This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
File:                     tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft (raw, json)
Hash identifier:          21hfRFl3mjnBDMoQpOqViUPcHlode8jtKG62M4jYjKw=
Subject key identifier:   BD:B0:7D:89:83:DC:74:EB:07:4B:AD:69:7A:B2:51:0B:6E:59:68:E0
Authority key identifier: B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
Certificate issuer:       /CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Certificate serial:       019C4322C844C4ED31D989D845A08B53F765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 16:01:18 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:18 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:18 +0000
Files and hashes:         1: 9mkH4IzMoq3DwoNvnvYH9-YO79c.roa (hash: 3KE8jl9vgjE4AA+K3LRuupb+vjXe25NtIAJuw2cNEMk=)
                          2: tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl (hash: Jts56sSsZqoC2t+LuENSpC/15wulHJUX00SvViXPeDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:c8:44:c4:ed:31:d9:89:d8:45:a0:8b:53:f7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
        Validity
            Not Before: Feb  9 16:01:18 2026 GMT
            Not After : Feb 10 16:01:18 2026 GMT
        Subject: CN=bdb07d8983dc74eb074bad697ab2510b6e5968e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:86:49:56:74:12:b0:2b:c0:0e:4e:ea:f3:
                    ec:c5:87:f9:0f:89:e6:f5:d8:7c:44:91:db:13:dd:
                    b4:a4:97:c9:e0:b0:eb:e8:2d:e8:95:dc:21:b5:b4:
                    de:75:d7:39:69:b4:13:83:8b:46:c8:7d:a3:19:6b:
                    a8:ce:2a:01:5f:4e:55:b6:24:c7:df:f1:14:11:aa:
                    4d:85:74:a7:88:3e:a1:64:71:a9:91:33:eb:88:dc:
                    70:ac:a7:ea:e3:f4:ec:9f:72:2d:5c:11:48:77:38:
                    b0:ee:16:06:83:33:32:e9:9d:80:1e:2d:bc:8a:74:
                    db:d2:77:01:e3:48:d5:6b:c2:fb:ea:6a:88:53:ae:
                    63:82:7b:c9:f0:86:8e:09:e7:a7:c8:cc:39:87:d1:
                    4d:0c:ab:66:58:28:f3:8e:5d:81:69:73:bb:7b:07:
                    d8:12:ac:90:96:e9:5e:b4:bc:93:69:1c:c8:a2:98:
                    20:e5:2a:68:9b:77:c1:e9:f0:fa:90:bb:bd:f8:29:
                    1b:11:7c:b9:13:13:0e:c6:b2:dd:fd:d6:d8:57:e5:
                    16:36:7d:0d:9e:c1:cc:42:7d:ab:4b:72:3a:9a:58:
                    29:44:bf:07:9b:54:95:a4:c9:3e:74:87:60:25:0f:
                    51:59:1b:51:ec:4f:1d:22:0b:48:de:95:3a:96:0f:
                    7d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B0:7D:89:83:DC:74:EB:07:4B:AD:69:7A:B2:51:0B:6E:59:68:E0
            X509v3 Authority Key Identifier:
                keyid:B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:91:61:48:51:33:9a:65:93:8a:cf:55:6a:4c:df:36:41:3e:
         f8:c0:9c:5c:49:a7:c0:e7:96:6a:7c:fc:78:59:2f:bc:86:38:
         32:2f:70:35:9c:73:4b:d7:5c:ca:eb:3a:8b:d8:67:d7:82:52:
         14:96:e9:45:1b:32:fe:29:29:ce:0a:de:9b:ef:f9:08:8e:1c:
         18:ad:3d:a8:e7:80:d5:2c:d9:d4:dc:d6:d3:f2:b2:f0:97:1c:
         0e:85:87:95:7c:3d:3b:9a:bd:49:d4:32:96:69:bc:4f:06:1a:
         23:54:cd:fe:77:7a:57:72:2b:7e:0d:2e:30:fb:be:74:08:d7:
         97:2f:45:6c:76:d0:eb:42:ed:1d:c8:de:d8:fc:3f:50:24:c3:
         4b:6a:9e:ac:f1:73:7a:8a:45:85:c6:41:ba:04:7c:88:3f:a8:
         5f:f1:67:60:36:15:30:ff:54:70:8a:c8:8c:b4:e4:4a:4e:a4:
         d3:a4:3b:ab:e4:65:2f:e1:d6:bd:5b:14:e7:5a:d0:2e:c7:c8:
         73:3d:0e:79:16:93:c5:a2:dc:8e:29:b6:20:f1:15:75:97:4c:
         50:a0:aa:eb:37:06:be:0a:35:08:e2:5c:a2:d4:bf:30:f6:a8:
         7e:96:e6:e2:62:f8:fe:c8:08:99:c5:18:bd:3e:00:5e:92:f4:
         50:41:27:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:16 2026 by rpki-client