This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File:                     TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier:          06EAONog3hBTbHIdcJSa16oVdYl2CZF5I2ECEM8Hkgo=
Subject key identifier:   5F:E8:04:FF:10:BE:5B:CF:4B:F2:D3:62:A8:6C:6F:30:D6:BE:D8:F2
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer:       /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial:       019C1C4BC7A504B125B127B112E6D5230CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number:          0E2E
Signing time:             Mon 02 Feb 2026 03:00:54 +0000
Manifest this update:     Mon 02 Feb 2026 03:00:54 +0000
Manifest next update:     Tue 03 Feb 2026 03:00:54 +0000
Files and hashes:         1: MmCHZ1tigLx6qv-0vdY9p2DTybw.asa (hash: q4g5QLnj5C7tBM9YSoS7cbGeaJrSGDWbXD0wfTvKfKk=)
                          2: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: H3DRNp+ZwM1sxUw/Xmu/EhXnzW8SODcp5cuYvoUd2xs=)
                          3: o-GuySAZav0PksHcDzno-EypQJ0.roa (hash: /pzSPA6PGMWrOD+vCeL5sGDbZ/TBSHFZKj+LgOJi0Mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:4b:c7:a5:04:b1:25:b1:27:b1:12:e6:d5:23:0c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
        Validity
            Not Before: Feb  2 03:00:54 2026 GMT
            Not After : Feb  3 03:00:54 2026 GMT
        Subject: CN=5fe804ff10be5bcf4bf2d362a86c6f30d6bed8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:5b:30:29:24:c7:49:78:6e:d6:3e:88:d7:
                    ec:de:b1:7b:98:7c:3c:3d:3d:71:6a:23:c3:ba:4b:
                    ea:1a:4d:56:55:3e:29:8c:6f:45:48:74:6c:a0:98:
                    dc:a1:22:6f:ed:42:5e:b2:b2:ae:09:8b:65:de:cc:
                    03:45:fd:6f:d9:e5:de:59:ab:bc:a0:c1:fe:97:f5:
                    e4:10:b8:05:90:42:58:1e:39:e1:22:95:a6:be:8e:
                    23:67:9e:73:83:77:bb:d1:6a:1d:2e:c7:77:89:c2:
                    02:c3:81:4b:06:5d:1e:3a:f8:d5:db:96:58:52:ec:
                    f0:e4:50:97:73:32:25:e0:5f:5c:83:c4:8a:41:8d:
                    c2:2a:8a:59:36:60:e5:44:71:f7:34:ce:41:71:33:
                    f2:1a:fa:9f:ed:6b:b9:54:16:f2:c8:05:27:c9:82:
                    40:36:3d:ad:65:dd:63:56:6c:83:ef:50:6d:01:89:
                    3a:ef:6e:3d:63:37:31:5a:ea:e7:fa:24:e5:61:6d:
                    92:ab:08:11:c5:a1:07:cc:0f:18:19:d7:71:ef:d1:
                    12:d4:6e:5c:a2:dc:0d:14:92:19:70:b8:35:9b:1e:
                    a7:5c:1d:22:0b:ce:90:cc:4a:ea:d9:e1:fc:04:06:
                    45:54:e2:5c:a0:d7:f9:75:8a:b7:97:27:d8:c0:48:
                    e4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E8:04:FF:10:BE:5B:CF:4B:F2:D3:62:A8:6C:6F:30:D6:BE:D8:F2
            X509v3 Authority Key Identifier:
                keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:06:bb:a5:4f:9d:37:72:b5:fc:0a:6d:fa:29:88:39:6b:c8:
         a3:1f:82:54:86:cb:c1:e3:59:bf:6d:2b:03:a3:58:7c:60:64:
         2b:55:9b:87:99:cb:fc:89:53:11:95:ce:91:cc:d6:ff:25:59:
         7c:9f:c3:41:ea:7d:04:7b:42:6c:5b:fd:dd:54:d9:3b:1a:11:
         7a:2e:d8:fe:c3:ff:04:25:2e:f7:1b:ea:cb:ab:18:52:ba:88:
         2c:fe:57:e2:a7:51:70:e8:a2:93:71:d5:49:ac:f1:8a:8b:b9:
         e5:cd:e7:7d:93:e9:30:c3:a9:8b:5b:5e:ef:c9:6b:92:da:f2:
         7a:86:bc:86:9b:45:cb:cf:eb:07:be:a4:2d:3a:19:3f:7b:50:
         4c:e8:3d:7c:b6:ba:3a:3d:44:5a:f9:86:9a:9b:48:ed:3f:50:
         dd:2d:91:07:26:12:35:cf:6e:ba:2c:50:b9:73:10:da:99:5f:
         31:88:da:ec:9d:65:b1:03:82:ff:32:fe:c6:51:e6:0b:5c:1f:
         5a:95:2c:38:d3:52:3c:ae:36:df:b2:9f:60:fd:24:35:53:76:
         da:ce:69:27:60:34:7a:58:06:a7:d1:4c:7c:73:78:6a:8d:0b:
         91:29:d7:1d:14:fc:e6:04:0d:61:76:84:d0:2d:02:1f:09:ad:
         85:3e:c4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:47:00 2026 by rpki-client