This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
File:                     TTuCKQwugJCSSp79nFF8oUpcNwQ.mft (raw, json)
Hash identifier:          YFs83PL3uJr0nYJePKv0Wr0ibSDXHlisnD4503hd1KU=
Subject key identifier:   2D:59:09:63:AF:71:10:9D:A7:67:EA:70:88:02:67:F7:A4:E1:6D:DF
Authority key identifier: 4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
Certificate issuer:       /CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Certificate serial:       019C427D708DD764902B178C1C5C5EDA0258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 13:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:42 +0000
Files and hashes:         1: QwYt5JGoziBuUynxaO7UwUNh6UU.roa (hash: 0qGrapZb7+jKIAgr/PeajOHIyrqRSG/2Cq6ydp/6ysU=)
                          2: TTuCKQwugJCSSp79nFF8oUpcNwQ.crl (hash: F3UFneMKuQx9aSALm4IwMMdD7btXUkQh6Er14Lvga8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:70:8d:d7:64:90:2b:17:8c:1c:5c:5e:da:02:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
        Validity
            Not Before: Feb  9 13:00:42 2026 GMT
            Not After : Feb 10 13:00:42 2026 GMT
        Subject: CN=2d590963af71109da767ea70880267f7a4e16ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:44:75:dd:31:d9:19:bd:d3:8e:9a:07:e1:
                    59:b7:84:ba:2c:b6:94:0e:a9:ee:1c:81:66:70:25:
                    de:76:b0:47:8e:4d:8e:ee:88:99:ed:fc:48:ee:08:
                    8e:fb:60:18:7e:78:53:fa:0b:a3:c2:30:c6:66:45:
                    89:c2:3e:8a:73:6d:a2:83:26:bd:30:54:25:d3:0e:
                    7e:d2:85:b0:ec:11:4c:f3:16:b5:b2:23:c6:57:92:
                    9f:01:a9:57:09:14:07:2e:d9:27:3e:82:e2:23:c2:
                    fb:6d:e6:dd:5c:da:0e:26:73:db:35:e3:ea:88:75:
                    71:96:fe:85:55:e7:df:7c:eb:2d:dd:a8:bd:e7:c9:
                    fb:94:22:23:cd:77:b7:6f:9f:e7:a6:b4:d5:48:22:
                    4c:d1:d6:6c:24:cf:3c:b2:83:73:52:55:eb:1b:21:
                    1a:31:69:46:fb:21:2f:b2:06:62:92:5c:db:57:4a:
                    77:54:47:69:16:c2:7c:19:66:d7:93:83:52:2e:6c:
                    9a:62:1a:00:90:77:fb:95:f4:48:37:91:68:8a:16:
                    6b:36:ce:fc:d7:ea:1f:83:81:08:ba:f8:9f:f4:f2:
                    8f:fa:98:a6:64:b9:14:45:68:d4:c0:40:42:f8:61:
                    12:2a:ba:28:7d:5c:b5:93:33:d0:60:7d:bb:75:28:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:59:09:63:AF:71:10:9D:A7:67:EA:70:88:02:67:F7:A4:E1:6D:DF
            X509v3 Authority Key Identifier:
                keyid:4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a1:31:b9:90:31:cb:df:4d:b0:47:95:2e:47:3b:79:19:23:
         83:9c:7a:0f:21:5e:51:e9:20:29:cf:50:7d:dd:0f:29:42:7d:
         ab:35:03:24:06:25:38:b5:43:c8:29:ed:cf:95:fd:88:f2:6a:
         1f:7b:26:ba:90:32:85:87:7d:33:5f:f2:6f:9d:48:22:05:a3:
         c6:b5:64:85:f2:4c:8c:6d:e8:d7:ea:71:50:cb:f4:43:20:82:
         98:f0:5e:8b:1a:fa:b8:60:3d:60:e5:cd:8a:3b:a2:0e:d7:75:
         13:ac:f4:a3:de:98:e9:7f:c4:21:0e:fb:8e:de:e9:ef:35:35:
         d4:f8:4e:56:66:04:03:e7:26:02:ff:4f:2d:8c:e8:96:fe:bb:
         21:3f:eb:42:72:72:cc:57:80:07:d9:f8:db:c8:5b:c4:4d:94:
         21:99:9f:b7:55:9d:96:10:c4:28:20:84:25:73:9d:64:6f:22:
         39:70:5c:54:b4:5b:58:4e:e7:52:4d:ff:fe:9d:66:c5:d6:05:
         1b:94:38:14:54:6b:14:2d:5b:ea:3f:fd:f7:77:c4:0d:25:98:
         72:17:b7:3a:f7:9b:50:0d:a5:e3:19:55:e7:0d:ee:3a:3b:6c:
         92:c2:12:f3:60:c5:d3:93:10:d5:c4:0c:5d:b2:e1:e1:b7:7e:
         70:c6:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:28 2026 by rpki-client