This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
File:                     TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft (raw, json)
Hash identifier:          ewoblW1dI1VHVmIzj3/driq+wZP7RbsGW4RyF0ksyQE=
Subject key identifier:   AB:01:A0:30:C9:3B:6B:D5:65:0B:5A:58:1F:AC:3F:BB:20:FB:8E:3A
Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
Certificate issuer:       /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Certificate serial:       019C42B429437819D528B4A4F40B374E421D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
Manifest number:          120A
Signing time:             Mon 09 Feb 2026 14:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:28 +0000
Files and hashes:         1: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl (hash: kfsAY7txNLAaEEjAkpDOWoI3PG/LJXoVOWukPIrhaFQ=)
                          2: ayBRUQ4XFp8ceqFrnVdH8JT32Pw.roa (hash: ydKdrH0HwWllY5B18eol6PUwxMhU2Jq/931IBDQs9IM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:29:43:78:19:d5:28:b4:a4:f4:0b:37:4e:42:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
        Validity
            Not Before: Feb  9 14:00:28 2026 GMT
            Not After : Feb 10 14:00:28 2026 GMT
        Subject: CN=ab01a030c93b6bd5650b5a581fac3fbb20fb8e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:14:eb:3d:1f:15:f2:d4:f9:31:61:67:da:52:
                    c7:40:bb:38:d9:e9:8b:4f:be:2c:46:8d:df:9c:45:
                    0c:bd:e0:bc:ce:e2:56:ff:ca:67:36:24:57:31:b2:
                    65:8a:3d:e8:49:5c:7f:51:dd:a0:e9:ce:72:09:fb:
                    13:83:18:5f:aa:c7:c2:0b:c7:4a:f2:6f:84:b6:b8:
                    fd:4d:38:d9:a7:64:01:81:c2:67:15:99:1f:9b:34:
                    c1:2c:37:08:c7:eb:38:23:89:3e:7b:b2:51:fd:72:
                    57:90:ef:95:07:e7:99:4e:df:6e:ba:46:71:3b:5f:
                    b1:6e:47:36:f0:d3:1e:e4:47:40:4d:0a:e4:e9:fb:
                    d2:9c:e8:1b:16:25:f2:ac:cd:e5:0c:28:51:bd:25:
                    bc:40:eb:94:0d:73:12:ef:65:0c:cf:28:91:31:a0:
                    88:14:b9:cb:01:22:61:72:95:f7:bf:1f:c2:8d:c7:
                    dd:8f:34:df:68:b4:32:18:e4:9c:51:8f:67:34:53:
                    74:05:ea:09:af:5b:e3:33:bc:62:36:a3:e3:c9:2f:
                    ea:30:75:2a:11:11:03:b8:d5:0a:fe:eb:8a:ea:3e:
                    ad:41:cb:f4:ae:dc:0a:14:26:d9:43:b6:21:11:4b:
                    4e:ae:d9:c8:14:e5:a9:3e:cd:f7:3f:f2:d1:35:77:
                    91:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:01:A0:30:C9:3B:6B:D5:65:0B:5A:58:1F:AC:3F:BB:20:FB:8E:3A
            X509v3 Authority Key Identifier:
                keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:62:32:eb:7c:da:71:42:dd:5f:fe:8e:79:44:ca:9e:8a:0c:
         56:e2:bf:f4:57:b0:35:3f:b4:af:f3:2a:a8:cc:a4:d9:4b:7c:
         58:cd:e1:1a:5f:53:34:6c:e2:54:e7:40:7b:99:e0:98:dc:54:
         4f:0f:56:3b:e4:49:b5:bf:b2:10:e7:ac:b6:07:54:f7:93:c4:
         b7:d4:73:0e:03:06:e5:e2:b5:c6:4f:99:e2:f1:9c:91:de:10:
         5d:16:f1:6c:16:27:31:5b:d6:94:a9:1f:64:ce:93:c2:93:ac:
         65:f8:a0:e5:c5:7e:1b:a5:86:05:2a:81:35:59:3f:6e:3e:2e:
         94:b1:3a:ae:33:fb:bd:55:1f:00:4f:47:8a:ce:fd:9e:66:31:
         8e:a6:49:61:f1:6a:6d:25:86:23:d0:f5:ce:9d:f5:f5:15:52:
         46:a1:99:58:49:8d:ed:6d:10:3e:a3:83:23:55:af:78:7f:67:
         14:59:e9:0c:d2:af:b3:ba:1a:c5:94:f7:6d:1f:22:33:26:1e:
         39:b7:ce:7d:ef:dc:3d:1d:fb:29:63:0a:a4:4b:80:12:33:26:
         b6:1b:53:2d:ee:d3:9d:00:64:4c:2f:69:cd:b9:e6:9e:7f:a0:
         0f:53:bd:88:98:c0:09:aa:05:7c:e7:80:21:ba:c5:ee:20:87:
         50:1a:ef:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtClDeBnVKLSk9As3TkIdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2Y0MjhmZDk4MzRjZDVlYzliYjE2MGY4YjZkY2Y0NDZl
ZjVkOTMwHhcNMjYwMjA5MTQwMDI4WhcNMjYwMjEwMTQwMDI4WjAzMTEwLwYDVQQD
EyhhYjAxYTAzMGM5M2I2YmQ1NjUwYjVhNTgxZmFjM2ZiYjIwZmI4ZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xTrPR8V8tT5MWFn2lLHQLs42emL
T74sRo3fnEUMveC8zuJW/8pnNiRXMbJlij3oSVx/Ud2g6c5yCfsTgxhfqsfCC8dK
8m+Etrj9TTjZp2QBgcJnFZkfmzTBLDcIx+s4I4k+e7JR/XJXkO+VB+eZTt9uukZx
O1+xbkc28NMe5EdATQrk6fvSnOgbFiXyrM3lDChRvSW8QOuUDXMS72UMzyiRMaCI
FLnLASJhcpX3vx/CjcfdjzTfaLQyGOScUY9nNFN0BeoJr1vjM7xiNqPjyS/qMHUq
EREDuNUK/uuK6j6tQcv0rtwKFCbZQ7YhEUtOrtnIFOWpPs33P/LRNXeRCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsBoDDJO2vVZQtaWB+sP7sg+446MB8GA1UdIwQY
MBaAFEw/Qo/Zg0zV7JuxYPi23PRG712TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEQ5Q2o5bURUTlhzbTdGZy1MYmM5RWJ2WFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85MmJlNmEtOTJjNS00NTM3LWFjMzIt
MTM5NTM2OTUyODk2LzEvVEQ5Q2o5bURUTlhzbTdGZy1MYmM5RWJ2WFpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85MmJlNmEtOTJjNS00NTM3LWFjMzItMTM5NTM2OTUyODk2
LzEvVEQ5Q2o5bURUTlhzbTdGZy1MYmM5RWJ2WFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGIy63za
cULdX/6OeUTKnooMVuK/9FewNT+0r/MqqMyk2Ut8WM3hGl9TNGziVOdAe5ngmNxU
Tw9WO+RJtb+yEOestgdU95PEt9RzDgMG5eK1xk+Z4vGckd4QXRbxbBYnMVvWlKkf
ZM6TwpOsZfig5cV+G6WGBSqBNVk/bj4ulLE6rjP7vVUfAE9His79nmYxjqZJYfFq
bSWGI9D1zp319RVSRqGZWEmN7W0QPqODI1WveH9nFFnpDNKvs7oaxZT3bR8iMyYe
ObfOfe/cPR37KWMKpEuAEjMmthtTLe7TnQBkTC9pzbnmnn+gD1O9iJjACaoFfOeA
IbrF7iCHUBrvvw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:56 2026 by rpki-client