This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
File:                     1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json)
Hash identifier:          q0997ButH/D6czZGPf+FmFKWcF0tn2l47ljhsCtl66E=
Subject key identifier:   65:C2:38:64:3A:BD:3F:96:98:E3:66:5A:27:07:0C:CA:3D:18:57:BC
Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
Certificate issuer:       /CN=fadce637efb28194715ac2a72129e20571b983af
Certificate serial:       019C44A300BD8826B1D4765EA7E8D6798410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 23:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:59 +0000
Files and hashes:         1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: oDO48ovNMyb8BaTNNUcFLQ1whjfekoJ2U1WjC8ftDIk=)
                          2: IRMSZQsigbDIutOQzlfxAZWWDXw.roa (hash: RtIyl8mWzqrshICWaykO84DdzD/8XhcZyCvNHfIfJZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a3:00:bd:88:26:b1:d4:76:5e:a7:e8:d6:79:84:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadce637efb28194715ac2a72129e20571b983af
        Validity
            Not Before: Feb  9 23:00:59 2026 GMT
            Not After : Feb 10 23:00:59 2026 GMT
        Subject: CN=65c238643abd3f9698e3665a27070cca3d1857bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:f9:4b:95:ae:5a:92:04:f6:ec:d1:3f:b9:
                    f3:04:8d:0c:72:3f:0d:c8:47:34:36:5c:04:06:28:
                    f2:95:4c:a2:11:19:ca:37:4e:95:59:e1:9d:c4:bb:
                    e5:18:e5:62:05:82:f6:98:2e:c0:67:0b:c1:5c:92:
                    b2:e3:be:c6:e7:69:e5:89:25:40:6e:42:a2:18:67:
                    66:52:ff:b6:c7:40:4e:03:09:b5:9d:6d:f8:49:23:
                    8a:e6:dd:30:f0:b0:f9:e7:c6:7e:63:ff:73:67:2f:
                    99:6b:79:29:b6:8c:7a:c8:66:4e:2e:3c:2d:90:8e:
                    51:35:75:f9:1f:84:86:77:87:db:ae:b5:aa:fd:e1:
                    70:18:2e:10:7c:21:b6:82:46:cf:3f:fd:21:60:40:
                    ca:f0:03:aa:c8:9c:3b:55:11:67:77:b8:b4:10:e0:
                    2d:0b:2b:40:6e:71:e6:c5:42:b8:07:2a:16:b0:90:
                    5e:eb:dc:83:71:39:c9:9d:1a:fb:58:7e:f8:4f:63:
                    d9:08:66:9c:2b:6a:57:4c:b9:bc:61:45:4b:e9:d1:
                    75:fd:a6:bd:e9:10:59:10:77:85:42:18:91:77:a4:
                    da:55:d8:15:0a:6e:30:a2:ec:c3:2f:30:3c:cc:2f:
                    8c:33:23:4d:2f:71:38:5f:dc:16:79:83:79:09:dd:
                    84:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C2:38:64:3A:BD:3F:96:98:E3:66:5A:27:07:0C:CA:3D:18:57:BC
            X509v3 Authority Key Identifier:
                keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ed:90:30:83:c5:bf:80:89:ce:38:70:45:b5:b5:bf:e4:e0:
         0d:36:cc:71:40:64:60:8b:71:1f:09:7a:80:fe:93:6f:4e:7e:
         6f:f2:a0:8a:fe:1c:06:46:f8:ce:70:90:4c:bb:6e:e1:ee:3d:
         b5:66:b3:05:d7:c0:73:d5:46:4f:c1:f2:ab:7c:17:15:7d:74:
         fc:eb:53:05:48:7e:a7:98:e8:57:4f:f5:81:54:ee:f9:50:d6:
         53:52:1a:d9:fe:4c:a2:4f:c4:1a:cb:4f:fc:61:0d:58:15:12:
         76:95:44:32:15:70:b8:d8:20:8e:01:f7:1c:c6:a5:a6:ef:a5:
         77:30:e7:b4:28:b3:0f:29:ae:24:1b:0e:8f:80:b4:3f:dd:ed:
         42:4e:9e:19:f2:b3:6f:51:0a:2b:72:d0:58:4c:82:92:ef:b1:
         22:6a:2e:65:de:d6:3d:51:d7:6c:73:5c:9f:ae:56:d7:ed:2e:
         f0:b3:bc:a0:58:54:0f:29:4e:ea:03:93:04:ba:8a:4d:52:3a:
         f7:58:20:0b:3c:9f:69:eb:02:8b:ca:2f:45:4f:e9:02:33:1a:
         30:8d:72:e5:3e:fb:99:50:52:ec:b4:dc:97:e5:74:64:7f:77:
         73:a0:e0:b3:9d:8e:a2:4f:06:ba:c3:1c:66:a0:6f:59:a7:87:
         19:d1:6d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:52 2026 by rpki-client