This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File:                     Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier:          WhE3yLDIWSHo+sVIG2gg15ehN83WY2ECoSM+RO+rSM8=
Subject key identifier:   90:B6:04:EF:4D:74:0F:29:4A:48:3D:E1:C7:D2:12:F4:AD:77:27:C6
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer:       /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial:       019C41A1F42EC63EB7300DA3D574E71B4D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 09:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:58 +0000
Files and hashes:         1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=)
                          2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=)
                          3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: 9RQZ4+UgszYZxN7cfeH4Y/KM0BDhNiZcE7LOqi/EiI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:f4:2e:c6:3e:b7:30:0d:a3:d5:74:e7:1b:4d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
        Validity
            Not Before: Feb  9 09:00:58 2026 GMT
            Not After : Feb 10 09:00:58 2026 GMT
        Subject: CN=90b604ef4d740f294a483de1c7d212f4ad7727c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:6d:8e:10:fd:f4:eb:8f:76:3f:78:64:ce:
                    eb:d5:d5:6c:8c:f8:12:59:a5:05:f9:7f:43:0c:1b:
                    ef:0a:22:30:ca:d7:0d:61:c2:76:c9:5d:d2:3c:22:
                    f3:2c:3b:74:73:43:87:a2:f1:b9:52:4c:fb:c5:a0:
                    b4:4f:ad:40:9f:17:d7:11:10:8a:9c:46:e6:60:89:
                    ed:a8:b8:4c:55:76:6a:eb:01:b8:a4:bc:1f:bc:e7:
                    54:d8:b9:2e:22:5f:b6:1c:23:64:f8:b5:36:8c:54:
                    dc:98:81:3a:89:00:74:4a:14:63:80:9c:b4:12:5b:
                    6b:b9:df:cc:de:86:63:bc:c2:7b:ec:eb:4e:84:f9:
                    8d:01:d1:b3:6c:fa:eb:f1:f8:5a:d2:3d:7a:64:27:
                    f9:15:b8:2e:03:61:90:14:98:18:f0:ec:13:d1:13:
                    f5:af:d8:78:81:39:8a:bc:5e:92:37:93:8d:aa:32:
                    01:6d:52:99:01:e4:7c:49:6f:5f:ef:93:54:1e:4c:
                    35:4a:ec:05:31:54:f1:7e:19:53:51:8a:83:da:cc:
                    01:e6:af:ab:2d:0e:ac:c7:51:76:9b:0d:c5:94:20:
                    73:fa:57:8d:3a:91:0b:97:f0:fe:e1:2a:b1:5a:bb:
                    ec:24:97:ee:7b:f2:8e:35:52:92:c0:5b:5a:62:a0:
                    bb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B6:04:EF:4D:74:0F:29:4A:48:3D:E1:C7:D2:12:F4:AD:77:27:C6
            X509v3 Authority Key Identifier:
                keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a9:27:ee:1f:48:32:7c:75:c7:5d:e8:31:5e:d8:f6:ee:ca:
         90:dc:9a:e9:66:63:ec:ec:cf:d3:60:56:16:b1:fd:f3:22:cc:
         21:83:cf:e2:88:e0:4a:42:b4:42:f4:6a:6a:90:84:91:0d:a1:
         58:14:df:b5:c6:12:82:32:30:5f:b6:2d:ae:a2:ba:57:a9:ca:
         86:8d:c3:12:f1:10:11:4e:19:fe:53:19:99:e8:89:cc:1b:63:
         4c:62:3a:f5:31:01:a0:31:19:77:97:c8:9e:ee:09:fe:3c:6f:
         61:26:d3:fc:72:88:f5:5a:79:72:6a:ad:dd:0d:f1:97:1b:50:
         55:7c:02:07:f4:7e:a3:2d:c9:6a:28:12:2e:7c:f5:14:07:1e:
         82:83:1a:c7:d0:ff:81:39:b9:3b:d6:2b:2f:8f:cb:35:12:b2:
         e9:b2:b0:74:93:d8:55:9e:39:c0:5b:6c:03:0d:93:e5:68:76:
         ba:f0:99:ef:78:22:cb:d7:19:78:b7:6d:cd:37:4e:54:d8:16:
         06:0e:9e:a4:40:6b:13:10:82:57:94:46:44:d5:3e:04:1a:da:
         16:27:82:69:ac:76:5b:98:c3:7b:3a:14:d2:16:90:f2:37:2f:
         39:fe:34:f5:b4:72:6d:05:56:5c:30:d3:b9:26:e7:c2:91:51:
         57:8e:74:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:28 2026 by rpki-client