This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
File:                     tTRCGKSIC1AMAzMh52vXi088Flg.mft (raw, json)
Hash identifier:          J0QyHwrwDvKypJDNyGmE2tHJ2fg/efKv8eGVR6cWBpE=
Subject key identifier:   58:BE:DB:8A:9F:77:EF:1E:8F:DF:A5:8A:73:BD:26:E2:3D:97:B6:45
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Certificate issuer:       /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial:       019C1C14B2AFB2383556745422EDD2F1CA88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
Manifest number:          1801
Signing time:             Mon 02 Feb 2026 02:00:44 +0000
Manifest this update:     Mon 02 Feb 2026 02:00:44 +0000
Manifest next update:     Tue 03 Feb 2026 02:00:44 +0000
Files and hashes:         1: 5bGobuYTEr_grBRZ_uakRYqcaIY.roa (hash: P0xoEeW+4dWO4aX2IUeMr6lTU6DbnVfKtmhtkPhqqzE=)
                          2: 800xEdkeF_yHW3_qblhYAZjz4B8.roa (hash: GGII+moh/3ZuTty+fO+7sCdxLSWN+TfSAFsTQTTxt1Y=)
                          3: tTRCGKSIC1AMAzMh52vXi088Flg.crl (hash: jLJUx8BSU5swOqJbk/ppi7BJ3E0FW12qKjepWPDo0SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:14:b2:af:b2:38:35:56:74:54:22:ed:d2:f1:ca:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
        Validity
            Not Before: Feb  2 02:00:44 2026 GMT
            Not After : Feb  3 02:00:44 2026 GMT
        Subject: CN=58bedb8a9f77ef1e8fdfa58a73bd26e23d97b645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8f:9d:3e:88:10:f8:33:e8:89:d0:6a:5e:41:
                    72:8c:6a:b5:e3:34:ee:0f:bd:16:c3:9c:49:78:6d:
                    bd:94:11:1b:8b:a6:31:ff:3e:cf:5f:23:27:58:bb:
                    af:bf:d1:ba:67:98:9a:08:ec:28:64:3a:0e:22:70:
                    19:06:f9:1b:a6:0b:3c:f6:f2:f5:62:3d:f4:bd:03:
                    3b:10:2b:99:2a:91:6c:50:63:b9:c7:c2:0e:04:a9:
                    42:47:93:43:25:ec:2a:48:3b:6c:8a:89:ee:7e:f2:
                    f2:01:c7:1e:97:2b:53:ea:22:2b:b3:7b:44:c4:1a:
                    67:48:4f:01:a8:a2:ec:79:c8:93:96:7b:c2:93:55:
                    36:83:8d:a8:64:fe:26:e3:72:05:e2:2b:50:29:85:
                    4d:04:52:35:55:ed:ec:2b:9a:b6:13:1d:2c:a8:0a:
                    31:24:e4:c6:99:20:db:17:49:9b:db:51:74:67:73:
                    bb:57:61:91:81:e4:b2:9b:4e:2e:fc:f7:4f:cf:21:
                    9e:91:86:18:3a:e0:b7:53:a1:dc:d7:43:d7:8d:2b:
                    11:ef:62:d5:e7:9c:44:63:9a:3d:a3:fb:6f:3b:e8:
                    8c:ff:ea:bb:ce:1d:29:08:4b:34:f5:b9:07:b1:78:
                    3d:d6:30:03:cc:bb:b3:b9:b2:0c:6c:3c:93:7d:54:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BE:DB:8A:9F:77:EF:1E:8F:DF:A5:8A:73:BD:26:E2:3D:97:B6:45
            X509v3 Authority Key Identifier:
                keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:67:b4:5d:23:97:1a:4c:4e:ef:51:5d:fb:0b:75:e0:aa:a1:
         da:92:61:ed:4b:b6:79:4d:99:41:f5:6e:e2:19:d6:76:de:9b:
         a1:50:23:c9:00:fb:4b:b2:3b:63:81:63:91:5e:6d:32:7c:8f:
         9d:e8:67:0a:6e:4c:a2:9f:1f:c8:c1:ec:48:5d:78:e8:f3:1a:
         73:34:ac:ef:2a:8b:93:f0:a7:7a:f3:ef:60:6c:06:14:73:82:
         78:47:1b:12:68:5f:d8:2f:b2:f1:38:4f:f4:0d:f2:58:65:6c:
         67:cc:96:b9:0f:d1:98:8d:1f:91:08:8a:97:b7:ad:e9:8b:11:
         d8:a1:79:f5:90:e3:24:e7:ba:b8:41:b5:00:a2:ef:19:d9:b6:
         a9:a8:77:8d:5d:51:77:b3:87:7f:1d:08:51:99:52:11:a0:b3:
         97:3c:0f:ec:27:0d:e5:19:c5:01:a9:79:c6:86:a4:1a:d8:74:
         4f:23:b3:da:ff:32:a2:c3:f8:34:02:13:26:b2:50:a3:8c:0d:
         f0:48:18:ec:7a:3d:4a:35:57:06:86:1d:40:95:fe:a8:aa:b8:
         90:8f:b8:a0:a3:ed:56:88:d8:f3:86:b9:0f:0e:04:cf:5c:a9:
         15:5d:a9:7d:5a:72:3d:11:64:ac:9a:f5:0f:9f:7a:26:43:1b:
         aa:27:fa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:49:39 2026 by rpki-client