This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
File:                     TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft (raw, json)
Hash identifier:          Mjwn15TOFhzBnxjO+vyiAdoCSjdMt/QqalweBakOlLU=
Subject key identifier:   7A:05:BC:7A:FE:7C:8A:03:4C:07:88:2F:E0:0A:91:CE:9D:4E:F8:67
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Certificate issuer:       /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial:       019C1BDDCAB16C4410A254CB1A54E03C897C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
Manifest number:          46
Signing time:             Mon 02 Feb 2026 01:00:45 +0000
Manifest this update:     Mon 02 Feb 2026 01:00:45 +0000
Manifest next update:     Tue 03 Feb 2026 01:00:45 +0000
Files and hashes:         1: 7zHV66w7Bkb2Ny1dDTCLE7Wl8ao.asa (hash: lHxtADA9XD8WHImnlrIbVNB8iNbIHqkbRGv2EysJnKE=)
                          2: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl (hash: NONIzL8gaHVWyqHB0UfANzjYQT0bUHrD9dhG4H6KBF4=)
                          3: g5lz44oaHgbAB8tPjhDR8m3VlM0.asa (hash: GFreKE8YNMVh0XaKaq38gtGUXblHDe8NuVM3cQov9gc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:dd:ca:b1:6c:44:10:a2:54:cb:1a:54:e0:3c:89:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
        Validity
            Not Before: Feb  2 01:00:45 2026 GMT
            Not After : Feb  3 01:00:45 2026 GMT
        Subject: CN=7a05bc7afe7c8a034c07882fe00a91ce9d4ef867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:82:f2:af:d0:1f:80:0b:36:9b:86:73:f1:53:
                    a6:c9:5d:d8:4c:6b:01:9f:13:27:47:f6:de:a5:db:
                    7d:54:bb:9a:d1:c6:c7:6a:9a:ce:45:2b:bb:41:e5:
                    3b:7b:5a:ec:58:7b:f7:f9:be:d2:e2:12:82:f9:f6:
                    0b:be:b0:bf:57:33:d0:5a:24:f9:09:74:62:a5:86:
                    16:5e:b3:90:1c:6a:30:ef:ee:fa:02:d4:d0:24:4e:
                    cc:11:94:2f:68:38:24:9a:e0:3f:18:55:da:37:ba:
                    60:8f:77:d9:fb:11:c9:dd:12:e8:d2:64:3c:0f:e1:
                    82:c7:bd:3c:8e:0f:f1:0e:6a:5f:74:ed:38:47:0f:
                    fa:52:4a:b6:d6:10:d6:8a:34:a5:4b:4f:df:4e:54:
                    89:25:bd:e1:a6:4a:24:72:bc:7c:c6:6a:60:25:c2:
                    fb:05:9a:01:0a:3c:bf:d5:36:4f:08:a5:22:36:75:
                    e3:7a:da:b5:c3:87:7a:7a:8b:e3:03:41:57:ca:1b:
                    11:29:ff:48:c0:09:0f:14:96:5f:93:46:40:9d:c2:
                    81:5d:7d:7e:5b:b4:fe:d3:10:10:da:aa:f9:87:aa:
                    d4:f9:38:d0:21:b8:d2:b6:a8:eb:35:f5:a4:1a:0a:
                    c3:45:08:ab:f9:7c:a6:f3:ff:70:88:6e:5d:5b:23:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:05:BC:7A:FE:7C:8A:03:4C:07:88:2F:E0:0A:91:CE:9D:4E:F8:67
            X509v3 Authority Key Identifier:
                keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:51:21:41:27:3a:61:83:23:91:34:de:c3:e3:55:df:2b:a1:
         87:0c:68:c1:8c:97:83:04:11:de:69:5d:21:68:f5:e4:c4:3b:
         77:0c:12:67:8d:58:f1:2b:1b:eb:33:86:3f:71:94:0f:19:f8:
         d1:f9:1b:58:1a:78:35:1e:67:0b:7c:75:5e:12:4a:f6:19:ee:
         94:71:c3:7d:d1:80:f6:15:55:fe:2d:ba:2c:a7:bf:ca:d1:2e:
         66:d8:93:a2:10:a3:9d:07:96:7e:80:8e:d7:ae:c6:b7:43:ac:
         42:5c:4c:de:7d:f6:96:92:f0:d9:4c:70:69:f8:c8:af:65:7c:
         6e:7a:98:50:a3:4e:02:c9:54:65:f7:6c:9c:c8:18:64:15:e8:
         68:0c:57:cf:eb:25:3f:00:5f:bc:94:df:6e:92:07:f6:6a:ff:
         a6:9c:7e:d9:d0:6a:a5:f3:31:0e:ba:bd:e7:74:eb:69:7c:c5:
         ea:0a:ec:7b:ce:2f:2b:ef:d0:3c:5d:9f:9d:ff:d5:2b:da:56:
         ad:57:9a:a4:8d:8a:4b:fa:8e:cc:e5:da:c7:a3:ae:df:9c:33:
         bf:21:12:76:85:3c:a2:48:3a:0a:a0:df:95:74:c5:fb:d8:27:
         1c:db:b1:97:ac:78:a8:5c:0f:70:c2:a0:f2:60:52:79:43:29:
         1a:53:46:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:08:18 2026 by rpki-client