This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
File:                     tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json)
Hash identifier:          pFVIJmBA3PrFMXru/LdjkAmcVUcvvRhnGW1hl5Kr9X4=
Subject key identifier:   30:AC:BD:C6:ED:23:81:17:92:8D:F9:CF:1C:67:DD:62:60:74:FC:59
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Certificate issuer:       /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial:       019B9FA0A4336A6F5BDBF55BDBBEA0510F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
Manifest number:          0786
Signing time:             Thu 08 Jan 2026 22:01:03 +0000
Manifest this update:     Thu 08 Jan 2026 22:01:03 +0000
Manifest next update:     Fri 09 Jan 2026 22:01:03 +0000
Files and hashes:         1: 9Bk2DNR2uYMUyRc1vkqhEEQ_U7I.roa (hash: stlOV3eHfF1Tw/j9xaX8GJThoN6iWH1T13ESnbBJcL8=)
                          2: hB5bKIzKCvcbl8ogbaBmur_bdIs.roa (hash: Uyup6v2aW5b2Hld6LVCK6C+h9+vlfo2ENPD8ezX9qzQ=)
                          3: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: IVnYeI3H6zFw7QS09LivG6/r9QidrT5eqz7m2ubxOF4=)
                          4: ybJz7bnKGkBBxiMObl5o-Qmd4SE.roa (hash: JhVcV+03zxVD2R4ZSByn4pLYKVYrGi9gl0bLGuBHrWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9f:a0:a4:33:6a:6f:5b:db:f5:5b:db:be:a0:51:0f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
        Validity
            Not Before: Jan  8 22:01:03 2026 GMT
            Not After : Jan  9 22:01:03 2026 GMT
        Subject: CN=30acbdc6ed238117928df9cf1c67dd626074fc59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4c:b0:1f:c3:ec:2d:a3:45:8e:bf:21:48:ae:
                    57:fe:b5:5a:11:c9:63:29:66:b8:e3:0e:23:f7:6c:
                    ba:19:30:c5:bc:1a:20:5a:c1:41:38:96:8b:61:d5:
                    58:0d:48:06:a3:50:d0:b1:18:c8:cc:8b:42:bf:45:
                    ad:81:9c:54:f0:a7:86:bb:6b:be:9c:2e:82:17:d1:
                    cb:5c:a0:6b:4c:19:e7:94:c0:19:d7:c9:a3:24:17:
                    59:a7:06:8b:7c:9f:2b:28:f4:83:89:c8:44:37:62:
                    e0:61:bd:7c:75:4d:07:39:2d:8b:4e:2a:b5:de:36:
                    de:bb:16:f3:b0:2c:60:41:37:81:c5:91:ab:59:87:
                    f9:d8:e6:c3:35:98:05:2a:87:7a:c7:ea:92:08:e6:
                    87:b1:ac:0b:ca:ef:71:90:5a:74:6c:c2:ab:ed:95:
                    b0:3e:23:5b:e9:d0:b3:e6:91:2b:32:bc:b6:4d:07:
                    1a:0b:ab:22:ac:9d:52:40:c6:29:cd:55:4a:dd:de:
                    65:02:cc:2b:71:47:e4:87:29:af:98:53:14:35:58:
                    5e:fd:86:7a:f0:75:b2:0c:81:41:3b:69:3c:eb:4b:
                    a1:87:51:44:80:47:06:70:2b:d8:f3:1f:5a:5f:fe:
                    7a:8d:d1:c2:c8:3b:5d:97:83:54:6e:66:09:f1:e6:
                    7f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AC:BD:C6:ED:23:81:17:92:8D:F9:CF:1C:67:DD:62:60:74:FC:59
            X509v3 Authority Key Identifier:
                keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:86:2b:63:85:35:18:76:b1:09:63:97:72:8e:7f:e8:05:e6:
         d0:ca:e0:d2:ab:df:98:28:8e:96:d9:0b:02:3a:46:33:59:f5:
         84:2e:64:db:b0:21:7b:93:80:32:00:c9:a5:cd:c3:bf:29:33:
         04:71:63:80:58:01:a9:6c:1b:5d:3f:6b:ac:86:00:db:fa:9b:
         3e:b4:6d:39:24:3b:98:2a:f3:72:20:3f:cc:c3:b4:86:0a:3e:
         7f:58:8d:e6:46:e6:a2:94:41:f9:5c:37:f8:97:4a:7e:e0:18:
         9b:04:76:16:6b:e4:f4:c9:6f:bb:a1:73:3d:bc:d8:26:8e:c6:
         85:18:42:ed:22:6b:7f:4a:49:13:9e:fe:8f:2f:9a:23:f1:25:
         6c:1a:07:f2:d4:41:8e:9d:83:20:54:a4:70:de:7c:db:76:42:
         96:59:da:c2:47:82:ae:93:f5:d7:22:23:5c:b5:e3:24:a7:d6:
         8b:aa:6d:bf:26:0d:24:ef:7f:73:22:58:bb:25:72:76:85:73:
         04:ff:66:d4:74:85:5a:b7:6e:d6:c2:b8:6a:54:7a:4f:ea:26:
         2b:77:c8:d7:6a:1c:70:0a:48:43:6a:d5:b2:22:de:d3:94:6b:
         9b:9d:a8:56:67:4d:6f:00:53:6c:72:33:d3:0f:30:7d:28:fd:
         2e:94:ab:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:55:00 2026 by rpki-client