This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
File:                     tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json)
Hash identifier:          A0RAtt7S2R/n2UO17eJHm3Y98uPGn4Yx7DeeNL/JoS8=
Subject key identifier:   23:79:9F:EE:35:F9:71:35:A4:D7:A6:4F:24:74:09:51:3F:4F:DF:C2
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Certificate issuer:       /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial:       019BFC8AA6AADBC83E49E5460788CBAC3CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
Manifest number:          17FD
Signing time:             Mon 26 Jan 2026 23:01:43 +0000
Manifest this update:     Mon 26 Jan 2026 23:01:43 +0000
Manifest next update:     Tue 27 Jan 2026 23:01:43 +0000
Files and hashes:         1: 2ZaoqGM6aCKm2bNlZEaeL94Fv10.roa (hash: S0GcAEqKxfe6Q+R2X0UdUocPpyMaBe0EXrwdyrx4AUA=)
                          2: CANUIzLfJR4qYVodzcMnNDXdUDE.roa (hash: w932Ollir53g5y+ieb37C38JTybDNf6UCpclagO7ofc=)
                          3: j5nMyhDkND_N1Ut4UNIil32kLZ0.roa (hash: UBj4OSufFBsr7TYpnQq+Obve4nAQx39q2B1z153K9mU=)
                          4: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: VOET+Dn4E3oBBT/sHGy8OS0Z+HDgka4YEDAfq58bMbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:8a:a6:aa:db:c8:3e:49:e5:46:07:88:cb:ac:3c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
        Validity
            Not Before: Jan 26 23:01:43 2026 GMT
            Not After : Jan 27 23:01:43 2026 GMT
        Subject: CN=23799fee35f97135a4d7a64f247409513f4fdfc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:46:26:aa:c9:da:91:83:4b:56:14:25:f9:a7:
                    51:fa:8b:21:b5:a7:29:75:cd:ac:5d:01:34:e2:56:
                    e8:ce:6a:e9:28:c6:58:fe:98:85:b7:0f:19:0d:e6:
                    95:77:9a:ec:05:6d:51:ef:a8:e1:2b:ad:ae:a7:c8:
                    fa:3f:fd:a1:75:b2:38:a1:02:63:25:6a:04:37:8f:
                    e7:5d:63:5f:70:92:37:12:7d:6c:f8:7f:02:3d:97:
                    87:20:62:5b:19:3f:78:f9:64:49:92:f3:5d:f9:e6:
                    02:dc:ad:0e:ef:59:6a:35:f1:0e:85:42:11:ad:3f:
                    f1:18:9f:7a:8c:49:0f:af:3a:a1:96:47:3a:a5:eb:
                    d3:38:19:6b:d1:17:6b:fe:e7:f7:30:0c:b6:24:9c:
                    cf:a4:47:3c:f9:ea:12:c3:21:2e:0b:4e:af:56:8a:
                    1f:7a:ec:87:60:11:8e:61:c8:8f:a6:ee:11:d5:14:
                    04:29:33:45:9a:06:07:ce:b5:55:f7:5d:34:06:a1:
                    cf:23:4e:e6:a7:1b:4c:eb:aa:1a:59:4d:67:43:f9:
                    bb:44:fa:ef:8e:ed:8a:b5:1b:63:b3:7d:48:b1:81:
                    d6:22:13:74:21:ff:86:b7:6c:e1:bc:b6:b5:be:3a:
                    99:a6:38:80:c1:30:58:4d:47:ec:35:72:d2:ab:46:
                    db:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:79:9F:EE:35:F9:71:35:A4:D7:A6:4F:24:74:09:51:3F:4F:DF:C2
            X509v3 Authority Key Identifier:
                keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c5:2d:6d:31:05:ec:fb:52:5b:62:3c:33:59:db:11:2f:f3:
         b9:c5:37:f1:6c:e2:85:b1:e6:57:a2:6b:29:d6:c0:d3:05:f9:
         f6:9c:17:40:a8:14:16:72:c5:72:4c:3b:5c:d9:78:c4:6d:96:
         fa:f2:24:9e:51:d6:8f:96:28:c3:91:72:d2:5d:25:65:08:6b:
         69:00:d9:f4:ea:3e:24:d8:56:a2:96:11:1f:21:87:10:ec:08:
         47:1e:e7:e8:b1:bf:2f:6d:9a:12:68:ae:90:a0:5c:b5:82:aa:
         4a:e1:e4:8b:79:af:ce:11:a2:a3:d0:4b:d6:cf:d0:32:08:c2:
         76:95:75:9c:c1:4a:f2:ff:be:62:aa:29:2d:e4:5b:15:37:b9:
         73:64:fd:73:5c:c6:05:2b:b3:6c:40:9b:74:d8:ee:37:04:15:
         9c:10:f7:97:a1:f2:52:b7:46:6a:d8:f8:63:e2:01:b7:3e:c7:
         8b:ae:a9:5f:2e:21:a9:fa:34:c1:2c:cb:93:b5:b4:76:10:f9:
         de:fd:92:0b:00:69:c8:39:45:29:cb:df:38:d9:76:a1:28:84:
         1e:66:7a:65:db:b5:73:4c:cf:a9:63:ef:97:34:f8:58:b0:6c:
         fc:0a:45:29:8e:01:a8:98:23:ce:6e:30:09:fb:fd:cf:48:61:
         7a:90:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:55:57 2026 by rpki-client