This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File:                     TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier:          5Rv/f1PjgK/NPVklqlfs3Ce+GhtrtuKxDITTkwEC6K4=
Subject key identifier:   2B:26:5E:71:3C:42:08:FC:2E:90:4F:EA:59:3B:0E:8F:48:AF:03:09
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer:       /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial:       019C4434D4176A495E77042B9F1E4BA8B330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 21:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:38 +0000
Files and hashes:         1: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: pmoNYnsKkMpa1VmJSmhBn2eZVePnaHXLPTQl2oTE7P0=)
                          2: kJ79XeVCgRV25HKpL8ktREfXHlw.roa (hash: 7gNr/5O63l4yUAcolVBkp40kuH2WYLPsyzzPi2c2gEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:d4:17:6a:49:5e:77:04:2b:9f:1e:4b:a8:b3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
        Validity
            Not Before: Feb  9 21:00:38 2026 GMT
            Not After : Feb 10 21:00:38 2026 GMT
        Subject: CN=2b265e713c4208fc2e904fea593b0e8f48af0309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ee:85:b0:ec:ec:a4:cb:36:39:81:bf:f8:ef:
                    2f:e1:a8:9e:ae:5a:00:d5:47:c2:7e:49:3f:fa:cc:
                    00:db:05:73:dd:ae:fc:15:27:a6:63:a4:4c:dc:f9:
                    a8:fa:50:20:17:9d:de:42:a0:95:fc:c1:93:80:7a:
                    48:a7:23:24:70:c7:60:20:f9:7e:3c:e4:98:e8:56:
                    40:a8:2e:e4:7d:49:1a:32:aa:7e:46:4d:5c:ef:34:
                    5c:ba:9d:bf:54:16:cd:12:c0:55:76:71:2d:68:7b:
                    63:bc:9a:13:1d:ef:4f:db:28:b6:3a:27:71:e6:9a:
                    f9:93:1f:e9:7a:58:98:e4:01:d6:df:70:a0:3c:3d:
                    93:2a:76:a1:fa:ed:2c:8a:2d:67:4b:c2:d1:47:10:
                    2b:92:ae:93:ce:90:11:78:15:79:f0:d8:28:27:a2:
                    37:95:75:62:04:2d:f8:56:ec:30:c9:93:b1:8c:63:
                    e6:ad:fb:96:ae:7d:e4:31:a3:11:92:81:f6:71:ae:
                    4d:8d:fa:d1:72:8e:ff:37:11:24:3f:89:54:21:3e:
                    dc:ba:7d:3f:2f:6e:b9:77:0b:9f:17:cc:0a:af:33:
                    65:74:10:ad:df:06:4d:c5:d9:6b:5f:f0:f7:e5:8d:
                    60:a7:1b:d1:0f:7b:67:71:74:c2:79:41:0a:7f:8a:
                    17:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:26:5E:71:3C:42:08:FC:2E:90:4F:EA:59:3B:0E:8F:48:AF:03:09
            X509v3 Authority Key Identifier:
                keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3c:74:8a:41:40:1d:56:ef:f1:db:34:55:f7:28:88:a4:28:
         8b:93:c7:17:db:49:7e:c4:3c:38:ea:1d:f3:f7:ea:0b:f7:16:
         55:d4:d1:14:3e:cd:08:4c:c9:02:dc:5f:84:ce:dd:b7:30:c5:
         92:73:64:a8:5a:0d:38:40:8d:95:e0:a2:47:e9:68:16:22:dd:
         37:72:2b:49:ea:81:26:7c:45:de:84:b2:62:25:a9:1a:79:61:
         d5:bb:49:a9:fd:52:b2:6b:5b:64:7a:ee:c0:8d:3d:cc:44:59:
         07:d8:92:60:a3:c0:ea:92:fd:6c:92:6b:a2:c4:bd:cb:4d:ed:
         86:37:03:57:05:ea:e3:1c:b9:22:d9:ce:ec:50:a5:aa:33:70:
         91:6f:48:25:b3:93:8d:7b:18:a0:e5:01:21:5a:31:5a:1e:b1:
         fd:06:9f:3d:db:19:48:14:5e:53:ce:c6:ce:05:ca:bb:37:50:
         9f:4d:5e:7f:72:1b:7e:74:a9:3d:da:4a:25:56:a9:e3:39:e3:
         98:6e:de:d4:e4:87:46:02:b9:36:6f:2d:3c:76:a4:45:75:3c:
         6a:dd:9d:e2:0a:0c:ac:14:d0:6d:e2:4b:6a:eb:59:3d:2c:5e:
         c2:50:c7:bc:50:6f:45:d4:ad:ed:7d:1d:c7:ac:78:6b:1b:78:
         d9:f6:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:33 2026 by rpki-client