This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
File:                     TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft (raw, json)
Hash identifier:          HLk+BS5pUxqP65588GWvirDniJp+r1bkvIX5lLZITcM=
Subject key identifier:   A3:24:44:BF:37:E8:FE:55:3A:EC:4B:1F:92:A9:EF:F8:74:5D:39:A9
Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
Certificate issuer:       /CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Certificate serial:       019C4358CDB0D1A171F4A0B909DEB0E98969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 17:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:19 +0000
Files and hashes:         1: TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl (hash: SbOlTRo8sJQnWtRn8gUmh1/M2jehHxkJoMIhoSr9i8Y=)
                          2: gAYzl20xItIY_WqWVJ6f2CElDXs.roa (hash: 1hpv0IAqRBDo5f2z8yJyt+CBplx7y1IUryRuOQtPjKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:cd:b0:d1:a1:71:f4:a0:b9:09:de:b0:e9:89:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219
        Validity
            Not Before: Feb  9 17:00:19 2026 GMT
            Not After : Feb 10 17:00:19 2026 GMT
        Subject: CN=a32444bf37e8fe553aec4b1f92a9eff8745d39a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:fe:00:07:b8:69:5a:a2:31:2e:f5:de:37:
                    56:cb:c5:34:8c:89:5c:e1:40:24:38:e6:5e:c9:42:
                    9c:4b:6c:ba:24:3d:11:54:1c:b2:cd:74:36:f9:d4:
                    62:dd:23:09:0d:83:c7:36:38:c4:3f:3c:62:a8:8e:
                    22:d1:60:54:8d:41:a4:f7:5b:30:5c:1d:77:f9:dd:
                    a8:3b:e1:24:9a:d0:e1:2d:00:74:cd:b8:bd:55:6a:
                    8e:6f:13:d4:a5:99:3b:41:c7:6e:27:e4:94:46:79:
                    bc:78:65:f3:2e:f7:38:b0:36:5c:c6:82:0d:b5:70:
                    86:d2:40:b1:5a:86:09:b4:8e:18:0c:3a:e1:af:b5:
                    05:d2:b9:23:a7:07:97:dd:95:04:6e:75:37:ec:38:
                    1b:82:81:5f:9c:e9:da:c8:17:df:a9:28:c2:9a:9b:
                    69:8f:59:dc:fd:ff:ca:ae:2c:b9:93:84:e7:84:ea:
                    ac:04:8d:04:04:fb:89:f9:7f:9f:fa:de:8d:1d:0e:
                    27:e4:34:46:19:23:ae:4c:0f:c9:e7:f0:ab:9a:07:
                    f2:1e:33:b7:be:1a:ff:b9:a7:ce:a5:2a:04:f3:0c:
                    1d:df:a5:73:4a:e8:35:cf:98:07:d5:e0:89:54:39:
                    c7:39:a8:56:ca:0d:ac:d1:1b:13:ce:58:46:e4:db:
                    89:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:24:44:BF:37:E8:FE:55:3A:EC:4B:1F:92:A9:EF:F8:74:5D:39:A9
            X509v3 Authority Key Identifier:
                keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:62:92:ee:67:07:68:5f:19:eb:9a:3f:70:1a:81:85:73:b6:
         d4:de:53:4a:98:fe:3a:8e:47:23:1d:14:7d:ba:9d:10:41:b8:
         c7:bb:af:d7:23:59:cc:52:42:5b:85:58:d9:dc:52:bc:b9:fe:
         a2:e9:3c:8d:63:77:ed:ae:66:5c:f0:d0:1f:ac:34:13:a1:c1:
         6c:9b:33:7a:84:8b:0f:ad:44:90:f3:d1:19:e9:cc:94:0c:0a:
         9f:c5:da:01:3d:fe:34:2a:25:38:6c:e2:d5:bc:15:c3:8b:f5:
         0c:10:94:c8:4b:0b:b2:1d:83:61:89:63:11:7f:44:e6:26:8b:
         5c:b9:d5:a1:e8:0d:f0:49:c0:1f:3e:f0:42:d7:5c:7a:6e:eb:
         54:59:76:27:e3:67:09:99:9b:c2:b6:f0:a7:7c:96:98:33:55:
         59:07:69:0e:e7:68:c3:2d:a7:f8:44:29:59:e8:42:10:8b:a2:
         47:08:dd:ea:18:3e:d4:b8:a2:64:fe:cd:91:1b:f5:b8:97:3c:
         0e:b7:ec:86:d5:50:19:b8:e8:4f:92:5b:5d:c8:c8:e9:75:16:
         2d:72:c8:cf:91:4c:d2:e9:90:ee:0e:64:1d:03:43:50:d2:ac:
         5c:5f:14:1b:27:da:0b:1a:61:40:99:07:ca:c1:69:cb:16:97:
         60:e0:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:19 2026 by rpki-client