This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
File:                     ml_TZv526ZmG92gN_M89y5TW3hQ.mft (raw, json)
Hash identifier:          NEBGszjdB/l6+3iDSQJ1Ki9txdYvfwJLIGwkWUsffNc=
Subject key identifier:   BB:06:D2:AC:38:F4:0E:4F:9A:44:AF:1B:B0:4D:F7:71:44:5C:3F:CF
Authority key identifier: 9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
Certificate issuer:       /CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Certificate serial:       019C427DBBE7C62A4AB7CF422E844FAAEB4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
Manifest number:          069D
Signing time:             Mon 09 Feb 2026 13:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:02 +0000
Files and hashes:         1: 5_csqvkktJBZAA3nhx1y4Q3XeS4.roa (hash: GAIVCEQBXdTwic9D+gPxQqB/RbqD3kqUWwWSbtrlvQU=)
                          2: ml_TZv526ZmG92gN_M89y5TW3hQ.crl (hash: 8iavsKGknCo9TAz+NQbvN40MOEX00NJEi7h/MlVXFVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:bb:e7:c6:2a:4a:b7:cf:42:2e:84:4f:aa:eb:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
        Validity
            Not Before: Feb  9 13:01:02 2026 GMT
            Not After : Feb 10 13:01:02 2026 GMT
        Subject: CN=bb06d2ac38f40e4f9a44af1bb04df771445c3fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a0:93:ba:70:d2:94:78:1a:2c:c5:91:ee:e8:
                    d3:3d:05:36:06:ad:a5:7e:5f:01:21:09:a3:4a:59:
                    21:86:22:f0:bd:85:3b:2f:a3:12:2c:8e:94:0f:13:
                    82:b8:84:23:d5:04:12:bf:31:c7:6f:87:db:dd:8f:
                    f7:59:47:fb:57:34:59:4e:81:54:e1:01:5b:37:a4:
                    ca:fe:b5:17:57:52:48:b3:77:6c:cc:97:3e:96:32:
                    b4:81:a9:d4:e0:81:a7:c2:ff:91:bf:2b:bb:87:66:
                    0a:a1:75:62:e8:24:fc:c6:11:90:65:74:e9:5e:b9:
                    46:1c:6b:3d:91:17:8a:bd:a1:91:bf:cc:25:22:df:
                    70:50:ed:7d:14:ae:7e:4d:c8:a2:43:49:18:2f:b2:
                    43:5e:45:95:bd:77:2a:13:4e:c7:ef:a7:b7:33:5d:
                    46:e1:74:45:01:89:ee:7d:29:e6:df:d6:da:8e:c1:
                    93:3c:5b:44:63:34:1b:c7:cf:f5:39:d6:25:63:6f:
                    7e:a5:be:cc:05:f5:57:b9:bf:46:6d:ff:c7:18:40:
                    dc:22:4e:ef:9f:77:43:c2:8c:86:4b:36:4d:8c:c0:
                    99:5b:2e:34:8e:b8:16:51:f7:e0:b3:f4:7b:01:da:
                    06:32:54:aa:eb:36:99:25:29:a8:48:02:a3:e7:bb:
                    c1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:06:D2:AC:38:F4:0E:4F:9A:44:AF:1B:B0:4D:F7:71:44:5C:3F:CF
            X509v3 Authority Key Identifier:
                keyid:9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4c:54:df:a3:12:09:62:56:57:20:28:2b:cb:c9:ee:c5:b2:
         cc:a1:00:d3:26:cc:d5:bc:bd:49:d8:56:90:4c:29:c9:09:b3:
         8d:fa:03:d8:a9:b5:ad:88:bf:cb:2a:c8:30:48:15:da:ab:5a:
         fa:c3:d8:98:c1:5f:d3:ca:b0:9c:37:bf:70:38:05:02:6a:88:
         2e:8a:7b:a2:5b:d7:57:8c:1b:18:e5:26:5c:5e:28:63:ff:ec:
         bc:26:f5:b5:38:d8:76:a2:dd:ea:56:21:db:f8:cf:0a:03:2d:
         cd:4c:a4:2e:d3:b4:52:3f:9f:00:9b:3c:a7:ec:d2:d3:4a:5d:
         1f:3d:0e:3b:b8:93:5f:7a:1e:08:0d:ef:66:fe:f3:1e:33:01:
         b5:11:1a:ba:45:77:56:ec:e4:4d:f1:f5:af:e6:cf:8c:c9:c0:
         41:50:fc:53:5a:d4:f2:5f:39:53:b0:af:df:4f:eb:90:45:59:
         04:00:cb:92:50:d5:92:40:a0:e8:a1:e5:8e:cd:73:70:06:2a:
         10:58:3d:eb:db:3f:69:50:23:ca:84:66:75:68:8c:2b:11:38:
         24:b5:74:d3:34:54:19:7f:c6:f7:05:68:4f:dd:df:6d:71:b5:
         10:bb:ac:c6:d3:85:46:25:95:33:a5:24:b2:36:53:a4:e0:0c:
         8e:77:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:20 2026 by rpki-client