This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
File:                     Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json)
Hash identifier:          G7/Bjae6th/s7XIkUbYo1ly2NrKpXphEnkP0eSCcdz4=
Subject key identifier:   6D:8F:1F:F3:EB:68:45:E2:CF:49:31:D1:56:5D:4D:08:35:43:81:66
Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Certificate issuer:       /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Certificate serial:       019C42463EDB4DC1FD3C924A70527F886019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
Manifest number:          17A3
Signing time:             Mon 09 Feb 2026 12:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:25 +0000
Files and hashes:         1: HPyXpgvZq0DmF5lYqywyaXxXuLs.roa (hash: xJJdHEjB0zhK0uHLhPfuryAT20NVmJFJDeJjva/xFEM=)
                          2: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: 9x71IgJe590E5pB6Uo+U5I/3b2re2rO3w3h0iuyaSwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:3e:db:4d:c1:fd:3c:92:4a:70:52:7f:88:60:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
        Validity
            Not Before: Feb  9 12:00:25 2026 GMT
            Not After : Feb 10 12:00:25 2026 GMT
        Subject: CN=6d8f1ff3eb6845e2cf4931d1565d4d0835438166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2b:14:a0:ac:74:da:51:e8:ac:ee:2b:6d:5f:
                    83:b6:07:79:ae:0e:02:65:83:06:31:66:59:f7:e8:
                    2d:a8:54:61:0d:4c:b1:c7:f1:9b:3f:d8:4a:e3:12:
                    75:84:b6:02:3f:ad:fa:a8:10:e1:9b:56:04:72:80:
                    51:bd:72:af:fb:1f:22:51:a2:b2:80:f5:80:68:28:
                    57:0c:3e:93:dc:d1:6b:0c:87:8a:98:9e:28:6f:a7:
                    e4:49:fc:47:63:ea:44:77:52:68:0f:81:a9:ad:5a:
                    2a:a1:67:78:fd:90:dc:5e:5d:f5:fd:1d:4e:f4:77:
                    b1:82:3e:21:a1:15:90:21:be:18:cd:0f:6c:56:24:
                    1e:82:d4:5f:b5:d4:4e:f4:26:1c:e0:8d:ea:ef:8f:
                    80:ab:f5:04:dc:4f:84:cc:74:2d:ff:26:c3:df:0d:
                    51:0a:3c:1b:06:a5:62:f5:82:c4:f4:32:62:46:60:
                    71:5c:5b:fa:46:f8:6e:bb:99:62:12:90:34:9c:17:
                    fc:70:f3:99:82:84:89:70:f6:6a:1a:66:3a:36:f3:
                    de:c5:70:7a:0d:80:5a:9d:ab:9a:31:01:aa:25:35:
                    f3:1d:7b:23:eb:b3:1e:d7:d5:a0:fe:40:69:87:69:
                    e9:ce:e5:a7:87:32:a7:53:26:44:c5:ff:56:2d:56:
                    a8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8F:1F:F3:EB:68:45:E2:CF:49:31:D1:56:5D:4D:08:35:43:81:66
            X509v3 Authority Key Identifier:
                keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:2b:d4:e0:17:78:5f:39:0c:e6:10:e5:08:82:1b:80:d3:dd:
         20:76:29:f3:3c:8a:b6:9e:a3:80:2b:f2:57:1b:54:4c:d8:f1:
         e1:59:35:4e:1a:c2:82:76:37:3f:41:11:dd:b6:9c:8c:b1:7d:
         ff:50:d7:82:1e:f2:a3:58:b4:a8:ee:59:78:5c:de:4b:f4:9a:
         4a:4c:d3:4d:53:64:15:d6:d0:58:1d:17:46:b8:c2:44:5a:c1:
         ac:20:a5:c2:85:d4:1e:92:a4:c7:e8:7f:e4:ce:0c:51:4e:19:
         3d:a8:f0:4b:de:d1:5d:48:00:31:66:a4:43:27:b6:31:0b:09:
         bf:0c:ff:8f:9c:61:6c:f5:3c:5d:72:16:a8:85:94:4d:ab:9a:
         83:49:7a:14:03:59:85:82:e3:00:74:44:4b:43:03:8c:86:83:
         83:4e:7c:94:d3:83:d7:74:2b:5e:ff:d7:3b:f9:b2:2e:27:54:
         20:17:40:d8:0b:3c:7e:71:13:51:a9:85:29:89:eb:eb:9d:bc:
         f1:1b:12:a5:02:dd:aa:ec:37:1c:27:7d:f9:0d:10:7f:1b:2d:
         21:c0:9f:c5:d8:5e:60:56:19:97:f6:92:85:65:34:d5:df:66:
         76:83:73:82:ad:1a:2b:1d:4c:08:39:32:69:b0:cf:d4:21:05:
         04:b8:67:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:25 2026 by rpki-client