This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File:                     t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier:          sqSUGRZAu++VI1uwb6CvSAwDlfW0gE/xfUoV685LjKQ=
Subject key identifier:   55:F4:FD:EB:82:75:50:7C:18:C9:81:E0:B9:A8:62:2F:00:12:EB:07
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer:       /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial:       019C1B38EFDC17006E562CC260EAC48969C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number:          124D
Signing time:             Sun 01 Feb 2026 22:00:42 +0000
Manifest this update:     Sun 01 Feb 2026 22:00:42 +0000
Manifest next update:     Mon 02 Feb 2026 22:00:42 +0000
Files and hashes:         1: 6Ftx8Zws0EArRVC2i8S0_U_teiE.roa (hash: 7fbXsad6LDVhAfWE8WJEJDQ3QGP+dEI28LUew1x9B8A=)
                          2: 9KyR_UDLctrtTTdIj8zaeFvcX6U.asa (hash: U5PQzu4dr+B2uxtoMJzepcrIcGyWSPWFAKzaqqVTf0o=)
                          3: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: EKrLxIo+f8+hbXv3oDW6qLQasKyG6JIHtjVpn9QPyhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:38:ef:dc:17:00:6e:56:2c:c2:60:ea:c4:89:69:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
        Validity
            Not Before: Feb  1 22:00:42 2026 GMT
            Not After : Feb  2 22:00:42 2026 GMT
        Subject: CN=55f4fdeb8275507c18c981e0b9a8622f0012eb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:38:6d:88:35:a3:82:ae:10:d6:da:3c:b2:37:
                    8f:8a:5e:97:37:ca:d1:af:70:c4:c3:29:63:b5:2d:
                    24:ae:3e:43:fc:4f:0d:1a:e6:97:ea:0e:df:f2:9d:
                    8a:8f:c6:6e:af:d0:a8:3f:43:0f:ff:e5:40:73:a1:
                    bd:f2:8a:ab:85:dc:e4:02:f1:39:c5:a9:21:dc:fd:
                    26:20:9a:8e:f0:f4:65:4d:a3:93:8f:01:2a:b0:48:
                    fe:1a:7b:84:60:35:be:4a:9f:f7:51:1b:c6:8b:be:
                    4d:97:2d:82:1b:5b:a5:cf:2a:94:29:32:9f:63:f0:
                    c5:47:7e:2b:50:5f:43:17:20:75:63:8d:72:2d:39:
                    94:cc:fd:ec:34:a7:0f:cd:3b:1e:19:a3:ed:a5:1c:
                    5c:43:0f:4c:f6:e2:ed:c3:0a:50:00:86:29:45:fd:
                    c7:e0:b6:88:60:7d:17:0a:24:b3:29:de:55:54:7c:
                    1b:b6:6a:26:19:bc:ac:b8:22:27:f6:c7:06:19:5e:
                    ec:0e:37:ca:d1:ce:b9:2f:1d:55:4e:f3:c0:18:fc:
                    66:68:d1:69:64:44:d0:d0:2d:2e:12:b8:ff:6d:9a:
                    9b:4e:81:7d:fa:36:c6:f8:0a:87:5b:71:7c:f6:02:
                    53:86:4a:07:e8:77:28:a6:af:f3:30:46:85:27:e5:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F4:FD:EB:82:75:50:7C:18:C9:81:E0:B9:A8:62:2F:00:12:EB:07
            X509v3 Authority Key Identifier:
                keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:24:3d:3f:3c:ac:8f:0e:d4:3b:e3:bf:54:2b:15:2f:3c:31:
         e8:60:da:0b:a3:55:76:3d:1f:4e:51:18:70:2e:ac:db:7f:37:
         4e:ce:e9:ab:33:95:3f:00:b9:af:c3:00:c0:32:25:6b:ee:7d:
         71:7e:b3:ad:d0:d9:ab:34:15:32:37:19:32:fd:8c:a7:54:8e:
         5b:5e:7d:ca:bb:1d:1b:df:b9:1e:43:2c:81:3a:cb:3c:48:60:
         e4:1c:03:91:f5:7f:dc:e6:53:a6:1d:1e:17:43:64:34:e9:1e:
         4a:af:ff:4f:b1:6d:52:dc:d5:14:3f:15:d4:25:8e:07:e6:d5:
         72:2f:d4:c7:46:1b:b2:f7:c1:1a:9d:b5:d9:98:72:ee:ea:44:
         e8:d6:6d:e5:2b:64:c4:75:7e:d0:2c:7f:55:79:1c:b2:54:ee:
         5e:49:8e:2a:56:df:06:cd:e3:e9:91:2e:56:6b:19:45:76:94:
         e8:95:d2:5e:df:77:1b:93:21:2f:e3:1c:9e:88:ae:16:45:5e:
         51:60:41:83:97:0d:e6:b3:d5:d6:22:41:70:2e:e2:cf:4d:24:
         95:dd:bc:4d:e1:9e:c7:b1:9a:84:c5:88:f2:24:f9:7e:5a:76:
         8d:21:2c:27:e1:10:30:6a:d4:4c:9a:1d:ab:e2:19:e1:2c:bb:
         d3:10:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:15 2026 by rpki-client