This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File:                     TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier:          7vrk6lW5vV2DFU1m821WADYdXcyHydMTktXp6fHVVPg=
Subject key identifier:   C5:F7:1F:9F:A2:90:B0:2B:D9:24:D7:60:C3:63:4E:A3:C4:F3:C4:96
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer:       /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial:       019C43905C10B36D8FBC04D2A991F08A86B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number:          0A8D
Signing time:             Mon 09 Feb 2026 18:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:00 +0000
Files and hashes:         1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: 8IeWU5pcyxlT/gmOyhraTMoVH1jqsCIdbOzL3eXmtBQ=)
                          2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:5c:10:b3:6d:8f:bc:04:d2:a9:91:f0:8a:86:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
        Validity
            Not Before: Feb  9 18:01:00 2026 GMT
            Not After : Feb 10 18:01:00 2026 GMT
        Subject: CN=c5f71f9fa290b02bd924d760c3634ea3c4f3c496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:7a:57:47:06:27:38:e8:cf:b0:e8:d5:f5:
                    03:8d:3c:d0:51:31:31:ef:b9:3f:ae:1e:c2:2a:ab:
                    fa:70:43:ee:6f:51:e5:25:2c:01:87:0f:d6:fa:02:
                    03:97:33:58:51:2d:c4:e5:75:48:0f:4d:0d:78:ad:
                    7c:47:74:f2:80:33:cf:8b:88:ab:d1:9d:a9:8f:a0:
                    fe:cb:49:a3:92:9a:99:37:0b:a7:d6:29:06:ea:5c:
                    7f:88:9f:a6:8e:60:c4:bb:2b:9f:8f:2d:88:af:55:
                    22:c7:2f:76:b1:24:46:b3:55:9d:a6:22:b8:b3:48:
                    4d:5d:94:45:10:30:6f:47:17:5d:5b:8f:76:62:a5:
                    90:42:b6:66:3d:aa:65:60:66:bb:4a:cd:92:8e:0c:
                    52:35:36:fa:7d:70:3d:70:28:01:62:64:5a:4c:08:
                    b9:b9:3b:21:45:54:28:dd:41:65:38:f2:36:f3:7f:
                    13:15:24:ad:bf:9f:e6:fd:47:37:69:6e:28:30:e6:
                    e2:bc:f5:e0:56:74:33:ec:18:d6:0e:3f:a3:5d:00:
                    de:58:fc:c7:f0:a8:4a:10:95:d5:6c:81:ce:00:48:
                    37:48:ef:66:f9:44:f0:9c:fc:a7:df:30:70:18:10:
                    20:09:12:e9:6b:23:62:b4:7e:ee:87:1a:43:aa:33:
                    b8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F7:1F:9F:A2:90:B0:2B:D9:24:D7:60:C3:63:4E:A3:C4:F3:C4:96
            X509v3 Authority Key Identifier:
                keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b5:d2:86:58:1a:bb:07:56:8e:63:df:83:c8:08:2e:f3:45:
         e7:cd:68:a3:63:4e:15:9c:e4:49:43:02:80:7a:d3:c0:89:a8:
         26:ca:a7:97:50:51:bf:9b:6f:7c:5b:33:ff:b5:10:9a:8d:94:
         c2:3f:71:5d:7f:73:00:0a:40:84:70:1a:21:19:86:28:fb:40:
         fc:f0:de:ec:1d:f3:c8:ad:90:71:d3:97:3a:9d:65:f0:13:c4:
         e7:cb:a8:c6:17:a4:75:35:49:f6:a8:14:99:d9:07:92:20:a5:
         6f:f0:28:8a:6f:43:15:31:69:f7:b2:58:31:0d:cd:5a:19:02:
         03:c6:6d:dd:39:f0:fa:3b:0f:6e:b7:8e:61:1a:49:b4:40:a3:
         c8:0a:e9:20:f4:d0:fd:92:ac:52:ea:ef:8e:09:60:0c:e7:55:
         cb:7b:72:3b:7c:11:f3:4a:b9:64:a6:ea:7d:4a:86:6d:80:19:
         9b:e7:a6:e9:35:f9:bd:bf:6d:c1:0b:81:d2:5c:e1:d9:4f:19:
         57:04:63:a2:fc:48:c9:89:83:13:36:ba:f2:05:70:25:77:9c:
         4f:9f:b7:14:d1:93:e0:9d:62:76:fb:34:5f:ab:84:6f:ed:ac:
         40:96:7e:70:c5:8f:73:6c:1c:ae:fe:f8:06:60:05:fa:05:69:
         63:b9:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:19 2026 by rpki-client