This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
File:                     txUfGUo-UkyCxne44TIFgUPI6-4.mft (raw, json)
Hash identifier:          SPkSVG8LRD4vmG5MdtBDUZg+bHVuurcJ0aYMrPYNff4=
Subject key identifier:   A5:91:91:90:E5:E4:FD:A1:CB:AC:11:6B:4F:96:5C:0B:E4:00:0C:35
Authority key identifier: B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
Certificate issuer:       /CN=b7151f194a3e524c82c677b8e132058143c8ebee
Certificate serial:       019C439032F916D936E9785697CA202B2F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
Manifest number:          13D6
Signing time:             Mon 09 Feb 2026 18:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:49 +0000
Files and hashes:         1: FuuoUq0ErJJHtMLQT9iqBdJZVZ4.roa (hash: iQAXcdlMsShf9N3vl6PkzkIzqC0xp7S/U0y7K1RhcEU=)
                          2: txUfGUo-UkyCxne44TIFgUPI6-4.crl (hash: mgNeiWEWuxe8C8fHea8iHFmHmZrDXckr9eql/XcgMnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:32:f9:16:d9:36:e9:78:56:97:ca:20:2b:2f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7151f194a3e524c82c677b8e132058143c8ebee
        Validity
            Not Before: Feb  9 18:00:49 2026 GMT
            Not After : Feb 10 18:00:49 2026 GMT
        Subject: CN=a5919190e5e4fda1cbac116b4f965c0be4000c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:14:e0:4a:3e:40:50:98:aa:41:f6:49:ed:
                    a8:df:f1:84:f8:c7:78:87:e5:9d:8b:8d:40:d8:f1:
                    92:d5:72:70:09:9f:5b:fc:b1:0d:52:e5:5b:42:fe:
                    63:c1:fc:14:ff:4e:d4:42:9b:5a:92:bb:15:f8:59:
                    ec:de:9c:b4:bb:cc:d9:57:42:98:3f:cd:5b:12:37:
                    cb:aa:df:06:5c:cc:19:bb:dc:d6:4a:b9:df:3d:12:
                    e2:2b:9b:81:b6:53:36:0a:c2:5e:8d:55:dd:13:f9:
                    ed:dd:fc:63:31:37:47:87:38:8b:fd:d3:84:32:91:
                    76:64:4b:d0:a2:20:cf:1e:ba:13:d9:ec:2c:37:c4:
                    ee:f0:96:fd:af:60:77:51:34:cc:e8:53:66:d0:72:
                    7c:35:9d:6c:e1:37:75:6d:6c:4c:6e:dc:93:22:9e:
                    bd:cd:f8:de:e7:34:5b:5e:1b:6d:eb:50:d7:4e:5d:
                    7b:e6:2d:c7:fb:30:f1:9d:d0:5b:44:e4:6f:4b:2e:
                    a9:44:66:76:a8:ec:08:ac:cd:de:de:71:99:44:92:
                    5c:f2:f7:d2:08:04:83:29:a7:a7:a7:a9:c2:ac:7c:
                    eb:b2:12:12:3c:28:4c:a8:32:eb:82:91:ad:b4:70:
                    6e:6a:e1:97:2f:af:31:b9:44:a6:f9:cd:64:87:0d:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:91:91:90:E5:E4:FD:A1:CB:AC:11:6B:4F:96:5C:0B:E4:00:0C:35
            X509v3 Authority Key Identifier:
                keyid:B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:36:13:7a:93:f6:b9:db:49:4c:02:79:8b:59:e8:98:38:e8:
         72:b6:a8:63:cb:99:ff:5b:42:c1:f2:db:15:d2:d6:4f:0b:da:
         52:12:c3:da:9a:fb:f3:c4:b2:2d:6b:16:b4:f4:85:16:e6:82:
         80:8e:d9:31:7e:2d:02:d3:df:24:60:57:8a:19:5d:bf:64:d6:
         e9:66:aa:14:ac:f0:66:69:32:86:fb:8a:3b:55:f5:74:b8:0a:
         c6:5c:01:ca:a3:0c:a6:7d:f3:ec:2f:7b:a6:53:fb:12:0a:7a:
         45:54:b1:78:33:f7:71:23:ba:0d:0d:27:12:23:13:33:e6:e4:
         94:fd:a6:75:5a:4c:5a:80:4c:65:4a:dc:6c:b0:d8:e1:be:c4:
         e6:12:91:e9:41:df:84:6a:fc:f7:2b:41:d9:ea:a8:fd:7b:b4:
         95:62:f5:cd:c2:50:a1:d2:be:31:3d:af:19:78:fe:ed:12:e3:
         60:42:4a:73:75:d8:95:4e:7b:47:93:a4:12:e3:2e:fd:ec:cc:
         2b:ff:bc:bd:bb:cd:8c:5a:07:1c:50:5a:f0:8d:3a:a5:ae:26:
         0a:f5:00:a0:57:60:2f:8d:26:ff:0a:4e:0a:2f:31:c9:dc:70:
         48:4a:88:fd:db:17:d7:61:f9:7a:5c:c5:49:82:50:72:ee:e1:
         17:4c:9c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:59 2026 by rpki-client