This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File:                     1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier:          TKCqfWdcbNhDLCYPN9H0m4HpD55w3H69pSahPN3eK9I=
Subject key identifier:   DF:88:77:85:EE:FA:09:29:0C:90:E9:9F:C1:EE:8E:8B:1C:F6:93:2C
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer:       /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial:       019C427D90CE904A2E232A149E0A2968DC87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number:          17A3
Signing time:             Mon 09 Feb 2026 13:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:51 +0000
Files and hashes:         1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: Ircgu7CYY/7/UCBBIJqWoVSInjO0OIJfRzs6j40goCw=)
                          2: ZbjQSCZ3uAIwmEEj11MfV5D8gC8.roa (hash: 5T7LXIEjxnn1PBqbN7TiQKs4WoehbeF3nUrwaJWfoo4=)
                          3: rgMK6sFHXbkCK94M_mgXVownuMc.roa (hash: Ezgfu8asu1o9JhVctSXTvp8BRnlwnmsHy1jD2PscHGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:90:ce:90:4a:2e:23:2a:14:9e:0a:29:68:dc:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
        Validity
            Not Before: Feb  9 13:00:51 2026 GMT
            Not After : Feb 10 13:00:51 2026 GMT
        Subject: CN=df887785eefa09290c90e99fc1ee8e8b1cf6932c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:63:d2:ae:c8:ae:63:fd:aa:4c:40:b7:6c:
                    9e:ad:e4:75:fe:e1:a3:56:8e:83:fe:25:d2:5a:9b:
                    77:2a:ae:5d:70:bf:bd:c0:77:3d:72:4f:06:60:27:
                    1c:06:3f:32:56:bd:6a:1b:8e:de:59:ca:98:cd:1b:
                    bd:bf:ac:68:57:61:77:1a:91:67:e8:43:71:b4:a2:
                    1a:6a:b5:1c:b7:96:14:65:22:4f:4e:79:fa:5f:eb:
                    56:56:e6:1b:4a:4f:37:07:46:3e:c1:c6:d0:99:a9:
                    0c:17:75:1e:45:f8:56:4d:77:19:92:8a:89:b6:6b:
                    04:3a:dc:93:52:f4:67:c3:c7:b3:8c:8d:fb:8c:14:
                    38:27:24:33:45:e3:45:6c:53:48:f3:b8:22:d5:4b:
                    fb:ef:79:38:ee:71:d5:1a:6a:20:dc:ab:ed:63:bb:
                    56:54:bc:24:71:a4:04:00:24:37:a6:f8:d8:9b:4c:
                    8c:f0:af:af:2a:d2:27:40:b3:e0:79:87:b5:7e:fc:
                    45:4f:84:ca:59:fe:97:3a:d4:98:81:2d:e9:72:91:
                    5d:2a:ad:24:80:a9:42:99:00:8a:ea:7e:ab:9c:45:
                    21:66:9f:7b:bd:63:3c:24:80:8a:fc:64:5c:a0:a5:
                    7f:74:46:aa:23:88:63:fe:b1:9b:1d:e7:65:e4:ed:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:88:77:85:EE:FA:09:29:0C:90:E9:9F:C1:EE:8E:8B:1C:F6:93:2C
            X509v3 Authority Key Identifier:
                keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:47:39:ef:fe:2e:e8:0a:8a:6c:42:72:6f:f9:e0:ea:0d:ee:
         a6:ce:d0:35:e7:f5:71:76:99:70:76:e8:4d:63:3c:ec:27:38:
         b4:7d:dd:8e:01:80:7c:eb:8a:e0:c5:93:81:c6:2e:33:73:d0:
         39:e6:a6:1d:8a:b4:9e:b0:c4:b8:15:41:a4:7f:0f:81:c0:d4:
         3b:2c:6c:4a:9e:35:a8:b6:f6:8f:16:b8:be:ca:0e:cc:dc:c8:
         d1:ba:d0:76:2d:e0:cf:53:fd:03:4a:40:5b:60:c3:26:9b:d4:
         2a:10:5d:ee:a6:a6:1e:78:b2:ee:9b:43:cf:19:ae:6d:04:fd:
         b2:51:58:48:2a:79:bc:e5:47:32:25:8a:fa:53:03:60:18:1e:
         2b:16:7e:d2:01:b0:e2:a8:a0:88:a3:46:d8:dd:62:94:20:d9:
         44:ab:1f:3f:3d:50:48:2f:ca:9f:84:60:4d:ae:c0:6c:f5:47:
         f3:56:8e:85:2e:af:a5:36:62:8a:9f:e1:de:2f:bb:b2:56:0b:
         c9:6d:31:be:a1:89:9b:9f:99:5d:b3:e4:c0:53:e8:df:fa:81:
         0d:36:41:1e:68:4a:d7:c2:b8:16:ef:27:d9:b7:de:7d:bc:19:
         46:da:06:03:e2:bc:22:73:81:c2:7e:c6:1e:ad:d4:85:78:34:
         60:df:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:07 2026 by rpki-client