This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
File:                     TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json)
Hash identifier:          3u9ifv3Lv5CnV46CE3lIVhUfcUmyH75RgMfXz+jmivU=
Subject key identifier:   50:B0:1B:94:D7:74:BE:1B:D2:13:5A:DF:46:85:FE:F6:84:3D:65:77
Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
Certificate issuer:       /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Certificate serial:       019C424693DEFA5C59E909B70BD0E31D441E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
Manifest number:          0637
Signing time:             Mon 09 Feb 2026 12:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:47 +0000
Files and hashes:         1: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: 9rgywODj5uXY1TvhZTzZ7C4xg0ab+xn8TkXCDiK40NM=)
                          2: ccAwFuFoEVY4ZVDtB4ez7EOrJHw.roa (hash: fjcffrvIzn+8rVbXn0+XNf1+negR6a3bRf3n/jGpSFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:93:de:fa:5c:59:e9:09:b7:0b:d0:e3:1d:44:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
        Validity
            Not Before: Feb  9 12:00:47 2026 GMT
            Not After : Feb 10 12:00:47 2026 GMT
        Subject: CN=50b01b94d774be1bd2135adf4685fef6843d6577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1f:c7:6f:5d:39:0c:22:06:ed:d6:82:96:cb:
                    8a:a1:ab:f1:e8:e0:d7:42:41:70:b5:ae:74:02:fe:
                    98:a7:01:41:3a:d0:54:fb:16:77:36:51:23:ee:b4:
                    2f:ec:ec:e9:43:28:08:8b:d3:95:a0:13:e3:c7:f4:
                    86:5c:ff:b5:cf:4e:bc:3a:27:6a:52:6b:c6:c2:9b:
                    b1:dd:0b:58:73:54:fb:ea:a0:91:ef:ad:eb:29:c9:
                    11:33:44:52:8c:ab:bf:35:c7:27:96:84:6a:7a:2b:
                    e8:32:4d:f9:ad:54:68:c4:52:7c:39:08:08:56:f0:
                    36:44:c3:af:55:9f:af:c4:5d:6e:88:07:e9:c2:68:
                    02:65:d0:74:90:56:ea:ab:31:87:61:28:03:c3:c5:
                    88:df:cc:06:49:04:49:81:78:45:bc:fa:25:28:ed:
                    ff:d3:57:a7:ea:d7:b6:46:c1:10:e7:57:81:7e:cc:
                    a6:c3:a3:f8:35:07:a9:74:62:a9:4e:04:5b:bb:3c:
                    07:64:f1:a6:aa:9a:fb:a5:a8:2b:c8:13:46:73:a1:
                    be:3d:cb:d0:14:14:11:8c:b2:2f:97:02:45:f7:6f:
                    3a:91:81:bc:66:6a:72:4b:08:a8:58:eb:ab:20:16:
                    90:5b:62:c0:4c:b9:d6:61:09:a2:bf:43:9a:29:77:
                    ea:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B0:1B:94:D7:74:BE:1B:D2:13:5A:DF:46:85:FE:F6:84:3D:65:77
            X509v3 Authority Key Identifier:
                keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b8:a1:0f:88:30:1a:f3:ab:36:6e:f8:36:08:c0:50:f6:5b:
         db:d9:fe:c7:dc:b0:6e:3b:16:58:eb:ba:52:81:f5:94:73:9f:
         e1:5e:74:c9:58:da:f1:d3:aa:dd:b6:f8:40:6f:1f:ce:a4:f2:
         5f:d7:ad:05:ae:b2:95:cd:bd:fe:54:8b:0c:02:ab:e6:14:6e:
         9d:28:0d:d2:14:be:d4:4c:e6:b0:24:28:2d:71:5a:36:c2:d3:
         65:0c:41:a0:01:06:dd:a6:71:40:73:7f:55:0c:51:db:78:17:
         3f:66:bf:91:4c:6e:81:7d:54:78:7f:64:fa:fe:09:a9:e9:72:
         c3:39:01:08:24:23:6b:3d:04:a0:71:1a:3e:34:9d:36:ec:4f:
         fb:49:f1:07:f9:d2:9d:06:84:63:97:0e:0c:bc:80:f5:92:26:
         67:cb:67:1f:4d:41:28:68:ab:3d:fc:3f:a7:4d:4d:a5:21:80:
         39:3b:01:bf:8d:a3:64:ee:e6:bb:dd:b5:f4:27:79:5c:82:0e:
         ee:43:f7:be:0d:6d:f7:29:8d:b2:88:a0:23:8d:61:e5:01:b0:
         e3:4a:b4:18:44:1a:71:bc:2b:06:f2:e0:a8:29:54:6c:0c:89:
         85:ff:5c:ea:04:1a:ea:99:db:9d:25:8c:39:b7:f7:10:02:7a:
         06:f8:39:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:30 2026 by rpki-client