This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
File:                     tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft (raw, json)
Hash identifier:          blG8TDevUBC+r+JFttU61mbrbY7AROZ9Td99AUo24P4=
Subject key identifier:   5F:3E:33:66:57:06:A0:7D:F2:16:7F:4A:49:B2:A0:6A:7F:16:A5:FB
Authority key identifier: B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
Certificate issuer:       /CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Certificate serial:       019C413399B30FD104957933D067A61E0278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
Manifest number:          099C
Signing time:             Mon 09 Feb 2026 07:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:26 +0000
Files and hashes:         1: tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl (hash: dFfB8mVFCa9aUGoxMK2C1f3idGKRMVvsBQruaEiwwEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:99:b3:0f:d1:04:95:79:33:d0:67:a6:1e:02:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
        Validity
            Not Before: Feb  9 07:00:26 2026 GMT
            Not After : Feb 10 07:00:26 2026 GMT
        Subject: CN=5f3e33665706a07df2167f4a49b2a06a7f16a5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:63:46:7b:fb:a0:97:40:a4:cb:15:07:10:f0:
                    c1:ce:64:5c:39:07:b2:8a:be:fa:b1:e9:a0:a7:08:
                    df:4e:25:6e:68:59:95:b7:1e:9f:d4:18:d9:65:c3:
                    6b:2e:d9:33:24:f5:bf:f3:78:7c:23:18:dd:1e:1c:
                    99:dd:aa:af:69:79:aa:d4:04:57:9c:7f:06:89:6e:
                    cd:72:89:fa:cd:7e:13:f8:6d:c3:66:fd:26:01:f4:
                    38:42:27:9e:17:5a:1b:5d:bf:9a:43:43:1f:ac:3b:
                    ee:62:49:ae:99:68:a4:ef:9a:98:ab:93:b8:0c:67:
                    83:b3:8f:25:2b:3e:97:6f:2b:6e:f4:f5:0e:3b:ae:
                    46:d5:61:98:65:db:71:ef:81:aa:2c:21:ff:b1:f3:
                    6a:27:0b:fd:d4:35:5a:47:8e:52:4d:e1:34:c5:3f:
                    aa:0f:ce:7e:cb:5b:7d:3f:37:83:8d:2a:c6:44:64:
                    8d:e5:24:42:10:29:c7:f1:4e:16:02:34:6c:99:43:
                    31:9a:9c:ca:b1:d9:4e:4c:ee:85:ba:98:29:2f:3a:
                    ae:95:c7:56:fd:26:a3:e0:7f:a0:a1:68:94:54:d3:
                    3e:52:4a:fd:0e:18:93:2c:c0:6d:39:56:c2:7d:c4:
                    82:06:70:3c:5d:40:8f:f6:fc:9b:b5:3e:b5:70:ad:
                    2e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3E:33:66:57:06:A0:7D:F2:16:7F:4A:49:B2:A0:6A:7F:16:A5:FB
            X509v3 Authority Key Identifier:
                keyid:B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4b:99:73:6e:f1:83:4a:c9:3f:a6:00:ed:45:e0:17:9c:18:
         b6:e7:31:85:17:dc:06:d2:40:70:f7:80:67:c0:57:e4:7e:da:
         81:b6:f0:6a:e1:37:27:7c:29:2d:ec:d8:4b:fe:3a:2f:50:03:
         f3:05:ff:82:9b:84:b4:06:d4:07:35:a7:c1:fa:ba:bf:04:39:
         68:79:05:0e:58:1b:4e:2c:42:81:c9:25:b6:3c:f4:93:86:38:
         ae:d0:fa:9a:e2:c9:74:5e:23:62:1e:53:22:7b:a9:dd:83:c7:
         36:c9:8d:ac:32:fb:89:60:01:7a:80:9e:c8:df:bf:80:fb:f4:
         61:6d:38:eb:f7:f3:34:be:35:6f:18:c0:7e:3b:b9:22:42:a5:
         4d:0d:87:59:23:45:3d:65:2d:68:f3:5b:9a:0c:c2:2e:a3:08:
         bb:83:5b:de:17:eb:00:1e:db:10:e4:88:dc:f9:13:ba:89:ff:
         7c:0a:f0:b2:2e:de:b2:21:03:79:1b:01:9a:45:cd:2c:69:e4:
         b6:25:1a:18:83:6e:a3:18:3d:93:11:5f:be:b0:f9:2b:0e:12:
         ae:be:5e:8f:89:5c:2e:d0:ff:e1:86:0c:59:68:41:c7:62:1d:
         91:85:5d:3f:1b:6c:71:01:46:a2:d8:e7:a1:3c:3b:0e:61:ac:
         23:ec:c6:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBM5mzD9EElXkz0GemHgJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YThmMmNhMjNlMTAyZDRkMzU3MTEzNjJkMjRhYmQ0N2Iw
OWU5ZTUwHhcNMjYwMjA5MDcwMDI2WhcNMjYwMjEwMDcwMDI2WjAzMTEwLwYDVQQD
Eyg1ZjNlMzM2NjU3MDZhMDdkZjIxNjdmNGE0OWIyYTA2YTdmMTZhNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GNGe/ugl0CkyxUHEPDBzmRcOQey
ir76semgpwjfTiVuaFmVtx6f1BjZZcNrLtkzJPW/83h8IxjdHhyZ3aqvaXmq1ARX
nH8GiW7Ncon6zX4T+G3DZv0mAfQ4QieeF1obXb+aQ0MfrDvuYkmumWik75qYq5O4
DGeDs48lKz6Xbytu9PUOO65G1WGYZdtx74GqLCH/sfNqJwv91DVaR45STeE0xT+q
D85+y1t9PzeDjSrGRGSN5SRCECnH8U4WAjRsmUMxmpzKsdlOTO6FupgpLzqulcdW
/Saj4H+goWiUVNM+Ukr9DhiTLMBtOVbCfcSCBnA8XUCP9vybtT61cK0ujwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8+M2ZXBqB98hZ/SkmyoGp/FqX7MB8GA1UdIwQY
MBaAFLWo8soj4QLU01cRNi0kq9R7CenlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGFqeXlpUGhBdFRUVnhFMkxTU3IxSHNKNmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mNmY3NTItYzA0Yi00ZWE4LTg1N2Qt
OGE4NzQ0ZTQ1NDE3LzEvdGFqeXlpUGhBdFRUVnhFMkxTU3IxSHNKNmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mNmY3NTItYzA0Yi00ZWE4LTg1N2QtOGE4NzQ0ZTQ1NDE3
LzEvdGFqeXlpUGhBdFRUVnhFMkxTU3IxSHNKNmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0uZc27x
g0rJP6YA7UXgF5wYtucxhRfcBtJAcPeAZ8BX5H7agbbwauE3J3wpLezYS/46L1AD
8wX/gpuEtAbUBzWnwfq6vwQ5aHkFDlgbTixCgckltjz0k4Y4rtD6muLJdF4jYh5T
Inup3YPHNsmNrDL7iWABeoCeyN+/gPv0YW046/fzNL41bxjAfju5IkKlTQ2HWSNF
PWUtaPNbmgzCLqMIu4Nb3hfrAB7bEOSI3PkTuon/fArwsi7esiEDeRsBmkXNLGnk
tiUaGINuoxg9kxFfvrD5Kw4Srr5ej4lcLtD/4YYMWWhBx2IdkYVdPxtscQFGotjn
oTw7DmGsI+zGHQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:44 2026 by rpki-client