This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File:                     TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier:          uRCXKaOBH/ZJhUN1qk4ikKv5qiLSgurBoQ2zz4RHCZo=
Subject key identifier:   19:BB:61:AE:6F:14:FE:41:3B:3F:10:E3:28:39:AA:F3:0E:BC:BC:F7
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer:       /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial:       019C432299FE72EC56CC6ED7CB08C48442CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number:          12C6
Signing time:             Mon 09 Feb 2026 16:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:06 +0000
Files and hashes:         1: SFGE70vQYmz_oKTtZMgB-YKUyZc.roa (hash: lZ0OnAmHAxbwpz0Bf+bKQq6tPOf7KpsPHIF+YP1ggzc=)
                          2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: OdiWqkRCyTysobzv+f8dT8SekRILRNnQq1zwSHyNPcA=)
                          3: eHNuPU6iYgVIfZ9NIp8A3552y-I.roa (hash: AOM1Ajc5ONgwd+E4wuOhZtP8/uws9RFZszPyOYWcL2Q=)
                          4: vP7G0LDj9js2uqV_dVx329H3yeM.roa (hash: fyHdxLq/9tcpLwgIyk0ErgVx3QqPOxT/MFLUCo0yJ0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:99:fe:72:ec:56:cc:6e:d7:cb:08:c4:84:42:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
        Validity
            Not Before: Feb  9 16:01:06 2026 GMT
            Not After : Feb 10 16:01:06 2026 GMT
        Subject: CN=19bb61ae6f14fe413b3f10e32839aaf30ebcbcf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:f6:db:b2:16:5b:fd:f5:96:06:0e:86:29:
                    d1:a6:e1:e8:37:b8:0f:3f:de:37:91:bd:70:7f:36:
                    18:08:19:1c:ed:da:8a:21:a2:e6:f7:53:04:35:e7:
                    7d:17:a7:ae:bb:3a:93:9f:57:c5:f0:26:64:d2:e0:
                    5f:2d:5a:1a:a6:3c:51:49:7b:fe:74:f2:6c:b4:63:
                    ee:8f:a1:2e:2e:3a:2b:bc:c5:0d:a0:5e:d5:e2:9f:
                    29:9d:4b:ee:09:ef:bb:9e:49:bf:b2:cb:4e:b7:18:
                    55:98:0a:2c:07:5e:e3:5d:27:bd:03:eb:a0:73:18:
                    8b:25:11:f3:16:e0:c6:f6:71:11:e4:03:a4:67:42:
                    dc:d5:f5:c6:52:44:72:fd:91:36:0a:a2:2e:7c:bc:
                    b2:c0:11:86:c3:fb:ea:ef:c3:35:76:46:3c:f3:b5:
                    74:e9:d9:9c:51:d6:5f:49:94:2b:f1:57:75:34:fc:
                    da:af:3b:c0:e0:3a:88:15:5e:35:36:b9:01:6f:66:
                    0a:4f:8a:2f:0b:2b:37:b7:1e:3e:63:c9:21:d4:70:
                    e9:e3:24:ff:43:bb:9b:65:ec:01:b5:e0:24:f3:ea:
                    34:4d:da:14:3b:1e:e6:6a:0a:a0:d2:47:e3:5c:19:
                    7a:ee:1d:85:63:99:40:45:5b:5f:92:1c:c3:b6:67:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BB:61:AE:6F:14:FE:41:3B:3F:10:E3:28:39:AA:F3:0E:BC:BC:F7
            X509v3 Authority Key Identifier:
                keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:44:85:53:55:b0:33:4c:94:16:a0:d1:24:8a:0d:dd:1d:50:
         31:86:f3:08:d1:3f:a5:86:d3:ea:82:42:b6:e9:67:a6:36:13:
         98:22:27:f4:14:b6:9a:5b:2e:44:1d:34:a1:10:27:ae:fc:56:
         b2:83:7a:0c:b5:ea:96:ca:a7:e3:b8:d6:c1:a1:b0:a4:2f:a1:
         07:4e:ab:72:d6:ce:ca:55:b2:83:40:19:d7:ab:1e:36:4c:6c:
         e7:92:a6:a2:29:b3:81:e0:f4:8d:e4:39:c1:f2:a6:ab:3f:0e:
         68:84:92:ef:ae:ed:33:73:56:6d:04:1b:98:c4:96:0f:95:d6:
         cb:11:75:0e:c5:16:70:29:d3:1e:8f:a5:42:45:a0:e9:26:0a:
         52:d2:6c:4a:54:0a:c8:ee:45:e8:75:dc:6b:cf:23:c2:0b:4b:
         fa:6c:28:72:94:54:d1:2e:70:e3:ac:37:55:92:ed:c5:78:3f:
         6a:32:eb:66:48:1c:b9:8c:49:87:06:40:12:c1:60:ba:a8:17:
         e5:9a:84:37:f6:58:b8:77:ad:6e:f6:f2:94:a8:81:d5:71:d1:
         f2:c5:49:fb:0d:39:b2:49:d9:ba:89:2a:0b:2e:68:e7:6c:7a:
         6c:64:e0:ad:f1:d5:59:cb:32:0b:ce:7a:cf:c5:91:1b:cc:9c:
         0a:c4:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:49 2026 by rpki-client