This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File:                     lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier:          zGgbR875T4GkYmOmLwjnmqYrNTXX0cd0A+3msq+XxOw=
Subject key identifier:   94:96:6E:0C:D7:80:71:8E:82:0C:C8:9E:02:9E:18:14:0B:E4:75:38
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer:       /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial:       019C43C7343DAC4266C380F3F147F4D4103E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number:          17A2
Signing time:             Mon 09 Feb 2026 19:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:54 +0000
Files and hashes:         1: Ma4-s3p8OYdm49PN9wCv4RVM25E.roa (hash: yb+AmQCW6F3wk6Dw7rJ8p1d4IUrMtPkPRMTUiBpQr9Q=)
                          2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: GfmsVYuF8xVP+xLGaIDUKNjT7gdtUc52fR4cJyd2pxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:34:3d:ac:42:66:c3:80:f3:f1:47:f4:d4:10:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
        Validity
            Not Before: Feb  9 19:00:54 2026 GMT
            Not After : Feb 10 19:00:54 2026 GMT
        Subject: CN=94966e0cd780718e820cc89e029e18140be47538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:65:1b:a3:54:f1:8a:4c:d9:ad:21:74:55:0f:
                    cd:ac:03:f9:86:80:17:87:1d:a3:85:c3:c3:3f:8d:
                    e0:db:e3:5d:c0:2b:b3:e4:57:95:01:ff:6e:aa:98:
                    2e:e3:69:71:5a:98:1c:fc:da:b3:78:65:ff:61:4b:
                    04:7e:ad:13:af:b1:1e:5d:df:dc:00:b5:e6:21:c0:
                    d8:4c:85:40:98:f4:e5:7d:14:96:e4:43:57:dc:48:
                    c8:d6:bd:ca:1f:80:fd:6f:0f:4a:47:1a:2f:ed:46:
                    27:b5:74:04:50:c4:66:ed:bc:7a:bd:39:43:d0:e7:
                    4f:1e:12:8e:e1:24:75:f6:42:c2:79:dd:f8:17:98:
                    b9:c9:8c:01:51:a3:dc:8a:59:6e:3d:38:71:79:5c:
                    ee:5d:3d:2a:64:72:bb:0e:2d:87:33:27:5e:3a:5d:
                    ca:56:75:a4:41:5c:06:e6:48:44:08:4a:ac:1d:43:
                    9b:ea:1b:51:ea:bf:5c:64:5e:07:23:ae:07:c4:e7:
                    9a:29:1c:af:df:52:21:44:e7:eb:e7:3a:03:9b:e6:
                    51:70:48:b6:50:50:0f:2d:4b:ec:82:bf:c9:28:f9:
                    40:da:12:52:5b:e4:65:df:83:9c:9e:13:8c:1e:c5:
                    e5:cd:66:62:96:41:8a:cb:84:c1:21:00:20:47:f4:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:96:6E:0C:D7:80:71:8E:82:0C:C8:9E:02:9E:18:14:0B:E4:75:38
            X509v3 Authority Key Identifier:
                keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7d:10:d6:e6:2c:55:04:fc:a4:42:08:13:d7:ad:ac:eb:81:
         76:ca:8a:94:71:ae:57:51:8b:9b:4b:8d:ec:5e:2e:8f:99:85:
         73:26:5a:bc:7d:7f:15:b0:3e:57:4b:09:2d:5a:b5:cf:bb:a4:
         d6:94:10:05:c0:af:5c:6d:87:5f:4b:52:cb:1f:00:84:b5:a9:
         e8:8f:10:25:0a:50:31:fe:a3:a6:bb:96:2f:96:76:77:b9:f7:
         3a:b8:4c:8d:9a:87:ba:db:38:e7:06:9b:ef:73:2d:f5:e7:44:
         0e:97:bd:a3:8c:b2:e6:f2:45:2c:be:3f:56:08:38:b2:26:77:
         8a:f9:1c:6a:45:02:90:b0:d3:e2:58:a8:10:ba:21:40:b3:60:
         2e:44:86:2c:ec:ab:15:9b:27:29:21:c5:8e:9c:70:20:70:64:
         f3:81:e4:ae:8a:14:d6:7e:ec:cf:31:0f:41:af:97:37:08:5c:
         7f:a1:71:5f:22:7a:0e:8e:e3:41:a1:13:59:39:98:a1:b8:cf:
         e4:c3:04:8b:de:41:ba:ce:89:ef:d2:9e:9a:a8:ab:bc:8c:64:
         bb:b2:70:8e:f1:0e:2d:8c:6c:e5:d0:f5:69:d2:0b:92:89:77:
         bf:44:18:58:eb:ba:b1:78:e4:46:0f:2c:55:ff:18:7b:20:2f:
         fc:fd:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:09 2026 by rpki-client