This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
File:                     T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft (raw, json)
Hash identifier:          CfYS4qyIUsnRxefjDD47nEOyVZtSqZWWO8cRiJy9JRU=
Subject key identifier:   65:57:69:81:ED:9F:24:B2:B7:AF:0B:D7:D0:61:3A:D3:D5:59:31:C4
Authority key identifier: 4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
Certificate issuer:       /CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Certificate serial:       019C4322F4C3055EB4C40AA66B4AE9C1D11F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 16:01:30 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:30 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:30 +0000
Files and hashes:         1: T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl (hash: EECpcgTbqEWnjiSoXAOffMw+GnsHoOPMEN0K2CilMf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:f4:c3:05:5e:b4:c4:0a:a6:6b:4a:e9:c1:d1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
        Validity
            Not Before: Feb  9 16:01:30 2026 GMT
            Not After : Feb 10 16:01:30 2026 GMT
        Subject: CN=65576981ed9f24b2b7af0bd7d0613ad3d55931c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:17:70:5f:05:ff:f3:73:a3:43:09:b9:72:
                    c7:df:72:26:2e:3f:29:d0:a3:fe:0e:af:e4:18:e6:
                    f4:11:31:a7:05:f7:86:14:ef:85:6a:64:ce:f9:ee:
                    b6:a5:88:55:f4:bc:fe:7d:86:79:b2:bd:b8:e5:f9:
                    23:8e:3f:90:94:3e:d9:46:24:eb:d0:ed:7d:09:df:
                    6a:8c:83:d6:ac:76:6f:72:e4:8c:ba:d3:b9:f5:fd:
                    c8:8f:dd:9b:47:bc:ed:30:2e:ca:c7:92:37:d1:f1:
                    de:8e:55:5a:ab:c0:09:80:1c:d8:a7:d8:57:1c:f9:
                    52:ad:ce:c6:50:11:27:49:b7:4a:59:05:28:46:d6:
                    ac:bb:8d:a4:c8:a5:60:c6:69:01:88:97:d6:f5:6a:
                    13:6c:5b:5e:42:d4:98:41:dc:39:24:73:e9:b5:e2:
                    f3:58:9a:4c:25:19:c2:dd:5c:de:2e:5a:7f:f0:ed:
                    7a:64:9a:d3:e1:f0:35:a7:4d:8a:6b:02:b9:e7:79:
                    33:ec:4f:dc:77:f2:92:1e:ad:43:84:8b:e9:0d:b1:
                    7b:a8:e7:02:35:30:91:f5:f9:ce:4e:d7:21:23:da:
                    91:98:51:c9:33:39:bb:51:98:05:ce:03:e0:05:58:
                    cc:1c:5c:32:11:74:7d:c7:55:51:b3:e3:39:f9:95:
                    dc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:57:69:81:ED:9F:24:B2:B7:AF:0B:D7:D0:61:3A:D3:D5:59:31:C4
            X509v3 Authority Key Identifier:
                keyid:4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:30:a5:ad:9e:55:d9:9d:0a:94:62:5f:b8:41:17:e4:4b:
         53:32:5e:91:fd:9f:b5:4c:59:4a:68:44:5b:f4:c1:d7:d9:31:
         51:94:ba:91:17:61:b6:fa:ee:b8:af:97:43:90:93:85:4a:23:
         2e:ea:c7:ba:03:28:7f:8b:c1:ee:4c:e9:3a:05:31:fa:63:b9:
         e7:df:be:17:6b:01:2b:43:43:18:d6:a9:fc:b9:b0:51:58:8c:
         94:f4:4d:ef:ad:0c:47:06:59:89:97:39:df:ab:df:f8:f6:fc:
         dd:18:44:dd:9b:94:3c:bc:c5:26:6d:1d:a4:2e:59:bd:87:b8:
         ef:66:29:62:8f:81:e6:f0:f4:9b:7c:c4:a1:24:71:3b:91:5a:
         20:cd:e7:5a:54:fc:eb:e9:04:e6:17:53:7c:68:7a:fa:fa:58:
         2f:9a:0c:e2:a7:cd:b5:09:24:60:d4:66:99:aa:3e:7b:2f:cd:
         d9:ce:8e:e7:45:40:8f:50:75:10:1e:10:2e:d8:29:1f:21:11:
         4e:06:ae:c8:bb:d7:4b:5e:03:1f:9c:e1:90:c6:fc:4f:ae:ef:
         19:ac:a6:ec:1c:41:bb:e6:7c:9b:85:6b:a0:6c:d1:49:5c:89:
         a8:04:42:3c:c2:70:69:29:5a:3a:3b:76:47:5e:42:3b:f6:5f:
         3e:af:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:30 2026 by rpki-client