This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
File:                     ti_M2im-Zm3u-Oxi1rwebNBnw18.mft (raw, json)
Hash identifier:          WzijXesxUuFF5+7HUsSmP5WtqAqS/FzqiWkHL86XqWE=
Subject key identifier:   12:D3:40:E4:87:AE:91:CB:AB:45:20:A2:62:A1:6E:15:03:0A:04:0E
Authority key identifier: B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F
Certificate issuer:       /CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
Certificate serial:       019C427D1C9EF6A6E37E7C0E5CBDF2225002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
Manifest number:          1232
Signing time:             Mon 09 Feb 2026 13:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:21 +0000
Files and hashes:         1: 0_yxb4oA5Qs-ZEh5rRS_zkXsASQ.roa (hash: 6QAThh9Df6kXu7nNhqJfERiUtZ4umexbpptr0sQdbu8=)
                          2: ti_M2im-Zm3u-Oxi1rwebNBnw18.crl (hash: wI31e217bZBSARxecT9Uyh8ATfR9Qa28cbVKnS8Ldn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:1c:9e:f6:a6:e3:7e:7c:0e:5c:bd:f2:22:50:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
        Validity
            Not Before: Feb  9 13:00:21 2026 GMT
            Not After : Feb 10 13:00:21 2026 GMT
        Subject: CN=12d340e487ae91cbab4520a262a16e15030a040e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:45:d7:c0:be:2f:83:00:e2:6c:be:43:2e:
                    b3:e6:2d:46:37:37:01:b9:ec:b5:0f:dc:3e:e7:85:
                    03:24:7c:de:cd:80:ca:9b:74:eb:b3:2f:7e:68:a3:
                    68:8f:9d:79:57:71:15:67:de:cc:a9:bc:59:75:55:
                    ff:4d:64:6d:0c:c9:59:28:12:23:47:ac:3b:bf:63:
                    d6:14:9f:07:55:81:b9:d9:fd:a5:0b:e1:08:a3:5e:
                    05:58:b4:24:8d:a7:2a:1e:2e:73:d0:da:43:db:92:
                    3d:24:ed:51:be:c1:ee:3f:09:b4:f0:68:63:e3:ae:
                    cb:8e:19:9b:2a:b5:49:79:6c:af:e7:b1:1b:15:22:
                    5b:60:d5:9e:2f:9c:64:98:28:77:89:b1:67:cb:81:
                    47:8c:18:e4:05:b2:82:2a:4d:31:aa:a2:c0:b5:ae:
                    d5:8b:a7:e4:63:a2:46:c8:b1:ff:73:72:2e:fa:53:
                    78:75:00:59:f6:cb:7b:3a:37:3f:ff:72:b1:9a:23:
                    b5:c5:a2:62:38:54:d6:1e:44:a4:fb:1f:5c:db:bf:
                    51:08:3c:84:5f:cd:88:9c:f7:e5:b5:4a:9c:39:95:
                    17:e2:1a:f7:70:19:33:68:01:7c:11:4b:ce:8c:ec:
                    d7:9a:7d:b7:30:f3:a6:8d:60:1d:c8:12:a4:af:5b:
                    cc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D3:40:E4:87:AE:91:CB:AB:45:20:A2:62:A1:6E:15:03:0A:04:0E
            X509v3 Authority Key Identifier:
                keyid:B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:44:af:ce:fe:66:e6:1e:b5:ef:56:01:4f:ad:37:20:ef:aa:
         72:a9:01:0e:be:25:22:fb:01:8c:5c:08:c6:b6:31:2f:97:08:
         d4:25:b5:01:98:c4:0d:6f:de:22:68:30:54:e7:44:70:c7:c5:
         8c:5a:31:f0:03:76:cc:7e:f9:3d:79:57:3e:a3:9e:57:74:11:
         c8:05:a7:f5:da:20:cf:1b:d2:5b:55:d1:15:a5:4b:94:0d:d5:
         a0:0e:9e:4a:d5:76:3a:ba:25:8f:8e:e3:c9:24:d9:42:f4:ba:
         59:d8:67:7d:ed:d8:64:b2:e1:71:ca:88:ac:7e:90:ab:6a:cc:
         2d:64:52:75:b5:ca:28:ea:61:da:33:f8:46:5b:b9:39:19:cb:
         d4:77:4b:7c:69:65:d5:9a:4d:c4:5b:45:ea:d5:f0:e9:83:32:
         17:7d:ef:d9:9d:ac:2f:09:ba:c1:8b:dd:70:d8:ba:bc:42:36:
         01:2c:67:6d:54:fe:47:2d:06:ea:b4:ec:a8:d7:bb:a0:47:67:
         4c:8b:54:48:80:7a:98:40:68:e1:50:08:97:a7:03:c6:ee:fd:
         9b:d7:a2:d7:67:70:88:bf:4a:3c:ac:41:94:80:2b:f6:12:fc:
         46:26:34:09:98:18:69:cb:bf:1f:c9:cf:65:41:3a:1d:a7:32:
         55:18:4c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:22 2026 by rpki-client