This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File:                     TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier:          l8qShpDJm1pmeZqPdiJXQT0VgZTcuRETYXu55XQgc4g=
Subject key identifier:   07:55:F2:BA:28:18:8F:DA:D7:4F:96:1A:6D:E6:3F:24:40:7C:3B:AA
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer:       /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial:       019BFBE56A4F0A11D6A18C895E4D59C0B8FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number:          17EB
Signing time:             Mon 26 Jan 2026 20:01:14 +0000
Manifest this update:     Mon 26 Jan 2026 20:01:14 +0000
Manifest next update:     Tue 27 Jan 2026 20:01:14 +0000
Files and hashes:         1: HKK9g6Hqt_cBY1AbSvefDUFZRlo.roa (hash: MqB9AcT2/OThR4+/4lhCs0wiEEPqRX8xFMsmjXA2ijw=)
                          2: OBx05QEiDP1Vr5e_268J9tar1QE.roa (hash: TIpDQvAlekr1QcZvuTryLbf0wSjkmsau0xJ8uS3rJTc=)
                          3: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: JQbKbdLtGzrU3s9GlGV6KDywK/vYMBiZjQecn/iu5PU=)
                          4: bq_R2KuxT4atP4GNyi-WGk7ZHgI.roa (hash: ukHJbM0cPkDakME1wOGsLKMQaAIR4oQCPsvSvUhBbpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:e5:6a:4f:0a:11:d6:a1:8c:89:5e:4d:59:c0:b8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
        Validity
            Not Before: Jan 26 20:01:14 2026 GMT
            Not After : Jan 27 20:01:14 2026 GMT
        Subject: CN=0755f2ba28188fdad74f961a6de63f24407c3baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f8:b7:4c:14:51:11:39:3f:ca:56:7f:fd:a1:
                    6c:4e:88:25:96:c0:4c:1f:0b:7b:ef:31:d9:53:69:
                    46:c0:ca:0f:e5:cb:af:95:fd:5a:d2:74:ad:1a:1d:
                    fa:a7:5d:68:d6:cb:b7:33:93:da:c5:7c:98:de:17:
                    4c:59:c1:c7:88:db:fb:89:08:97:6b:97:e1:0b:e4:
                    ac:22:cc:d1:4f:16:62:4a:a3:e0:9a:31:cb:ad:2b:
                    8f:7f:20:f7:56:d2:93:d1:6a:45:94:fd:2b:36:19:
                    3e:0e:ad:98:66:37:53:47:ff:6e:d4:b7:22:a7:89:
                    5a:96:0d:54:62:7b:cb:24:54:6a:aa:01:8b:a4:55:
                    08:14:0d:5f:15:b1:6a:20:e9:de:e7:70:f8:62:84:
                    1c:7e:fa:53:20:38:c8:f9:28:66:a4:3b:23:c2:ae:
                    0f:83:ca:f9:dc:3b:ca:fa:43:63:4a:7d:16:a3:17:
                    a7:24:ea:53:00:b9:16:f6:81:5b:9d:db:a3:a7:9a:
                    df:58:35:d1:1b:d1:79:12:72:59:8f:7d:7d:39:37:
                    5c:49:75:b3:85:e3:c2:df:ce:c0:22:35:c0:f8:14:
                    d4:24:40:0f:99:5a:6b:4b:96:44:05:d9:bc:0f:3c:
                    69:d3:29:96:18:b7:1a:81:06:84:3f:b5:30:c6:a0:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:55:F2:BA:28:18:8F:DA:D7:4F:96:1A:6D:E6:3F:24:40:7C:3B:AA
            X509v3 Authority Key Identifier:
                keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c0:bd:f5:88:f0:fb:e7:62:3a:be:8c:bc:97:39:06:bb:12:
         73:a5:c6:f0:b5:16:c0:bd:7b:28:25:cb:0b:4e:ea:8e:64:08:
         4e:23:89:4f:4c:7d:eb:56:11:aa:e6:4e:ac:cf:ff:71:76:c3:
         cd:b4:15:9d:b4:cd:ea:75:0a:32:bd:14:9f:20:76:fb:aa:41:
         44:a5:85:74:2b:fd:be:b8:c3:23:65:99:a7:b5:d2:39:31:9b:
         d4:0b:b9:21:51:a9:66:8c:ef:08:c9:25:b9:d7:aa:7c:5e:03:
         33:f7:70:10:3d:23:b1:4a:12:34:e4:dd:63:4c:61:b0:3f:7f:
         26:94:8f:58:75:6f:14:3a:6a:d2:78:0a:e5:69:20:79:95:2b:
         90:8f:ca:a7:f2:48:fc:c7:0a:e8:d3:2b:12:69:46:fa:e2:68:
         62:55:4b:d8:ad:76:04:3b:b1:24:5a:4b:71:d0:53:e6:f6:b2:
         0f:83:ac:fa:ee:9d:80:d8:3a:ce:19:35:31:a3:db:13:fd:2d:
         47:4b:d6:ba:44:e7:4d:a4:19:00:ac:8e:cf:46:42:95:4f:88:
         e8:50:59:48:9e:c4:ea:cb:19:4f:1d:d5:48:68:d8:b7:68:eb:
         b7:46:61:4a:6e:49:0d:3e:75:86:0a:b4:f2:ec:59:e1:6a:a1:
         7b:e1:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:55:54 2026 by rpki-client