This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
File:                     ThPQwKcD4JzaZMErCN2it0mgQpw.mft (raw, json)
Hash identifier:          a2eFm26CMUiqRpuOOwpzwSa5UB3xjB8I3t6eYwSU/1s=
Subject key identifier:   22:D4:77:4C:D8:F7:0C:DE:8D:7E:0E:02:9F:48:A6:44:C4:E1:32:AB
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Certificate issuer:       /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial:       019C1D3228B7B4F1561A45EC68212F69B6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
Manifest number:          2C0E
Signing time:             Mon 02 Feb 2026 07:12:30 +0000
Manifest this update:     Mon 02 Feb 2026 07:12:30 +0000
Manifest next update:     Tue 03 Feb 2026 07:12:30 +0000
Files and hashes:         1: ThPQwKcD4JzaZMErCN2it0mgQpw.crl (hash: loNl5/38lVwVtwT3dznE3LIIGOMOd52mr62CIlsfBDM=)
                          2: cICVe4KZ675m8Dg1RqECpOJ8Dp0.asa (hash: ezQu+wOZ+7v7t2FdNh7IJPPoUwXLmpeXhU+n9wR9WKU=)
                          3: w15_5Pw6YNCa9BuZawakXYCf3M8.roa (hash: KKbNWbjHOrntBAMd1tqvEzHYIX6t8YcsC3l308ukvLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:32:28:b7:b4:f1:56:1a:45:ec:68:21:2f:69:b6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
        Validity
            Not Before: Feb  2 07:12:30 2026 GMT
            Not After : Feb  3 07:12:30 2026 GMT
        Subject: CN=22d4774cd8f70cde8d7e0e029f48a644c4e132ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fa:93:56:22:b9:ae:90:d6:25:2e:8c:1c:ab:
                    20:f0:84:f7:2e:09:b9:84:6c:fb:28:f3:67:9e:37:
                    59:7e:6f:ac:fe:b7:60:1a:71:08:53:d6:0d:97:23:
                    8c:ed:ff:69:ff:b2:c2:7e:9b:b1:c5:52:ec:86:72:
                    a7:c1:27:c7:29:c4:03:4a:78:aa:3a:1b:6d:38:bc:
                    6a:1f:03:68:f6:e0:01:aa:50:56:14:2b:27:ef:2a:
                    e4:12:65:2a:45:58:99:03:ab:80:79:74:f2:c4:1f:
                    dd:cb:9f:42:20:7a:70:ee:52:1a:d8:6e:85:dc:ed:
                    72:21:5b:93:66:0b:a5:71:7b:09:bc:7c:e0:5b:3d:
                    bd:69:22:fa:44:a4:91:8e:8c:4d:38:6c:7f:93:73:
                    f7:a7:12:76:da:05:4e:1d:dc:68:06:62:8a:f9:c5:
                    08:31:02:67:d7:ef:62:32:27:60:58:f0:5b:5f:d9:
                    97:1f:ec:3b:32:e7:85:80:f6:6f:f2:95:c0:a3:98:
                    ba:56:7c:4d:7d:5f:1b:42:e4:da:10:48:e7:c3:07:
                    69:66:f2:5d:89:58:9d:56:5e:4e:94:21:3d:bb:3f:
                    6f:f2:e7:57:25:53:1c:2e:ff:75:45:e5:69:f2:a1:
                    38:34:ea:38:47:de:97:b3:49:37:8d:dc:ca:a4:ba:
                    84:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D4:77:4C:D8:F7:0C:DE:8D:7E:0E:02:9F:48:A6:44:C4:E1:32:AB
            X509v3 Authority Key Identifier:
                keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:93:21:9a:43:45:b0:9e:3e:4c:20:24:be:f4:ee:9c:7b:
         02:65:97:95:b6:bd:31:fa:a7:95:54:99:d0:5d:9f:26:17:75:
         c3:41:af:82:34:4a:fa:c7:bb:64:bc:e5:e1:f1:ad:76:fe:73:
         11:bf:9a:d9:0d:71:28:e6:a5:b2:3e:36:ab:8f:19:8c:8a:d6:
         05:75:34:fa:d0:45:47:0c:e2:df:9f:ef:f9:08:9d:c5:a2:e7:
         7d:10:0e:e5:86:9e:c0:2e:d3:52:db:1c:11:f6:38:97:80:8a:
         21:80:82:00:3c:b0:97:0a:60:d2:d2:7b:c6:9c:f2:53:a9:27:
         7d:be:87:67:72:f0:84:70:b1:9b:c9:0c:82:0d:7b:37:52:ce:
         56:e5:74:b6:a2:6b:ae:d6:1f:11:e8:fe:6d:e2:21:3a:37:b8:
         2a:60:cf:ad:48:4f:c8:77:05:bd:12:8e:48:25:61:3b:91:1d:
         8e:54:df:2f:c7:f8:a2:2f:08:c9:bb:71:45:d7:5f:c9:93:9d:
         d0:86:d7:96:81:4a:98:69:5e:a3:9d:30:6f:8e:92:50:b5:02:
         c3:10:72:fc:2e:84:64:96:9c:e7:af:75:7e:c2:16:3e:24:bb:
         d2:b3:05:26:9a:b5:d1:fc:9d:16:32:23:f6:01:83:ae:15:68:
         6a:98:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:37 2026 by rpki-client