRXdIkT+cwMQOTvnjQlWuOlvpCfUW8vps562QPjfaqL8VmlIYqm0/5ID
GuJ44IiDIE/oRA==
-----END CERTIFICATE-----
Generated at Wed Jan 21 18:48:00 2026 by rpki-client