This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File:                     TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier:          kOUmjxfEa6I4xoxhvYlgyJNX4J+8LdL7IuIFTCrntAY=
Subject key identifier:   05:7D:5E:C0:AD:FC:61:39:03:E1:2A:8A:51:88:D0:C5:8F:E3:F3:F3
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer:       /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial:       019C2B19CC13E0399112A2C09A15F6DB9B65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number:          180C
Signing time:             Thu 05 Feb 2026 00:00:36 +0000
Manifest this update:     Thu 05 Feb 2026 00:00:36 +0000
Manifest next update:     Fri 06 Feb 2026 00:00:36 +0000
Files and hashes:         1: BMJTX-1VIsJCIAKC_UCdqIb839w.roa (hash: AwaFPfahDvnxUQFxf1zHHxQY3shWXenV5hfHWr+eRSE=)
                          2: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (hash: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds=)
                          3: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (hash: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw=)
                          4: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: VbozCf6ALiBsTyQekDGH26Q3Z6aTckTDLJ9Vfke8NVg=)
                          5: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (hash: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2b:19:cc:13:e0:39:91:12:a2:c0:9a:15:f6:db:9b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
        Validity
            Not Before: Feb  5 00:00:36 2026 GMT
            Not After : Feb  6 00:00:36 2026 GMT
        Subject: CN=057d5ec0adfc613903e12a8a5188d0c58fe3f3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:95:ad:af:79:a0:aa:e3:65:f2:ef:48:64:
                    f4:8d:37:1c:50:10:de:a1:c6:36:9f:b1:79:a0:7d:
                    c1:35:ab:bf:d6:b0:80:01:02:24:b9:e0:72:b0:09:
                    6b:74:39:cf:cf:46:6b:ea:23:72:8a:93:88:48:f3:
                    15:86:67:d1:ac:2b:bf:11:f8:1d:5d:67:bf:12:c6:
                    4d:be:c7:c1:75:96:ab:46:6d:cb:c3:d3:c7:51:fd:
                    c4:ce:8e:fb:6e:df:9d:77:43:de:f6:b7:04:cc:5a:
                    15:3e:6a:b7:d0:29:db:a3:62:73:37:68:32:52:87:
                    fd:b8:c0:91:2f:48:6e:88:62:8e:53:2e:83:e9:03:
                    74:58:41:08:a1:68:e9:c6:58:9d:41:8c:53:c5:b7:
                    11:e0:c2:d8:aa:17:87:19:09:19:fd:ea:10:a4:52:
                    d1:08:be:db:94:2c:24:8b:2d:c5:a6:6a:47:6d:e2:
                    81:81:73:f5:0c:f3:69:16:03:a0:3c:7e:56:b5:28:
                    1c:c1:e7:47:58:69:28:e2:d9:7f:50:87:bd:86:24:
                    6d:ba:21:17:c6:36:eb:b0:7a:8c:87:7a:6f:2a:5f:
                    e2:ac:55:df:a1:de:1b:9d:91:54:63:3f:23:5a:59:
                    3e:a9:d6:a1:95:47:ba:c6:c6:84:ae:c6:2d:a6:3b:
                    f3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7D:5E:C0:AD:FC:61:39:03:E1:2A:8A:51:88:D0:C5:8F:E3:F3:F3
            X509v3 Authority Key Identifier:
                keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:16:dd:11:35:8f:f1:0e:ed:b6:df:30:d1:43:62:4b:f8:ed:
         cc:10:a4:98:22:5b:15:fc:bb:31:88:36:27:c4:d5:8f:38:8b:
         22:3a:b9:d5:5f:93:97:e6:53:72:3b:c5:2f:28:7e:fa:09:88:
         32:fe:6c:04:44:4e:1f:9c:ac:ad:ae:75:fc:27:81:e3:a6:d9:
         c0:6a:3f:f8:89:ec:ce:a1:8d:8f:0f:db:52:ed:da:9c:ff:56:
         46:be:b5:37:1d:31:6a:b5:89:11:84:6b:63:71:86:5d:a9:9f:
         ff:d0:7b:50:67:7e:1b:09:8f:dc:5f:85:fe:85:08:97:7c:0f:
         b5:d5:b8:c4:a9:50:c4:b6:fa:f4:b5:59:ad:ec:5c:25:6a:a5:
         e2:97:6e:85:1c:86:76:35:e3:53:08:01:9e:c8:d3:35:50:5f:
         93:82:b1:e0:da:7a:89:99:85:6e:0d:b7:50:5a:30:74:6e:62:
         34:61:31:b0:93:40:25:50:4f:94:58:02:d9:aa:a5:67:82:db:
         03:14:79:69:0b:81:7a:c0:29:80:0e:f2:2e:57:04:29:a2:f0:
         67:23:4c:04:14:5c:5e:5e:2e:52:2e:3f:de:6d:5a:a2:77:1a:
         fb:b9:1a:c6:22:4d:87:f8:ed:c3:31:ea:7b:03:d4:3a:09:5a:
         cf:b7:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 04:05:10 2026 by rpki-client