This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
File:                     TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft (raw, json)
Hash identifier:          ypvPZLKAqjsEpMhuEa37w6bHO5dG6+df2f2jqkgVAlo=
Subject key identifier:   90:1B:5C:D4:FD:8A:90:07:7A:7D:25:54:B7:2C:C4:9A:DF:53:CA:9B
Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
Certificate issuer:       /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Certificate serial:       019C41A1BA1AE0EC03C0CF78E412D27F2F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
Manifest number:          15D5
Signing time:             Mon 09 Feb 2026 09:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:43 +0000
Files and hashes:         1: EsxGV6HNAZhI_jTvKSDp3GvEjeo.roa (hash: 4ivM9pnea86yeynpy0V6DIdtMIbuYViF3rSNVv2i8Js=)
                          2: TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl (hash: ss2qLMOo/jpQPTUrPReILNPeeOpRfBJ2D0eesDfjlKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:ba:1a:e0:ec:03:c0:cf:78:e4:12:d2:7f:2f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
        Validity
            Not Before: Feb  9 09:00:43 2026 GMT
            Not After : Feb 10 09:00:43 2026 GMT
        Subject: CN=901b5cd4fd8a90077a7d2554b72cc49adf53ca9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:11:e8:5a:0c:1e:0f:0b:9b:61:ca:7c:1f:cb:
                    32:50:e2:5b:ed:03:e3:e7:ae:1f:e3:1a:97:b6:4e:
                    e5:96:d2:b5:1c:0c:85:e5:d9:d4:da:74:e5:c7:30:
                    bc:75:87:66:8e:57:cd:73:ce:d0:46:e8:69:2a:4a:
                    a3:52:2b:a6:78:70:d5:28:3d:ac:16:60:8f:e1:d4:
                    2f:11:b0:6c:b2:8e:23:37:54:f4:48:f8:b4:61:03:
                    7e:11:8a:b9:b8:49:54:17:6c:51:b3:26:b3:4f:ad:
                    94:b0:d9:63:f8:c4:27:47:95:8f:56:2c:0a:c2:50:
                    ba:d9:54:58:28:f2:30:a0:87:33:47:4f:4e:a3:59:
                    e4:9d:56:11:70:90:f0:fc:75:e1:42:00:29:8e:fc:
                    64:13:26:4b:0d:10:b2:21:37:69:c1:ff:20:78:31:
                    8b:ff:99:88:c8:e6:92:32:45:05:51:09:09:a7:b3:
                    7a:eb:b0:21:43:4e:22:b3:a2:5b:5e:c8:87:72:b3:
                    a4:35:9a:44:a0:18:61:80:c7:06:b1:c6:97:0c:52:
                    7d:cb:0b:2a:20:b5:67:1f:78:f5:3f:a3:83:6a:dd:
                    f7:15:ef:ee:75:74:2f:77:89:5e:8d:72:3b:dc:53:
                    0d:10:97:11:57:45:74:7d:44:f3:8f:48:54:ae:7c:
                    61:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1B:5C:D4:FD:8A:90:07:7A:7D:25:54:B7:2C:C4:9A:DF:53:CA:9B
            X509v3 Authority Key Identifier:
                keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:dc:bb:c2:5b:15:2f:ae:00:75:58:6b:f1:20:d8:6c:a0:6e:
         14:37:99:ca:46:25:c6:f5:9d:7c:6a:ab:e2:a1:5b:19:74:7d:
         46:ae:d2:fd:31:86:64:ef:0c:9a:3e:06:ad:22:1f:6d:ba:87:
         09:55:75:a5:17:89:71:bc:86:cb:a3:15:69:62:12:a2:f3:5a:
         be:e6:cd:61:45:11:02:43:c1:4a:82:b6:b2:4a:7f:7a:26:c3:
         ec:9a:82:32:ee:7c:9d:63:d9:49:9d:16:7f:67:03:b1:fd:8c:
         68:31:dd:1a:2e:fe:be:91:17:56:56:86:3e:68:82:20:bf:49:
         d0:7d:56:d5:13:94:59:d9:cd:5d:d0:2c:b5:48:9c:94:22:2b:
         a5:a2:54:0f:1b:29:09:a4:5e:f1:65:0b:d4:25:60:a9:92:eb:
         9e:ba:a4:49:58:c1:cc:58:b2:7d:ce:ae:a0:29:d8:5e:84:27:
         6c:01:f9:0f:25:c6:99:8f:0b:c2:ca:47:36:26:00:d4:cb:42:
         ab:7d:79:ea:6b:52:22:e3:09:2b:c4:42:b1:03:3e:b7:88:6a:
         41:34:6f:4f:cd:f0:df:7b:42:75:e5:e9:0f:1f:4c:68:d6:15:
         84:04:7f:6f:86:e9:38:e2:66:03:43:4c:1f:14:47:2b:c3:07:
         cd:d7:0c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:01 2026 by rpki-client