This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
File:                     TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json)
Hash identifier:          GHNffzIOQJ7ditfggPpHHzO3aRxyoeagP7Z1gmzWQ/o=
Subject key identifier:   1E:13:95:2E:20:30:D6:E3:B7:11:4A:5C:96:0A:C7:4A:A0:ED:2B:F3
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Certificate issuer:       /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial:       019C439050EABEB8A19D53F69E0EDBFE9849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
Manifest number:          1822
Signing time:             Mon 09 Feb 2026 18:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:57 +0000
Files and hashes:         1: 1SNNaJd-_nZGjSy8KhTgEu_TWEY.roa (hash: DTRv2jcApfzQZK3kJVDp954M/vKt+twRMmk7r67fyZA=)
                          2: 1bQOLq12VlIMZXXolofAPH9O5cY.roa (hash: nNr1MzlTDsd5ryhxxC8zve5I9A8m7Ud69POGWpKdnLw=)
                          3: 7Z4vT_pGnwjFtMmenLcRoqmUPrc.roa (hash: 0NI8q2txBSLwYGEyadLBX2+xdl05r7JbnQBUmGMxhLc=)
                          4: IM3Sgf6n85MJ0JQ5zz3x973QECY.roa (hash: RhRSY8YyTjB3zZVDnbDfxNa5aiv4sYD92KtaLzLLg4A=)
                          5: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: B7PPpe5gBLN0t6B3VOqAqlGafOFO0k0Gd/ssR/TK3z4=)
                          6: cefT8Znon0EMvLEa4jZbAItaX68.roa (hash: zuUKY/0e1yWLD2162lMycJrs/wJncsLp3x6qIl7VWD4=)
                          7: klIt1NStPul9M_ZMJsdKutacUMM.roa (hash: Bg/ud8VNM1Ut9qaDX4Qy7kRtx9Mw6PMvkK9VqDfBpa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:50:ea:be:b8:a1:9d:53:f6:9e:0e:db:fe:98:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
        Validity
            Not Before: Feb  9 18:00:57 2026 GMT
            Not After : Feb 10 18:00:57 2026 GMT
        Subject: CN=1e13952e2030d6e3b7114a5c960ac74aa0ed2bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5b:30:37:d0:4a:71:42:70:84:f1:9e:43:b7:
                    31:4c:2a:c5:dc:b4:ca:d5:d6:5e:f0:be:97:66:51:
                    21:aa:3e:16:51:b2:51:25:44:0f:66:b8:1d:9b:a3:
                    1d:c9:b5:20:06:84:c5:11:c4:46:2a:c3:16:55:09:
                    05:96:0e:3c:6a:53:c1:17:28:6a:4d:0a:ea:c8:d8:
                    52:c1:29:73:a4:09:1a:d6:c3:5f:d2:dd:bf:7e:41:
                    20:8c:23:d9:a0:63:30:3e:74:4d:e8:0c:2f:f3:f7:
                    14:5c:1c:5d:14:1c:f3:33:46:4b:e0:42:a7:e8:fa:
                    6b:6a:ac:25:a1:e9:ae:9e:df:f9:f3:bf:f7:04:55:
                    99:d7:8b:4f:c9:ba:fd:99:32:ef:99:d5:07:2b:ee:
                    91:0a:14:12:1d:15:42:6a:c5:70:c1:ce:bd:4d:ca:
                    08:ef:3f:2c:d0:19:83:d3:7d:9e:82:7f:42:1a:e3:
                    f5:71:b5:32:1c:eb:1b:cf:c2:6d:9d:0a:f7:3f:5a:
                    0a:06:3a:eb:74:fe:6f:d6:fe:d9:df:8a:45:eb:3b:
                    9a:15:e6:00:be:b5:2e:f7:6a:f5:b8:50:bd:c0:c4:
                    bf:1d:aa:5b:54:fb:38:f1:f6:25:17:7b:2b:80:9b:
                    44:b0:49:d8:f6:b6:9d:d9:a9:39:20:71:c5:a5:32:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:13:95:2E:20:30:D6:E3:B7:11:4A:5C:96:0A:C7:4A:A0:ED:2B:F3
            X509v3 Authority Key Identifier:
                keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:97:44:3b:84:74:39:af:ee:98:4c:03:48:9a:84:e4:6f:6e:
         bb:da:8b:a4:c7:a2:c0:02:59:eb:c5:f2:75:c5:e6:96:e6:7d:
         52:88:81:e9:1b:5a:89:7e:da:95:98:61:17:93:e4:2c:13:a9:
         fc:ee:c4:d6:e9:d0:2a:05:f1:ef:d6:11:40:f9:cc:03:2a:4d:
         f9:2f:59:b7:79:22:36:4a:6f:69:6c:63:74:66:e8:93:2b:b4:
         f5:d6:84:e1:25:cf:48:50:74:18:a4:39:ef:e2:8d:cb:5b:89:
         8d:80:f6:49:e3:11:d1:da:e7:53:01:08:83:cf:7b:55:5f:55:
         91:1b:99:8c:3f:72:48:7b:ae:1b:a8:4a:0b:ce:92:e1:a2:70:
         97:ec:ae:ff:17:d7:6c:46:68:47:56:0d:a5:88:c8:8d:57:29:
         88:48:a3:d7:0f:6d:06:3d:12:c8:c3:35:fc:46:9e:e8:fc:92:
         f2:0f:33:5f:3d:8b:ce:0f:c8:a5:e9:9a:78:f5:ea:dd:4b:7b:
         8b:53:a1:29:c8:c7:dd:20:4c:6b:0d:56:de:c2:a5:10:36:eb:
         6a:c4:59:c8:5a:fb:80:f0:d3:d7:03:d5:d7:3c:c0:28:a8:ba:
         6d:c6:7b:d5:16:b3:2a:44:58:0f:a5:c8:1f:ac:1f:e1:86:4a:
         ba:66:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:07 2026 by rpki-client