This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File:                     TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier:          x4iueSQy4hV9vBicXe7c9/A4/OdDaXrmTfXt47L4YTc=
Subject key identifier:   10:8F:CC:F4:68:7B:E1:0C:29:73:C3:6C:7A:02:C1:E3:86:55:36:9E
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer:       /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial:       019C43907A04221553B5DC699D97818AE1BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 18:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:07 +0000
Files and hashes:         1: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: 2gAWfx+fpakfbrhbkNXdC2ycBEJdGCa0uE0IvobRT+k=)
                          2: uhDIc0uEZUElVgS-_EocXKCrnM4.roa (hash: Q1EY9r/YhBigZO4RXwGxgcBbj+7/3SMubwYfDCdrIGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:7a:04:22:15:53:b5:dc:69:9d:97:81:8a:e1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
        Validity
            Not Before: Feb  9 18:01:07 2026 GMT
            Not After : Feb 10 18:01:07 2026 GMT
        Subject: CN=108fccf4687be10c2973c36c7a02c1e38655369e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d4:56:dd:cc:de:7b:ef:07:bb:2e:22:e0:17:
                    d4:59:64:02:73:a8:9e:f6:0f:61:17:e0:0a:93:95:
                    01:3c:44:11:3a:42:94:62:e1:05:b3:8b:93:d3:00:
                    9a:30:8b:a6:c9:9f:41:43:ba:9e:45:80:25:83:2e:
                    13:06:70:12:46:b2:80:fe:c7:46:4c:ea:ef:04:d7:
                    fe:8f:0b:a3:cf:61:24:ac:63:60:ba:dd:7d:87:e8:
                    dd:98:ce:23:4e:0c:7f:b7:9f:70:50:bd:20:e1:74:
                    88:2a:eb:c2:47:65:f5:a1:ce:3a:de:ab:ee:ae:8d:
                    3c:14:45:42:8b:81:96:33:bc:e1:b9:30:be:55:c2:
                    67:9a:0a:02:cf:ad:ca:1f:d6:38:e5:9b:a5:06:3b:
                    e4:28:0d:dc:97:bd:32:72:80:1f:78:60:9a:9d:aa:
                    7e:12:f9:12:f8:7c:c2:cd:36:ab:b1:7c:39:56:d2:
                    b6:8b:83:eb:24:57:ce:b9:10:b6:12:ec:f9:fe:07:
                    ba:10:a7:64:f2:0a:48:8d:f0:a3:20:f9:cf:91:96:
                    fa:7b:66:ae:5c:9e:a4:81:73:4d:ea:e7:29:21:2a:
                    23:da:b4:ea:ac:94:a0:8b:ac:8d:74:72:9f:9f:d4:
                    df:c7:3d:fb:33:06:71:2a:e7:84:54:0e:5e:64:4d:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8F:CC:F4:68:7B:E1:0C:29:73:C3:6C:7A:02:C1:E3:86:55:36:9E
            X509v3 Authority Key Identifier:
                keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a4:97:da:21:cc:91:d8:22:cb:9d:32:8d:9a:3d:79:be:26:
         ad:8e:84:97:15:6e:af:d6:f9:26:f9:e4:2f:61:a2:24:5e:f8:
         be:99:4f:1c:74:84:d2:20:54:df:45:56:d5:61:bd:37:d0:da:
         85:ce:c9:9f:0d:b4:3e:75:9d:77:4c:92:bc:4d:d7:63:63:0f:
         47:2f:e3:8c:d4:f5:36:13:95:2e:b3:ff:f1:7e:c9:94:27:ae:
         f7:9e:cb:82:72:70:36:dc:ed:f2:1e:91:c8:ac:2d:60:95:b2:
         33:70:f8:d6:00:7e:62:96:f8:9e:67:1a:d1:ba:fd:eb:fe:2d:
         2f:e3:1b:7e:f5:bc:e3:cc:14:a9:0c:35:54:5b:4c:eb:79:b9:
         6b:7b:0b:b2:d4:43:b3:b7:6a:53:d7:24:67:bd:31:a8:f8:dc:
         5b:80:82:3c:e2:67:9e:44:cd:bc:50:3c:6e:96:07:c8:06:27:
         52:2c:ea:ed:7f:7d:4c:b0:f3:11:c0:73:12:42:8d:e7:52:42:
         cc:f3:cf:0c:4f:15:e9:5f:b7:a3:12:77:07:d8:7e:91:c9:64:
         6e:0a:32:27:b3:65:d4:23:73:1c:16:15:df:59:e6:ea:e7:d2:
         06:51:d7:4e:57:b2:d9:15:b0:69:0a:d7:92:43:bc:8d:ed:c5:
         50:ab:26:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:00:23 2026 by rpki-client