This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
File:                     TlqjjuoyTivXq2Qn51lqn6QdsOM.mft (raw, json)
Hash identifier:          OX77YctJnmvrfIwxQ6bNcY9ZHpuPAq2PgJO5eP0alIQ=
Subject key identifier:   AE:83:02:25:CA:69:A2:63:DB:1E:F4:A0:CA:BA:4A:40:50:64:08:24
Authority key identifier: 4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
Certificate issuer:       /CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Certificate serial:       019C427D552A9F20E8E815EAC680B23A3351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 13:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:35 +0000
Files and hashes:         1: TlqjjuoyTivXq2Qn51lqn6QdsOM.crl (hash: U0JBpfEzvzH5H2vvLpR04J7mr4I1u2yZdG1gRPDuHNg=)
                          2: pFIm_tXx1_Q7aLzLZyGzh6liU0E.roa (hash: 167B7I1VfPre9EHJG3x87zKw2fq6pm8HbBnX2xQN/R0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:55:2a:9f:20:e8:e8:15:ea:c6:80:b2:3a:33:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
        Validity
            Not Before: Feb  9 13:00:35 2026 GMT
            Not After : Feb 10 13:00:35 2026 GMT
        Subject: CN=ae830225ca69a263db1ef4a0caba4a4050640824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:58:d0:72:cd:97:c8:84:23:6a:ab:22:19:52:
                    34:dd:ca:e8:5a:0a:23:b4:2f:4b:75:68:26:5d:58:
                    67:6b:7f:d1:7a:bd:3e:8b:de:8b:19:88:41:6c:b9:
                    7c:ef:27:6d:35:10:f6:5f:4e:31:2d:7e:7a:d5:aa:
                    d8:b1:9a:4b:26:a8:cd:82:1b:bd:12:f6:13:8a:18:
                    d5:ad:dc:42:6d:5e:73:e4:76:d1:53:cd:45:71:9b:
                    19:66:8e:9a:13:7a:de:63:a2:f4:0c:04:ec:1d:90:
                    6a:88:95:c2:8b:11:43:3c:e5:d2:b1:7f:e1:62:bf:
                    72:44:ed:2c:c7:c8:f7:f0:90:f3:4a:5b:26:7f:5e:
                    be:31:15:16:2f:4c:d8:ac:ed:fb:85:00:71:6e:a1:
                    e6:0d:3b:2f:5e:e7:50:03:3a:88:98:80:60:f5:0e:
                    f6:8f:5c:e6:9e:cd:02:23:42:3c:0a:ac:ae:88:b1:
                    0a:9b:c7:23:37:75:f6:c4:3b:38:6d:d5:6c:7e:b3:
                    2c:cb:d5:20:f2:27:1e:3d:91:43:3d:78:1f:3c:9b:
                    fc:98:39:3a:f0:be:f0:39:8a:6c:23:9d:b0:88:ef:
                    0b:7f:45:ae:91:ef:2c:9e:3b:80:c9:44:9f:03:cf:
                    df:38:2a:d0:2a:ae:c8:3a:ed:e1:9a:ba:c4:e3:93:
                    82:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:83:02:25:CA:69:A2:63:DB:1E:F4:A0:CA:BA:4A:40:50:64:08:24
            X509v3 Authority Key Identifier:
                keyid:4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:94:57:83:59:9d:11:05:03:9a:3a:16:33:a8:7a:31:c8:eb:
         fc:a6:b1:e9:e1:1a:de:6a:1e:99:9e:b8:11:6a:f1:ed:1e:44:
         61:b0:16:47:e7:10:0a:12:ba:d7:38:a8:4e:6d:2f:cd:23:a8:
         70:f1:ec:00:5b:92:72:e0:91:7f:c1:9c:70:fe:9a:e7:cd:31:
         34:b1:7e:a9:58:78:88:dd:80:4c:0c:2d:f1:39:d9:1b:30:a2:
         e6:08:c7:6c:73:06:2e:5f:4a:a5:1c:2f:69:d8:9e:0b:f2:88:
         62:bf:41:65:3d:7e:2d:b1:a7:9c:b2:99:d4:b7:4e:2c:c2:92:
         63:d8:be:32:c6:e2:c0:ce:ff:78:ea:e7:98:97:08:fc:64:5f:
         04:63:be:84:ba:45:e1:f7:c5:9f:93:d8:28:73:1f:6b:2e:86:
         22:be:fb:ac:62:a2:ca:bb:54:11:5e:fd:bc:26:96:00:05:3d:
         6f:bb:9a:70:18:64:0a:cb:b6:25:8f:05:33:52:8b:44:fa:b8:
         8b:c0:cd:8c:d2:cc:0a:b2:5d:de:83:e3:a6:05:b2:19:03:58:
         0b:a0:29:76:de:71:eb:e2:54:e8:33:27:25:08:71:f1:16:73:
         a9:c8:90:6f:a8:86:27:d9:0a:5a:3a:85:3a:40:98:2a:c2:aa:
         ed:bb:a1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:34 2026 by rpki-client