This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
File:                     TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft (raw, json)
Hash identifier:          NTIQexf3lIWQ9Ukh+KX5U+wH+6owyd/kHANfV7vzcqs=
Subject key identifier:   A9:7B:62:42:29:B7:B6:35:9C:B6:E8:64:8E:33:D7:DF:14:73:CA:6B
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Certificate issuer:       /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial:       019C42465799D0525334D28F667CF5D9D49C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
Manifest number:          0D39
Signing time:             Mon 09 Feb 2026 12:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:32 +0000
Files and hashes:         1: GX1eu_6zpwR6clx_FqqeJBPN_Mo.roa (hash: inOvGcMs2Q+xEP7avmV2EhXxbklbjFv+dUq+zEBdcig=)
                          2: P7kPB37r9r72-mJgBxJftOWF64M.roa (hash: 2/cBpl7XQw4f9+xbj+/dYArmRAIbH19CMO7EVq172A8=)
                          3: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl (hash: SC3tP3p2tpPYiHhs4bs15w4pS/4kl87ThX5/OvMM0Yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:57:99:d0:52:53:34:d2:8f:66:7c:f5:d9:d4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
        Validity
            Not Before: Feb  9 12:00:32 2026 GMT
            Not After : Feb 10 12:00:32 2026 GMT
        Subject: CN=a97b624229b7b6359cb6e8648e33d7df1473ca6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:e8:08:a2:df:b6:25:ed:01:2f:07:cb:13:
                    61:11:94:c1:a3:ad:3f:11:2b:32:22:97:34:ce:de:
                    2c:95:43:e3:af:60:03:52:1c:b3:29:cd:04:96:fd:
                    00:e9:95:b9:b1:57:18:6b:4f:0a:db:87:30:a3:e0:
                    53:ac:2c:6d:35:ce:16:c1:81:3f:2f:ad:0e:81:53:
                    6f:30:46:da:a9:af:90:c2:61:2a:f1:09:39:4b:8d:
                    7c:2f:1b:9d:2a:26:97:11:37:38:8e:28:dd:22:07:
                    a1:43:cf:10:9f:7b:4b:0b:c4:73:95:f9:2e:d3:15:
                    24:c9:20:66:b0:47:44:5f:1e:33:80:28:a7:91:99:
                    95:20:5c:36:57:27:ff:3b:29:84:7f:bf:eb:74:a7:
                    8e:a6:4a:5c:6d:7c:99:43:e9:ca:ae:ff:98:c7:ba:
                    c1:cb:d3:c7:65:06:0d:05:c8:82:a0:07:f2:0f:e8:
                    1c:b6:68:39:ab:25:65:a9:57:e1:33:be:96:70:30:
                    43:3a:55:f6:68:7f:3f:9c:58:b9:c3:bd:aa:23:27:
                    4d:49:57:26:fc:65:24:99:e3:82:48:12:d7:f7:01:
                    3f:79:77:e7:e4:8a:92:f6:67:c4:c4:de:9b:63:74:
                    95:72:31:a1:95:6e:e9:f3:08:42:20:e7:1e:86:c9:
                    3a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7B:62:42:29:B7:B6:35:9C:B6:E8:64:8E:33:D7:DF:14:73:CA:6B
            X509v3 Authority Key Identifier:
                keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:76:1c:56:bc:9c:8d:c6:73:8e:ce:aa:75:5a:6e:2a:c3:56:
         f5:38:aa:60:68:6d:0c:45:8d:40:89:ad:c0:ee:35:0f:53:c1:
         40:7c:d0:a2:52:11:e0:28:ca:43:c6:29:43:ef:dd:79:f7:28:
         6f:e9:24:a1:8f:bc:ce:cc:9c:3e:9e:0b:b7:82:2f:1b:f2:56:
         8e:32:16:0b:eb:81:bc:43:ed:31:89:6b:39:f8:ab:2d:c8:25:
         23:7e:ee:6f:63:f4:62:c8:05:43:cf:bd:1c:74:2d:b3:b5:ae:
         28:6a:b7:63:d6:f4:a2:cb:b0:72:bb:a2:f7:cb:c1:b4:d0:d1:
         54:d2:a2:5a:a3:69:d8:4f:8b:19:3f:95:44:79:4f:2d:ed:e9:
         be:a4:25:73:7b:b8:90:d5:80:0d:64:62:14:28:be:4c:69:8f:
         00:ec:98:8e:5c:fa:6b:d0:31:63:2a:61:93:28:74:5f:3f:46:
         7c:e8:01:8b:82:ef:08:4a:d3:0f:0f:57:8d:04:ab:ae:d6:ca:
         6d:a7:71:69:ab:3a:ee:96:84:63:c9:cb:48:10:a3:21:d2:89:
         1e:b5:67:ae:f5:17:7c:b7:de:32:6c:cb:58:db:e5:43:15:07:
         3c:8a:d2:8a:9a:55:95:0b:13:d1:6f:2b:58:2f:ca:57:60:5e:
         36:23:a7:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRleZ0FJTNNKPZnz12dScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNjMxOWZlNzg1OWMzNDJmN2NkOWY3MTEzMDZmNTY1OTA4
MjhkNjAwHhcNMjYwMjA5MTIwMDMyWhcNMjYwMjEwMTIwMDMyWjAzMTEwLwYDVQQD
EyhhOTdiNjI0MjI5YjdiNjM1OWNiNmU4NjQ4ZTMzZDdkZjE0NzNjYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVPoCKLftiXtAS8HyxNhEZTBo60/
ESsyIpc0zt4slUPjr2ADUhyzKc0Elv0A6ZW5sVcYa08K24cwo+BTrCxtNc4WwYE/
L60OgVNvMEbaqa+QwmEq8Qk5S418LxudKiaXETc4jijdIgehQ88Qn3tLC8Rzlfku
0xUkySBmsEdEXx4zgCinkZmVIFw2Vyf/OymEf7/rdKeOpkpcbXyZQ+nKrv+Yx7rB
y9PHZQYNBciCoAfyD+gctmg5qyVlqVfhM76WcDBDOlX2aH8/nFi5w72qIydNSVcm
/GUkmeOCSBLX9wE/eXfn5IqS9mfExN6bY3SVcjGhlW7p8whCIOcehsk6kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKl7YkIpt7Y1nLboZI4z198Uc8prMB8GA1UdIwQY
MBaAFExjGf54WcNC982fcRMG9WWQgo1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEdNWl9uaFp3MEwzelo5eEV3YjFaWkNDaldBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wMWU3ZGYtMTQxMC00OTFmLWE3MWIt
NTU4MzBmOWVkZGU0LzEvVEdNWl9uaFp3MEwzelo5eEV3YjFaWkNDaldBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wMWU3ZGYtMTQxMC00OTFmLWE3MWItNTU4MzBmOWVkZGU0
LzEvVEdNWl9uaFp3MEwzelo5eEV3YjFaWkNDaldBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3YcVryc
jcZzjs6qdVpuKsNW9TiqYGhtDEWNQImtwO41D1PBQHzQolIR4CjKQ8YpQ+/defco
b+kkoY+8zsycPp4Lt4IvG/JWjjIWC+uBvEPtMYlrOfirLcglI37ub2P0YsgFQ8+9
HHQts7WuKGq3Y9b0osuwcrui98vBtNDRVNKiWqNp2E+LGT+VRHlPLe3pvqQlc3u4
kNWADWRiFCi+TGmPAOyYjlz6a9AxYyphkyh0Xz9GfOgBi4LvCErTDw9XjQSrrtbK
badxaas67paEY8nLSBCjIdKJHrVnrvUXfLfeMmzLWNvlQxUHPIrSippVlQsT0W8r
WC/KV2BeNiOnrw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:54 2026 by rpki-client