This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
File:                     TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft (raw, json)
Hash identifier:          5MCd/fo5LOcVfA89Rr2nUN+1n4c+jn75QVwg9F1SbRc=
Subject key identifier:   06:C4:98:23:CC:52:07:23:8E:DE:35:39:F7:54:CA:22:76:32:80:1A
Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
Certificate issuer:       /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Certificate serial:       019C446B6C7176FACD53CBFA3AE9C2E214EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
Manifest number:          120B
Signing time:             Mon 09 Feb 2026 22:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:16 +0000
Files and hashes:         1: DiJhG9UAf5Aq6LyghoK-sgPUw_8.roa (hash: 0d9H9Swwc6nGZfIaFZU+ZW5R7VglLxDawLaZ1amO0uI=)
                          2: TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl (hash: vBtffuqrmPzJcsBPoqolmjU/JjcgDe9U+6q6ZS4wpVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:6c:71:76:fa:cd:53:cb:fa:3a:e9:c2:e2:14:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
        Validity
            Not Before: Feb  9 22:00:16 2026 GMT
            Not After : Feb 10 22:00:16 2026 GMT
        Subject: CN=06c49823cc5207238ede3539f754ca227632801a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:84:29:0e:ed:6d:b8:61:c6:27:0d:e4:ee:
                    61:bf:fd:f2:60:5c:87:4c:72:6e:71:9b:6d:e2:81:
                    aa:93:18:75:85:1e:e7:0d:b6:54:84:78:23:fc:bc:
                    ca:99:f2:1e:2e:0b:bd:72:0b:59:84:33:a5:bd:a8:
                    1b:49:fa:a8:bc:34:a0:f0:77:49:88:93:b0:3e:81:
                    c1:0c:a6:6d:37:1a:72:07:27:2b:82:b1:0e:53:d0:
                    e6:4f:58:bc:d8:ee:f0:37:be:14:10:ce:90:d5:e6:
                    f9:03:ad:07:bd:a1:2c:de:57:32:7f:71:6f:c0:4d:
                    e5:7f:79:e8:cc:54:d7:8b:5d:3b:aa:6f:86:0f:5d:
                    ed:c8:6d:b9:85:c1:d1:73:4d:04:63:fe:46:6d:ed:
                    ec:19:f9:cf:53:a8:11:fc:77:10:c2:cf:88:ff:7c:
                    7e:d9:af:07:ce:25:77:11:cd:e1:d9:19:a5:e6:b3:
                    08:14:4c:4b:26:e4:13:f2:42:91:1c:75:f5:c9:e3:
                    a5:fe:f3:a5:9b:fa:91:24:04:9e:90:e1:08:c5:ff:
                    b5:f7:3e:4d:75:83:36:6b:fa:1b:25:12:ea:79:95:
                    17:1d:11:6c:e7:6d:e0:76:5e:9d:52:7e:24:3f:bc:
                    fa:7e:a2:f7:70:57:3b:a9:95:d4:94:1d:90:79:29:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C4:98:23:CC:52:07:23:8E:DE:35:39:F7:54:CA:22:76:32:80:1A
            X509v3 Authority Key Identifier:
                keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:8b:d2:e0:09:aa:2b:a3:ce:66:ce:b6:87:cb:d4:56:fb:de:
         19:af:1a:e6:b8:27:4d:19:c3:8e:dc:18:60:bc:e3:3d:ac:4e:
         72:2f:9a:47:59:d4:8f:68:5a:47:47:6d:10:20:f2:4d:dc:76:
         f8:b2:a9:b2:aa:80:ad:a8:96:19:28:78:d4:40:73:83:eb:e4:
         43:f7:8b:a4:f4:22:0e:f1:81:b7:f8:fc:7d:8e:44:39:ac:54:
         04:22:4b:a5:3d:a8:7b:c0:54:13:bc:ce:18:46:9a:fb:51:cf:
         fa:b4:ee:c7:72:d9:af:ec:36:77:bb:c8:73:6e:8d:c6:4f:ea:
         9f:35:76:16:81:94:f0:21:f1:c3:36:44:36:cd:e8:9c:6e:fd:
         50:d8:4c:40:f4:58:dd:7d:19:0c:f9:0a:5f:b5:a0:da:4e:25:
         4a:8a:a6:0c:a0:63:57:9f:58:37:cb:47:18:4e:13:cb:9e:a8:
         7e:43:c4:ed:c4:4e:52:1f:57:ac:7a:07:e7:96:9d:45:80:18:
         94:99:14:27:62:67:0c:90:c1:89:81:2d:ba:ef:b8:4e:38:0a:
         e7:78:8e:32:6a:cf:f9:0a:1b:d6:36:52:2a:96:3b:b4:63:bd:
         18:d9:4f:50:9f:a5:a0:d4:db:f4:f5:9f:76:47:4e:43:83:88:
         30:27:09:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:25 2026 by rpki-client