This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
File:                     Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft (raw, json)
Hash identifier:          EeKZVcd/BU0y9PDR9g+lNMmoeuA1g0T+Dd89S+bcNU8=
Subject key identifier:   B3:93:37:32:4C:DF:31:A8:90:85:33:C6:39:A1:DD:36:76:40:20:B4
Authority key identifier: 4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB
Certificate issuer:       /CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
Certificate serial:       019C44349F8ADC1E1277969528C0807A8F6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
Manifest number:          04CC
Signing time:             Mon 09 Feb 2026 21:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:25 +0000
Files and hashes:         1: MakbDClQEXZk8OV6ZS7xXDD_JFk.roa (hash: E9x4U5TtefQsGyGS8Z3PzOncuSjQhMcU5Jvs0RK2f4M=)
                          2: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl (hash: 6OLWqHp6nFmvVo919MaU3uJ0mBsHtUeRFqQe4+ioXds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:9f:8a:dc:1e:12:77:96:95:28:c0:80:7a:8f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab
        Validity
            Not Before: Feb  9 21:00:25 2026 GMT
            Not After : Feb 10 21:00:25 2026 GMT
        Subject: CN=b39337324cdf31a8908533c639a1dd36764020b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:07:ac:6f:f1:27:80:cf:14:2f:4a:79:9d:b3:
                    d0:d6:d1:a6:00:73:6b:44:bf:fb:d0:37:3f:9e:6c:
                    76:0a:74:dc:83:bd:5f:3e:62:30:de:cc:9e:40:3a:
                    44:64:47:9b:5f:21:c7:da:bf:21:5a:dd:36:64:79:
                    23:ae:3b:1b:c3:b3:ac:ac:66:db:c8:47:00:e0:93:
                    a9:ad:ef:81:73:27:7c:fa:2f:a6:d9:7f:fb:88:3c:
                    95:6f:b0:73:c2:61:50:bd:f3:76:ab:78:16:f2:96:
                    c0:d6:6d:7f:42:12:88:87:e5:bc:1f:ab:a2:e2:22:
                    23:9c:5e:f3:78:b7:1c:cc:28:98:df:0e:a1:4d:80:
                    b3:46:98:a5:f1:c3:91:4b:5e:34:7b:ee:04:ce:39:
                    dd:a7:4d:55:e1:72:d3:22:b7:7d:26:13:e9:d5:a9:
                    45:7d:2f:2f:2d:e3:ef:f3:7c:3e:1f:6e:2c:04:db:
                    6f:51:95:a3:3e:99:2b:4b:62:5f:75:35:3e:0b:2a:
                    1d:fe:ac:21:e1:aa:8f:6e:16:df:f6:01:e4:57:8a:
                    06:69:b6:e7:f2:0d:3b:c7:02:ec:c5:94:6d:99:95:
                    c1:20:db:1a:89:d3:65:e6:42:b4:d1:b6:21:1c:06:
                    20:c0:82:8b:9d:96:9d:10:7d:3f:a3:31:18:85:2e:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:93:37:32:4C:DF:31:A8:90:85:33:C6:39:A1:DD:36:76:40:20:B4
            X509v3 Authority Key Identifier:
                keyid:4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:85:91:02:cf:69:dc:cc:38:18:74:0e:0f:c1:c4:97:8f:3a:
         e9:d9:d1:dd:29:62:01:54:e2:d2:f0:ae:0f:b5:fa:93:48:41:
         22:2a:e8:99:13:60:89:30:ca:e4:38:21:e5:67:bf:5d:24:a8:
         40:62:03:a8:92:55:43:94:da:1e:b1:b6:af:5b:3c:9d:13:53:
         d9:49:07:33:16:ef:4e:74:29:a1:b8:b3:39:c6:12:1d:f0:38:
         6f:14:fa:c7:92:07:2e:02:55:57:8e:d0:46:97:5f:6d:88:97:
         d8:b6:1a:20:65:ff:02:8c:1f:b3:03:59:23:61:ff:42:f1:80:
         65:cc:1c:b1:9e:6f:87:24:66:98:44:1c:cb:c8:a7:20:16:2e:
         6d:82:75:fe:95:ba:2b:3a:b2:e1:20:d5:b6:24:3a:c3:e4:a7:
         7d:45:34:5c:19:0b:c0:0a:f2:d4:40:ca:3e:88:04:8a:dd:c4:
         38:c2:0d:2e:4e:af:38:e9:d3:f1:dc:5b:67:ff:15:b4:75:70:
         e7:f6:91:a8:36:d9:79:d0:29:36:a1:88:63:57:d1:4e:03:ec:
         b7:d5:a3:1e:a1:86:66:4f:87:90:e4:90:8b:64:fd:c9:ae:67:
         ff:dc:52:1b:75:38:75:d0:ba:3e:c7:cb:51:b9:90:52:ac:e8:
         f9:38:44:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:14 2026 by rpki-client