This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
File:                     TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json)
Hash identifier:          nJoTUiZwoz+xrPzW6XtVgCULyeTq3XSlyLlzoSQGBJw=
Subject key identifier:   94:04:56:BA:8F:68:B5:28:DA:7B:0E:CF:F9:72:1F:4A:EA:27:56:60
Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
Certificate issuer:       /CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Certificate serial:       019C432238AF56649F6FCE15F9CD5238481F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
Manifest number:          0781
Signing time:             Mon 09 Feb 2026 16:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:42 +0000
Files and hashes:         1: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: L/cPuVL0j4hAFzCf+q8utj074UCtNwXBDSRLYYyNsB8=)
                          2: xeyEvOh_T5SXDa3wzGCDSEKXeJo.roa (hash: xT5SlCyi7OJT7hItkCDdSCgLR6moh28cNvwOG2rN9V0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:38:af:56:64:9f:6f:ce:15:f9:cd:52:38:48:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721
        Validity
            Not Before: Feb  9 16:00:42 2026 GMT
            Not After : Feb 10 16:00:42 2026 GMT
        Subject: CN=940456ba8f68b528da7b0ecff9721f4aea275660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:21:de:70:9b:a7:05:55:8a:e4:fb:c3:5e:
                    ec:f9:c8:cf:4e:c3:16:ad:3d:5f:89:41:85:fc:27:
                    67:ac:73:09:03:a8:73:6c:ab:07:73:16:60:fa:6b:
                    3c:ca:2c:85:7a:43:16:fc:5d:ef:be:a7:ce:a3:a9:
                    79:14:23:66:89:df:f2:8c:4a:6f:38:1d:75:70:17:
                    cf:99:74:e9:9d:b7:b5:a9:86:97:16:3a:49:b9:86:
                    a3:be:0c:71:8c:b1:f8:c8:83:69:8f:9c:a2:21:19:
                    85:f0:0a:ed:96:0f:25:9f:d8:9f:71:3c:85:60:57:
                    cc:de:d6:17:a0:cf:71:c8:11:c4:8a:7b:7a:53:b3:
                    ff:85:42:a5:fb:23:88:d2:52:95:e6:b9:0e:86:9a:
                    61:ba:d6:4e:66:d0:fa:d0:dc:18:65:0a:29:87:ed:
                    d0:29:06:20:55:67:2d:af:3f:7c:7d:32:4c:38:40:
                    36:a0:85:74:b1:b0:83:aa:3c:13:a3:5f:dd:fc:2c:
                    34:28:f4:41:36:dd:a2:1d:09:64:3d:4a:97:47:28:
                    be:dc:cd:b1:6e:26:70:05:f3:51:36:da:6b:5e:a3:
                    24:64:36:a5:8b:9f:e6:6a:00:6c:41:44:a1:d6:21:
                    f6:c6:36:c8:62:d7:83:09:4b:15:de:85:ea:c7:12:
                    57:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:04:56:BA:8F:68:B5:28:DA:7B:0E:CF:F9:72:1F:4A:EA:27:56:60
            X509v3 Authority Key Identifier:
                keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:61:87:8c:34:18:87:0a:49:1e:48:25:05:71:44:fb:63:97:
         0a:0e:a4:3c:3b:94:41:53:53:2c:2c:ab:ce:5d:d3:44:b6:c0:
         fa:92:b1:f2:e9:fd:2d:c6:15:0f:50:e5:61:11:ac:18:23:38:
         18:2b:5c:69:bd:3c:c9:46:9f:93:62:87:8e:82:cc:0b:b1:b3:
         8f:17:9b:a8:67:a6:ad:6b:49:16:07:dc:da:e2:67:d9:dc:f2:
         43:1d:6b:69:7f:9e:97:3b:4e:fa:80:b5:2d:60:87:a6:3a:ed:
         e7:33:9c:6e:0a:6a:eb:1e:0f:a8:76:e7:e4:47:cb:ac:e9:f9:
         3a:89:69:1f:84:c5:ab:12:23:b0:13:1c:4a:2c:a3:af:42:15:
         fd:06:23:1f:b2:d4:1b:8d:da:7a:4c:16:18:af:3f:f3:54:0e:
         b3:3f:40:cb:42:0b:f6:76:5f:4c:21:cb:62:42:85:1e:a8:f9:
         44:3f:d9:d0:60:ec:6f:32:78:e5:33:ea:b5:62:2e:98:12:cd:
         b0:d0:17:c8:3e:88:67:25:02:63:29:b5:bc:db:d0:e5:e4:ce:
         e9:b7:03:85:bd:1c:2c:2a:83:72:3e:d5:1c:07:fd:51:bf:e5:
         c0:61:2c:ca:cb:97:c0:ea:31:82:5c:4b:fc:32:a2:65:21:b9:
         2f:66:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:47:05 2026 by rpki-client