This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File:                     TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier:          tmFiJgWOQBvoX/djd2qFHnLr18PYc+I6m6ctNLTOX7U=
Subject key identifier:   97:0E:B6:9F:12:C0:3B:22:02:93:D5:9F:F8:70:A9:5E:42:29:C2:04
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer:       /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial:       019C0C6B844D8DC369A331753346B4744B1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number:          0849
Signing time:             Fri 30 Jan 2026 01:01:38 +0000
Manifest this update:     Fri 30 Jan 2026 01:01:38 +0000
Manifest next update:     Sat 31 Jan 2026 01:01:38 +0000
Files and hashes:         1: 75HOIa64fDxinyOIx01Blej1elM.roa (hash: EnalwxHiL7Yvbfzav+WqLHXQw4xqRSm24VA6Qft2ERI=)
                          2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: m4RDNNQymyc2atpnyGFsQf/NWyxGcv9+6RnoT74mpFg=)
                          3: gNIwlQhqrQHrAmcQt_v7U7yPQls.roa (hash: m7SKJRURhbOe8VuRCSBhxT8f7MRPwICOeiYwoIYek9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0c:6b:84:4d:8d:c3:69:a3:31:75:33:46:b4:74:4b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
        Validity
            Not Before: Jan 30 01:01:38 2026 GMT
            Not After : Jan 31 01:01:38 2026 GMT
        Subject: CN=970eb69f12c03b220293d59ff870a95e4229c204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:43:00:d1:ba:d0:2f:4f:6a:f7:79:fc:0b:
                    f5:fa:1e:a9:e0:ba:e3:ca:a2:a2:5d:2e:ca:70:96:
                    b1:81:54:8a:7e:8a:27:ab:79:9d:b1:f4:c3:64:27:
                    84:1e:c5:ce:52:96:f8:cc:30:fb:c9:7b:e2:ac:57:
                    62:23:71:d7:de:b8:15:2e:d5:7e:ef:5a:5b:0c:aa:
                    5e:cd:37:27:0a:56:2e:9f:21:db:d3:12:71:5f:aa:
                    a0:98:44:7e:0c:41:b1:1d:15:c8:d6:c8:84:d6:7f:
                    cf:54:f6:e7:26:01:86:2d:37:a0:82:1f:c0:a6:00:
                    e9:c0:ac:71:ce:7a:c3:e2:82:cb:d4:33:05:cf:18:
                    bc:52:7f:a2:65:1f:74:f3:ea:02:26:d4:7d:a0:57:
                    46:26:da:8e:e5:f2:28:c1:ea:8a:e6:45:79:3f:8e:
                    af:68:2e:3e:75:cc:58:f7:56:a5:07:82:f2:ef:7b:
                    ff:1c:38:fd:4c:b3:88:3e:e8:2c:ff:a6:5a:c0:8a:
                    cf:aa:3c:c9:64:16:de:ca:a3:50:f5:e7:cd:aa:09:
                    64:dc:bb:ad:fc:41:cf:a9:fc:e7:f0:b4:92:de:f6:
                    7c:74:5c:04:02:a0:c9:52:9d:58:b3:5e:ae:0a:a0:
                    d9:58:f1:dd:d4:6b:9f:27:ac:cf:e4:b0:05:17:39:
                    a3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0E:B6:9F:12:C0:3B:22:02:93:D5:9F:F8:70:A9:5E:42:29:C2:04
            X509v3 Authority Key Identifier:
                keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:39:88:64:f1:97:67:9a:d6:5f:1e:24:7b:57:a9:9b:c9:00:
         c1:b8:79:ad:7b:37:7f:ad:2c:1d:71:ea:0f:08:58:81:26:56:
         e6:15:13:e0:06:e0:56:46:e8:fb:d0:97:4c:d9:f7:b2:cb:6a:
         77:d2:2b:5c:6f:60:5f:f4:7f:67:54:0c:0c:63:9c:c5:bc:fc:
         9d:42:e8:88:a0:2a:85:10:77:07:24:1f:b4:d3:a5:03:f4:8d:
         8b:f3:f3:5b:3c:f8:3c:9c:0f:74:c0:fa:36:f2:33:5e:fc:99:
         20:33:0d:86:63:f3:4b:a4:b4:42:f2:3f:cc:8c:ac:cd:24:38:
         d3:ec:b5:33:b4:c2:3e:2c:b0:1b:6d:15:eb:46:44:c5:7e:0f:
         d7:5e:8d:be:68:16:56:17:3f:3a:f9:86:e5:b5:e4:f3:11:95:
         55:fc:d3:02:23:47:da:ac:6d:dd:d1:ac:f6:76:e7:5d:7e:b2:
         1e:7f:35:40:b8:e7:69:af:e4:8a:9b:ff:03:a3:76:28:5d:27:
         a5:f2:75:9e:6f:0e:5a:b7:af:13:48:b3:f1:57:ab:e9:79:3f:
         c8:85:31:21:1d:ec:1e:22:a7:49:db:87:96:dd:0c:78:52:8a:
         88:51:97:5d:95:35:e9:cd:f1:10:66:d1:0d:cb:c5:93:bb:a3:
         20:5a:bf:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 07:12:30 2026 by rpki-client