This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
File:                     TYSYYfMMjxxiytuIlYRGumIAIe0.mft (raw, json)
Hash identifier:          J3lCFmQsUPZnbI3/7GTOndpl/o6jHSXy2pRXInlonmE=
Subject key identifier:   99:20:36:42:0E:D1:EE:92:74:81:B0:03:F0:37:07:8B:71:4C:6F:C9
Authority key identifier: 4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
Certificate issuer:       /CN=4d849861f30c8f1c62cadb88958446ba620021ed
Certificate serial:       019C432263555860DF1AAB59F781E769C293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
Manifest number:          0A
Signing time:             Mon 09 Feb 2026 16:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:52 +0000
Files and hashes:         1: GeKF_o_PfrSG_Hb_I-53-eabGPA.roa (hash: HwtzsWwHgYO3i4AZJzWKNYuJqNwg3RNNj5C8hQ0FBi0=)
                          2: TYSYYfMMjxxiytuIlYRGumIAIe0.crl (hash: Eln2CyT1KkSeLbSXxr6O+l6E6JXEycj6EReFplolYh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:63:55:58:60:df:1a:ab:59:f7:81:e7:69:c2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d849861f30c8f1c62cadb88958446ba620021ed
        Validity
            Not Before: Feb  9 16:00:52 2026 GMT
            Not After : Feb 10 16:00:52 2026 GMT
        Subject: CN=992036420ed1ee927481b003f037078b714c6fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:84:f2:74:cc:76:01:1f:e6:e4:86:b1:ae:
                    10:d8:1a:4d:8b:6b:d9:4b:74:fa:84:19:40:cc:e5:
                    2d:62:51:46:31:35:f1:72:2a:fa:53:a5:1d:ff:8a:
                    7a:c5:f9:0d:f6:5f:a1:b8:7c:b5:01:e4:9d:75:93:
                    70:ba:3d:08:04:8b:ba:88:0b:b5:78:48:56:d7:29:
                    7f:31:96:45:65:56:6f:04:2b:33:81:e8:44:38:28:
                    19:2b:57:92:6e:c7:ab:01:7c:c3:fc:65:d3:c9:8a:
                    a6:14:c4:dd:30:7f:71:89:04:1b:d1:a8:78:ac:07:
                    f8:04:bc:a7:95:51:ff:85:48:58:cf:9f:22:c1:51:
                    63:7f:0f:d3:7a:8f:f7:15:ff:8b:f2:66:39:02:eb:
                    13:60:49:f0:3e:8e:a2:9d:47:36:a2:c2:58:1e:99:
                    31:1b:d5:2c:0a:2a:2b:5c:2b:09:84:15:15:b1:ec:
                    d7:4d:37:cf:a7:b5:45:bc:fd:50:b8:8a:c4:29:7b:
                    26:e0:bb:f0:6c:71:b0:65:50:9e:5b:32:d1:c9:76:
                    da:90:d1:1e:8a:8c:e9:99:1b:2d:7a:02:bb:54:62:
                    2f:44:52:80:96:93:88:4e:97:28:b0:c3:df:f6:16:
                    91:e8:ec:04:57:25:5c:c5:b6:a9:a4:9b:22:94:a0:
                    c8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:20:36:42:0E:D1:EE:92:74:81:B0:03:F0:37:07:8B:71:4C:6F:C9
            X509v3 Authority Key Identifier:
                keyid:4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:06:35:17:3b:b0:15:42:83:be:28:af:6b:b0:ee:ef:ef:bc:
         8a:79:43:9d:0d:73:32:81:d1:ef:b0:2e:80:80:4f:66:03:a6:
         68:22:a0:41:9f:82:41:e8:e9:3b:75:54:9f:83:51:7f:72:44:
         a6:06:37:55:12:7d:9a:cc:56:bd:91:13:6a:14:94:fa:37:1f:
         6a:af:fd:01:67:a4:47:0e:3c:c4:51:ed:1b:ae:59:6e:7c:a6:
         96:3f:50:82:0b:5b:94:68:97:c6:28:aa:c2:e2:63:d1:b8:aa:
         c4:a9:61:14:17:8b:4c:0d:5e:ad:01:b9:f7:bb:dd:da:07:91:
         1e:15:19:a3:70:45:ba:39:2b:ea:7d:50:b7:a3:cf:fa:bd:4c:
         12:6d:e6:2e:93:1f:d0:5e:51:a7:44:df:6c:c2:db:1f:f3:58:
         33:30:46:7f:b6:72:8d:2e:1b:00:10:b8:75:3e:37:5b:ef:bc:
         5c:89:6a:c1:99:46:42:6f:b9:4b:66:56:0f:fa:8f:02:30:ff:
         85:f5:de:b6:73:e7:23:14:07:a3:90:a5:83:4e:40:7a:13:f8:
         15:64:71:d5:6c:b4:a7:9b:23:de:0d:fa:4b:03:75:e0:75:53:
         ce:65:4f:86:12:38:e1:10:d6:ac:f0:bd:a6:9a:50:dc:ab:e5:
         7b:ca:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:34 2026 by rpki-client