This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File:                     TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier:          flS2ZbdIO2NX2L2jNZoVF1CtIgpuHcR5PPX6+lJeiFc=
Subject key identifier:   4B:A2:59:84:15:B7:7D:D9:C8:C8:B9:47:6E:CB:21:11:CF:11:71:81
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer:       /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial:       019C45B5286D35C6315FF76E1B3289A0A177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number:          1810
Signing time:             Tue 10 Feb 2026 04:00:26 +0000
Manifest this update:     Tue 10 Feb 2026 04:00:26 +0000
Manifest next update:     Wed 11 Feb 2026 04:00:26 +0000
Files and hashes:         1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: 7G8SbptovLX9+fs2fUi0sALqgziZIJkw3T5ryzCYhvE=)
                          2: WWNIYacMJoEIRfEav5J1OWOX504.roa (hash: tPd27yKggwGnWK5YYeEd5gD5neTnZ1BFKcvvTfuouW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:b5:28:6d:35:c6:31:5f:f7:6e:1b:32:89:a0:a1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
        Validity
            Not Before: Feb 10 04:00:26 2026 GMT
            Not After : Feb 11 04:00:26 2026 GMT
        Subject: CN=4ba2598415b77dd9c8c8b9476ecb2111cf117181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f1:8f:26:37:9b:33:98:1c:59:68:9f:9a:4f:
                    64:64:68:c3:14:3d:8d:db:bd:c2:17:61:07:e3:94:
                    0b:3a:2d:54:98:fc:c1:5c:74:cc:4a:a4:39:75:36:
                    71:18:c2:df:f5:73:e3:f7:55:95:98:02:5d:f1:98:
                    b6:d6:d9:3e:9d:b9:a4:d4:3e:7e:2e:70:dc:84:cb:
                    c6:69:01:b2:35:fd:77:d9:9e:22:45:b3:4f:b2:8b:
                    76:2d:64:bf:c5:77:45:9c:c4:bf:dd:f0:d0:11:0f:
                    5a:cb:25:45:67:1d:a0:1a:9d:b0:9e:a9:a5:2f:dd:
                    c1:f3:11:e2:d7:9c:17:22:21:33:0a:34:6f:c9:f0:
                    04:5e:01:56:c8:a6:1e:a7:b7:34:b3:e8:04:7d:3a:
                    bf:53:7a:34:e7:a0:57:cb:cc:9d:8e:1e:db:a7:c0:
                    b9:40:eb:1e:61:9f:87:88:b1:4a:24:d7:91:1b:dd:
                    7a:8d:39:aa:c1:c4:90:81:26:59:52:0e:c6:77:4b:
                    bd:1c:04:50:a3:10:b7:81:c7:f4:8f:34:11:b5:0a:
                    8e:cf:e8:9c:02:2f:55:d7:2e:76:46:e4:b3:73:ed:
                    92:5c:8b:ed:a2:b3:ef:fe:9a:4f:68:1f:44:88:3a:
                    a9:88:d3:e5:99:1e:05:db:0b:74:03:b2:66:89:f3:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A2:59:84:15:B7:7D:D9:C8:C8:B9:47:6E:CB:21:11:CF:11:71:81
            X509v3 Authority Key Identifier:
                keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:27:d7:45:00:ea:eb:50:f0:d1:26:67:20:1f:09:89:fd:4d:
         f2:9f:f1:fe:19:c6:1f:a7:72:86:aa:94:8f:52:e9:4e:68:21:
         14:40:10:ec:d9:df:6b:80:db:3a:34:fa:38:79:e8:b9:22:68:
         6f:82:7c:ee:b4:b6:69:a3:9d:fa:18:ca:ba:2c:6d:b2:97:9c:
         b8:70:46:ca:ee:39:6a:4f:39:b5:f6:25:21:90:07:c6:79:c9:
         e0:8b:74:66:d9:5e:ba:18:e5:ba:00:31:21:b5:b1:d0:d2:b4:
         67:e3:1e:1e:94:fa:45:d9:e4:82:dd:b8:e0:73:ca:da:cb:b1:
         d7:91:22:f9:7b:5f:9b:ef:79:eb:38:21:b4:13:58:18:b9:b4:
         d5:b2:23:9e:7b:99:0b:99:e1:3b:7c:d5:04:74:5d:d7:2a:67:
         87:73:b7:fe:8e:77:5b:2d:a9:b4:a5:e4:93:0c:aa:1f:5e:64:
         c9:74:2f:dd:4d:72:71:04:2d:53:81:de:ce:99:6b:b5:1e:e1:
         a9:cc:2c:3c:dc:d3:1a:48:29:4f:8d:a6:7e:29:17:dc:49:d3:
         99:e9:a8:58:00:77:c1:21:73:42:42:89:c0:c7:08:88:11:97:
         91:54:d0:b0:fb:51:07:1f:bd:89:e4:2f:26:70:96:c7:05:21:
         97:b5:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:32:34 2026 by rpki-client