This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File:                     Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier:          ZvCKVfTBtKeotApuOxnw7pbj+Mjun2rwPOFaadr2K8E=
Subject key identifier:   AE:12:49:DC:1E:40:7C:31:05:B5:58:93:B7:EA:09:F3:E4:4F:60:59
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer:       /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial:       019C4322C0682D9475DA9B11A41791B0ECF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number:          03F2
Signing time:             Mon 09 Feb 2026 16:01:16 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:16 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:16 +0000
Files and hashes:         1: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: RjYY93Hy6SoCPWZXcTHbuCWLfOMx52DHXGDlLsSJNsM=)
                          2: bl7MJdXz_EhEovm2UbN_gTDULoY.roa (hash: d4NySi+tNKI3bH93zeiTjj+HNhdoL7gliIMJmvtOe7U=)
                          3: cLXri-wviIsJ5iHidksAtpZN5SY.roa (hash: UtWyYW3E/+2IaDZ2hwPVOR71jr9t19OookjTmPk0g7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:c0:68:2d:94:75:da:9b:11:a4:17:91:b0:ec:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
        Validity
            Not Before: Feb  9 16:01:16 2026 GMT
            Not After : Feb 10 16:01:16 2026 GMT
        Subject: CN=ae1249dc1e407c3105b55893b7ea09f3e44f6059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:c3:af:46:73:d3:1b:bb:1b:a4:d6:62:ca:
                    60:d0:01:bb:6d:e9:06:b8:82:b9:7b:f5:af:eb:e5:
                    ca:f0:a7:ca:bf:5f:62:c8:42:b1:11:86:76:b6:75:
                    e9:bf:59:f3:3e:ed:1e:96:52:56:a2:aa:f9:15:0d:
                    29:e6:d2:cd:b4:e7:d0:c3:f0:6e:fb:3d:ba:eb:3e:
                    1e:69:9e:9c:d4:8c:75:55:e3:18:94:72:86:e1:ec:
                    50:f1:46:e6:73:5b:c3:c9:ba:1f:98:2a:4e:5a:e3:
                    59:3b:5d:54:7a:4f:c9:5f:21:2c:be:6f:63:9c:3b:
                    00:68:4e:05:b3:17:c1:ba:ba:f1:98:06:28:2c:7a:
                    11:5d:a4:f8:4c:03:f1:a7:33:93:dd:c7:8f:27:0e:
                    a0:c5:17:8f:86:5a:a1:7e:66:34:17:6c:3e:4e:08:
                    e7:8e:d9:0e:54:d8:6e:96:85:72:cc:ce:f7:57:6c:
                    b6:ab:6b:5d:7d:cc:4f:44:7e:c1:85:3e:4e:a0:21:
                    cd:3e:41:93:8f:91:41:0b:a7:ee:77:a8:dc:16:43:
                    06:62:9b:be:9f:5d:43:25:4e:4f:98:13:9d:eb:7e:
                    34:af:a5:fa:2b:35:77:61:cf:6a:56:b1:ad:6a:ea:
                    6f:e9:be:84:e3:1d:0d:60:9b:6f:9a:ea:8b:66:4e:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:12:49:DC:1E:40:7C:31:05:B5:58:93:B7:EA:09:F3:E4:4F:60:59
            X509v3 Authority Key Identifier:
                keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:bf:31:8a:e3:3b:05:ff:41:1f:58:cf:bc:14:da:0d:20:65:
         1f:a8:cb:da:bb:6d:38:ac:c2:6a:9f:a2:44:dc:2c:77:ed:b1:
         2f:a1:0b:05:8a:a1:80:d7:da:be:f2:8a:f7:41:e7:2d:5b:76:
         e1:b4:cf:cb:74:a3:2a:7a:6d:ea:53:8c:62:d6:a6:09:1f:ea:
         e2:50:89:02:26:fc:97:d8:34:f8:08:1d:34:c0:08:ed:b7:65:
         c4:b1:4f:f0:b5:89:15:22:77:36:b5:81:0d:08:b5:77:7b:ee:
         10:b4:cd:bb:42:8e:d7:2e:5c:6f:fe:5f:2a:ca:78:5b:99:2e:
         49:3b:21:88:a6:19:c6:a4:79:a0:e0:76:2b:3e:87:67:e9:dc:
         d5:38:73:62:c2:42:85:8e:d8:6d:c1:e0:11:e9:f1:a9:3f:7f:
         77:67:fd:4d:66:11:b9:cd:74:39:bf:84:c4:83:fe:fd:f5:8a:
         33:5a:30:e9:da:d5:8f:20:56:36:cc:99:5a:39:35:ab:84:ca:
         e4:d6:76:02:f7:08:ab:a0:34:ce:2e:98:48:03:eb:c1:46:46:
         83:29:1a:a6:87:d9:ea:cb:57:48:20:e6:58:43:84:1e:ce:86:
         e7:36:38:fb:d5:d1:7d:fc:83:80:1f:86:fc:b5:d8:df:ba:80:
         bb:92:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:21 2026 by rpki-client