This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
File:                     tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json)
Hash identifier:          OWfRAR6oGHwB/gaaiZQz2smDFNEz2OALA2QwrAWRQCM=
Subject key identifier:   F4:BA:F5:86:BC:AF:C9:26:4B:34:15:B8:D4:28:E2:FB:8C:C7:B1:20
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Certificate issuer:       /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial:       019C427E0726C6259364AFEEA172B77B9B6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
Manifest number:          120C
Signing time:             Mon 09 Feb 2026 13:01:21 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:21 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:21 +0000
Files and hashes:         1: KK_vhx-Jl1M2bFbv57SyFM6Oy1Y.roa (hash: zVj3lj20TcX9NC6Ya6/FsxhHDDRzLpQa23Y4dZIhMtI=)
                          2: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: HvOsmxHfP4ZZIIUfbiKuSpaecNovhqDlSaL6KM3W1T4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:07:26:c6:25:93:64:af:ee:a1:72:b7:7b:9b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
        Validity
            Not Before: Feb  9 13:01:21 2026 GMT
            Not After : Feb 10 13:01:21 2026 GMT
        Subject: CN=f4baf586bcafc9264b3415b8d428e2fb8cc7b120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:52:e4:ee:a6:33:5b:60:b7:71:43:fd:b3:
                    6b:99:2b:6a:a1:a9:0b:37:7c:31:23:86:f1:d8:2a:
                    e9:bc:b4:dc:82:4f:99:ae:66:f9:e9:a5:37:97:a5:
                    88:05:62:79:ad:89:16:fc:09:db:21:d6:fa:b6:47:
                    3d:77:67:5f:bd:07:16:35:dd:3a:82:d9:d6:d6:c0:
                    56:e0:69:be:7a:28:95:e0:1a:5e:44:42:ac:f1:f3:
                    54:a2:9d:42:b4:fd:a7:b0:ca:6b:6c:1c:af:bf:83:
                    a6:fd:df:6f:33:38:14:d1:72:5e:ac:2d:f3:cb:2a:
                    65:06:d1:21:b1:92:1e:da:92:d8:81:2f:64:99:e3:
                    04:36:35:3c:34:02:a5:77:f4:ab:22:22:a9:57:8d:
                    63:0a:d4:fb:3b:43:19:ba:1d:03:ec:09:b7:f8:f6:
                    5c:9f:e6:d5:28:e4:e7:41:9d:19:b7:e7:6e:cf:c8:
                    51:31:f7:19:4f:18:11:c8:ca:5c:2e:a0:89:1e:70:
                    8a:60:4d:12:ab:74:f9:44:c0:40:0c:34:ef:4b:d5:
                    06:07:e8:fc:6c:c6:92:63:62:1e:2a:a4:63:6e:0e:
                    f9:b4:10:29:3f:d7:44:0b:4f:af:5d:a5:3c:fb:b6:
                    9e:17:73:32:e6:8f:77:0b:01:dd:fe:a2:9c:99:f6:
                    ce:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BA:F5:86:BC:AF:C9:26:4B:34:15:B8:D4:28:E2:FB:8C:C7:B1:20
            X509v3 Authority Key Identifier:
                keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:06:9c:e9:58:9e:69:2a:49:58:84:3e:85:20:31:86:27:b9:
         91:a0:72:4c:5b:f6:54:48:ac:79:10:4c:52:1a:ce:fe:7c:a9:
         31:a0:d7:78:cc:51:23:1c:2c:bb:b0:a4:ea:48:7b:90:d7:43:
         da:27:49:86:8a:7f:b8:39:7f:c2:10:87:9e:86:f0:e3:67:48:
         ac:3b:aa:d3:c4:6c:99:f8:d0:e6:15:09:58:ee:0a:1f:f9:c2:
         bd:4b:d4:48:ce:c9:93:44:86:7c:09:07:96:e8:5c:02:7a:e7:
         e2:b4:e9:42:9e:eb:ae:d9:16:26:4c:f9:31:2e:17:f6:8e:9a:
         db:3c:6b:09:0e:e2:3c:c9:55:fe:fa:f5:37:b5:a6:ac:67:f1:
         81:26:f9:f6:23:7d:a4:53:33:c5:76:5c:24:56:04:06:28:79:
         12:04:d4:54:ba:82:fd:1f:ce:9b:6e:a8:aa:27:70:b7:18:ce:
         e7:3c:ef:7e:ae:10:ee:ed:bb:23:d7:03:e8:44:8e:c8:63:9f:
         1c:c8:0c:8e:bc:58:ee:27:1d:b2:72:56:b5:70:08:c7:b4:91:
         ae:57:28:1c:f7:6c:8c:41:9b:af:36:c3:66:7c:e8:ab:f9:9e:
         3f:60:d6:61:1b:8d:15:bf:0e:3f:af:80:dc:0b:73:04:bd:07:
         2b:36:0d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:13 2026 by rpki-client