This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File:                     T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier:          OlQUKOkmdmfX3rHFr5AFMlilRK3IRCEqfMaUoxiaUxI=
Subject key identifier:   73:69:95:5F:EC:78:1F:4A:91:9F:87:02:A8:64:87:44:B2:20:C6:5E
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer:       /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial:       019C1D27CE301A5D2F587060CE5B4E193A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number:          1354
Signing time:             Mon 02 Feb 2026 07:01:13 +0000
Manifest this update:     Mon 02 Feb 2026 07:01:13 +0000
Manifest next update:     Tue 03 Feb 2026 07:01:13 +0000
Files and hashes:         1: 6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa (hash: o/A6dnRcU90/Ns+dOzz+UmVUTf5+OMsC+rgsisi5p8Q=)
                          2: NIU7fZeJ73Kx7vUBqR7rizpf67w.roa (hash: 2ugysi5XrPkBHFUed+88NeImX7rSdwmGmQYl2PxW7sE=)
                          3: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: oAlLpCWeP0b4C/7wBW6PMfpBvwHJyAU+bgadD137FR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:27:ce:30:1a:5d:2f:58:70:60:ce:5b:4e:19:3a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
        Validity
            Not Before: Feb  2 07:01:13 2026 GMT
            Not After : Feb  3 07:01:13 2026 GMT
        Subject: CN=7369955fec781f4a919f8702a8648744b220c65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:98:64:9b:3d:47:42:30:e5:39:3b:38:6d:37:
                    2d:af:50:3a:e1:7d:47:2f:dc:33:ac:bd:ad:b1:18:
                    60:ef:b6:06:fc:74:2a:58:91:92:05:37:78:08:fd:
                    3d:62:03:29:d6:4b:c8:11:07:49:64:e0:2a:b5:47:
                    dc:5f:70:8b:8a:4f:60:c7:41:d7:85:d9:49:f0:b0:
                    16:7e:df:7d:28:9c:f8:ca:a4:83:00:da:dc:ce:bc:
                    df:59:52:b5:03:f1:7c:a9:ac:23:d5:e9:c5:85:5a:
                    f2:eb:83:ae:50:7f:22:ce:18:54:8c:6c:64:b2:16:
                    c2:de:dc:0d:a0:70:2a:78:bb:fa:cf:2d:ba:94:9b:
                    e7:91:a2:dc:5a:0a:fb:e3:30:dc:bf:30:a1:bc:19:
                    4b:27:ba:ad:c8:ba:72:1e:a7:b6:ed:d3:da:a5:28:
                    f9:a8:a3:b7:97:01:49:d9:a5:e8:2a:44:e1:83:c2:
                    c8:ed:e7:ed:1a:7f:38:c6:6d:40:ba:b7:ee:cf:16:
                    e9:82:2f:3a:af:87:da:89:7f:d8:bb:72:2d:f8:ef:
                    bd:8a:46:88:9d:79:b2:47:a6:83:17:f9:aa:b3:7b:
                    e3:2f:76:0f:c8:26:78:3c:40:03:d6:58:72:9b:ce:
                    02:e2:a6:15:74:3f:15:0d:2b:49:8c:28:45:19:65:
                    60:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:69:95:5F:EC:78:1F:4A:91:9F:87:02:A8:64:87:44:B2:20:C6:5E
            X509v3 Authority Key Identifier:
                keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:bd:fb:9a:c0:e9:df:72:88:73:bf:04:55:24:7f:5f:7a:cc:
         a5:d4:99:b4:d1:ea:e8:96:7b:84:32:2e:33:5e:aa:37:e9:9a:
         c4:cd:8f:b3:f4:ec:27:0e:e5:14:1b:15:1a:b5:35:50:b4:6c:
         68:a6:07:ea:00:71:37:07:d2:1f:0c:e8:d9:12:04:45:29:58:
         30:89:53:95:f6:17:5a:71:57:4c:a6:ea:19:ae:6c:6b:ba:bf:
         b2:88:0b:d9:71:78:8b:40:c6:00:3c:1f:46:67:0b:19:3b:81:
         b4:2a:d3:4f:77:4b:c7:6e:6f:a1:c8:ad:25:93:76:a9:04:10:
         d6:07:9d:ec:d3:09:d0:5e:88:f5:d2:93:23:83:55:54:10:19:
         3d:ee:50:d8:e1:ae:3f:6c:ee:2f:5a:3b:bb:86:85:91:2a:5f:
         a6:00:55:aa:a1:ee:47:2d:ed:09:7d:15:41:96:45:14:85:61:
         dc:8e:94:0d:f3:e7:ef:a3:cd:26:29:fc:97:9b:97:45:8c:f9:
         97:01:19:f7:85:14:8c:61:3c:19:84:8f:12:ec:ec:81:07:0f:
         ee:c1:c4:6a:3b:eb:b2:53:a5:4a:16:97:02:e7:5e:d1:df:d2:
         72:a7:29:dc:60:4b:95:fa:70:09:95:e4:d0:23:1f:05:fd:8c:
         87:fe:e5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:48:04 2026 by rpki-client