This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
File:                     tUXkNLukc3BtqDNv2gFrsuaLNiM.mft (raw, json)
Hash identifier:          l7JNfny9VQua99lyu+nbTdXEGKEogIMLC3qzhn95ATo=
Subject key identifier:   8F:B3:14:DB:ED:A9:05:E0:13:BB:62:82:AC:D4:DF:73:59:C3:C5:0C
Authority key identifier: B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
Certificate issuer:       /CN=b545e434bba473706da8336fda016bb2e68b3623
Certificate serial:       019C43C6F8DC51106ACCD23F224C3EC23F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 19:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:39 +0000
Files and hashes:         1: tUXkNLukc3BtqDNv2gFrsuaLNiM.crl (hash: ak9N26O1gmXLtok1lnnO9bxCsbnRNdxq+BZV1uIUAzI=)
                          2: wkBVr3VKx8cAN-J4mgwDM9fyDIw.roa (hash: pXEfo0mUUpTRtyfYgZ5QmNahxpHjcAC/DZR0RKo1OaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:f8:dc:51:10:6a:cc:d2:3f:22:4c:3e:c2:3f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b545e434bba473706da8336fda016bb2e68b3623
        Validity
            Not Before: Feb  9 19:00:39 2026 GMT
            Not After : Feb 10 19:00:39 2026 GMT
        Subject: CN=8fb314dbeda905e013bb6282acd4df7359c3c50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1e:8d:58:31:59:09:d1:54:d1:37:02:05:ce:
                    12:23:50:b5:9e:a3:fd:88:d2:b8:52:37:a6:2a:9f:
                    59:38:2f:b5:79:8a:c7:63:19:84:fb:3c:c2:90:1e:
                    c1:aa:e0:54:27:78:93:48:27:7e:ef:e3:fc:88:24:
                    b5:d9:ae:62:e0:c2:fc:e0:1a:e2:f8:6c:da:5b:db:
                    b0:19:ac:d6:47:d5:98:d0:7d:a6:aa:97:9d:89:51:
                    36:3d:47:1a:a4:03:b0:df:7a:2e:ca:63:c0:5c:1c:
                    6d:25:43:c4:f0:a2:d7:a6:cb:55:3b:c6:0e:90:c1:
                    d9:ba:83:d3:ee:d9:ae:9f:22:6f:22:31:02:b6:44:
                    55:2d:96:9f:9e:7c:45:6f:7d:a0:94:3d:d6:68:63:
                    1a:b1:02:e7:85:8e:65:d6:23:f5:e9:ad:10:35:95:
                    52:33:41:ee:c8:b0:40:1a:14:d8:75:ea:6d:3f:cf:
                    d0:dd:64:b8:a4:42:83:cb:a2:68:43:38:65:14:ea:
                    5a:a4:a0:43:a1:c8:28:71:d1:0e:1e:0b:2b:50:13:
                    e9:64:0b:23:76:ff:a5:ba:45:d3:a8:ac:52:5e:2d:
                    b8:2a:e4:e3:d1:f4:cf:b7:19:84:18:de:61:8e:b8:
                    4a:76:e9:eb:3d:c5:ff:ae:ab:d4:72:10:af:12:a0:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B3:14:DB:ED:A9:05:E0:13:BB:62:82:AC:D4:DF:73:59:C3:C5:0C
            X509v3 Authority Key Identifier:
                keyid:B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c8:ce:60:8e:81:b5:57:ee:31:c1:f5:8f:3c:e2:44:2b:49:
         d0:95:6b:f8:d2:ac:82:8f:11:ca:6a:c6:98:30:69:03:ab:3d:
         52:b6:72:d6:dc:c2:6c:ea:ac:c8:45:3d:5f:1a:18:7d:23:f0:
         4c:50:9e:c7:81:b7:7d:e4:7a:2f:e9:e9:10:08:00:92:bb:f0:
         4c:b1:25:e0:9e:c6:d2:73:ef:0e:b5:11:9f:4e:68:c3:96:69:
         78:50:19:e3:e8:40:a7:5a:e9:8d:c2:e9:70:14:8d:98:f9:fc:
         b4:4a:5b:21:d7:ac:98:8d:e2:40:bf:89:e8:8a:3e:51:6d:0e:
         a3:12:8f:ee:2f:7b:dd:73:c2:2f:84:88:68:5a:99:95:f3:2d:
         13:64:cb:2c:d1:70:92:7b:7c:9f:fc:d6:f0:24:6d:48:a1:95:
         50:0a:fe:ac:eb:31:59:3f:05:e4:89:20:02:93:c7:c3:38:cf:
         f4:95:68:f7:ee:da:30:6a:e6:0d:57:a7:9b:37:c6:78:2a:a4:
         46:c6:42:84:bf:bd:83:52:10:65:9e:5c:af:1b:d9:c8:76:36:
         0d:9c:c1:c3:0a:b2:51:3f:34:9f:52:d0:d9:1e:ba:4e:3f:8f:
         c6:18:ec:3a:a1:91:98:e1:c3:ac:66:e6:45:d1:78:c4:b8:9b:
         f3:74:b6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:18 2026 by rpki-client