This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File:                     tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier:          BDfwaA/5mp99NQxzLWktSCxRdxuD6M98iKIFkxin0Ts=
Subject key identifier:   81:2E:32:56:3A:4C:57:A4:10:0C:1C:64:5E:7D:07:A6:81:91:1E:5F
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer:       /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial:       019C432262F83C68C2DE67612E20FC747283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number:          118C
Signing time:             Mon 09 Feb 2026 16:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:52 +0000
Files and hashes:         1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: qZAZB62jqEdtcFXlonazx2IWg2oRT6rh1aoiJkVoBuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:62:f8:3c:68:c2:de:67:61:2e:20:fc:74:72:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
        Validity
            Not Before: Feb  9 16:00:52 2026 GMT
            Not After : Feb 10 16:00:52 2026 GMT
        Subject: CN=812e32563a4c57a4100c1c645e7d07a681911e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:00:0c:4c:c7:be:4d:dc:39:47:a1:46:26:23:
                    1c:5c:0f:8d:f8:8d:49:93:ae:a1:dc:32:c3:8d:79:
                    9d:31:65:2c:18:28:81:33:3e:c9:6e:a7:94:6e:97:
                    49:7b:dc:e6:2a:8e:a3:fc:5e:89:90:b8:c8:0f:5a:
                    8a:da:0f:0a:94:5c:fa:7b:e2:1f:c4:c5:e6:40:bc:
                    c1:12:fe:70:fb:d2:a4:a7:8e:f4:47:7d:a2:75:14:
                    da:99:73:ef:bd:21:55:ea:6a:48:02:eb:b0:e0:b8:
                    36:89:bf:60:41:de:bd:03:20:e4:94:dd:54:d1:3d:
                    56:48:eb:ff:fb:df:d7:37:3e:e3:c3:bb:73:59:e1:
                    d9:82:c3:0c:e7:92:36:0f:3d:15:76:79:b1:12:bf:
                    c0:51:b8:fd:9d:b8:f9:9a:9b:9b:e7:56:af:86:aa:
                    13:7c:3f:66:be:dc:91:67:ec:f1:bf:c9:b1:a7:ee:
                    29:24:c0:ec:fe:95:cf:24:1e:0a:88:e4:c3:a7:fd:
                    a9:f4:5a:fb:6e:1c:55:71:b1:49:06:b0:76:c6:45:
                    1b:6c:a0:b0:bb:13:8b:5e:4f:72:e6:1c:41:29:b0:
                    7b:f7:fe:71:81:8d:fe:ba:db:1c:f6:ef:98:15:a0:
                    ae:82:ca:86:41:db:48:94:67:9d:ae:96:44:23:27:
                    9c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2E:32:56:3A:4C:57:A4:10:0C:1C:64:5E:7D:07:A6:81:91:1E:5F
            X509v3 Authority Key Identifier:
                keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:20:a5:49:68:ca:63:48:8f:0f:45:62:35:bb:b8:df:4a:37:
         9c:95:84:27:79:f0:ce:a3:df:37:b3:0a:38:0b:55:a6:e3:d4:
         d7:e3:61:be:78:0f:6a:15:88:a8:1a:17:f4:0a:4d:b7:c8:27:
         b8:35:26:06:f5:08:aa:bc:24:5e:07:31:48:0c:a1:99:3f:d2:
         93:9d:5c:d8:94:8b:71:d2:8e:b8:8e:08:dc:9e:72:9c:33:60:
         79:c6:84:7e:5c:c6:84:b7:91:70:94:4a:4f:95:04:e3:e7:19:
         11:ee:dc:0c:f5:64:84:e3:3d:eb:2f:59:83:d4:b3:8b:41:a4:
         62:20:f2:94:2d:04:8d:c5:9d:14:c6:5c:f7:8b:60:98:79:e0:
         29:54:cb:d8:39:68:70:51:0e:ab:10:b6:3a:8c:9f:8f:f0:fc:
         19:86:4f:d0:d5:94:fb:ed:d1:33:82:e9:ee:44:93:8c:50:d8:
         1d:c3:7e:65:7b:a0:7f:97:33:b5:84:58:fa:fa:e5:e1:3b:8c:
         2e:15:6a:19:7d:7e:8c:7a:7c:62:55:6d:cd:31:98:fa:91:b8:
         f9:35:ba:4d:62:5c:c9:f4:13:79:cf:44:aa:5c:e1:1b:bd:7d:
         bf:0a:47:46:0b:e0:25:a4:c2:2d:b3:f8:9d:aa:8b:22:91:b0:
         7d:c9:91:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:28 2026 by rpki-client