This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File:                     TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier:          wexyyWGc/PIc/pDM6m7I5sgLSL8trlvrHlMhyGxG3PY=
Subject key identifier:   45:B9:E5:71:ED:CD:57:03:95:82:1F:BB:7E:59:B2:CB:3B:91:C3:BA
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer:       /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial:       019C44A28D7CD74CF18C218FF83343EA9A79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number:          137A
Signing time:             Mon 09 Feb 2026 23:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:29 +0000
Files and hashes:         1: HUsAlOvemtR2fE4jnbiG5JPoxag.roa (hash: f7lJEppqzDneJ9AJzuUYrOlyEaByUZeV+0bof3SkTsE=)
                          2: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: MqdK8SKLslPQiEY5k0GH7hP6hXE8ZC5xd2uyRlhxqHw=)
                          3: l0q8XWJ1Kq-tzhNgucWKrkROmtg.roa (hash: 6lWXlqZNdk+BzRRkFfjQUwCi/8dW4M9stYINXvYCgl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:8d:7c:d7:4c:f1:8c:21:8f:f8:33:43:ea:9a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
        Validity
            Not Before: Feb  9 23:00:29 2026 GMT
            Not After : Feb 10 23:00:29 2026 GMT
        Subject: CN=45b9e571edcd570395821fbb7e59b2cb3b91c3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c4:c2:a3:36:9e:c0:54:8e:22:ca:76:68:55:
                    6d:39:61:6a:32:bf:2b:44:e5:91:94:c5:5d:08:b6:
                    dd:1d:2d:e6:cf:9b:f7:59:a4:21:f7:ef:cb:64:50:
                    e0:51:d5:53:e1:8a:b8:90:07:87:cb:5e:a6:f4:1b:
                    ed:23:29:cc:e4:2d:21:99:ea:e5:ac:d7:9b:4b:77:
                    2c:60:ad:05:d8:1d:2a:16:be:31:9e:26:15:6c:0d:
                    0c:b3:86:3b:c8:84:19:24:40:0c:e6:c5:f8:52:65:
                    85:67:06:db:58:98:0a:b0:c0:e1:d3:21:2c:26:90:
                    01:fe:47:c0:a0:1a:ca:da:a9:0f:76:6a:c3:da:ee:
                    78:9c:a6:21:d2:10:29:ec:ab:a0:f1:8b:af:ee:43:
                    36:63:6d:67:68:5c:7b:51:45:12:b8:f8:5d:8c:02:
                    88:9c:2a:2c:53:28:b1:a1:0e:d0:c9:1c:f1:75:af:
                    70:d6:19:6d:9e:da:e0:02:a8:24:16:f9:e5:d3:37:
                    8f:f5:bd:5f:ef:0b:42:57:d5:c1:ae:90:41:93:e7:
                    fe:d3:00:37:a5:30:fa:4b:d1:43:dd:a1:38:7b:27:
                    1d:90:39:01:2b:96:9b:14:5b:62:a3:18:b1:85:c8:
                    ff:12:cb:66:81:48:18:7a:fe:3e:ec:e1:62:e5:1b:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B9:E5:71:ED:CD:57:03:95:82:1F:BB:7E:59:B2:CB:3B:91:C3:BA
            X509v3 Authority Key Identifier:
                keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8f:fd:26:95:20:3a:b6:e1:cc:02:58:4f:71:2c:aa:c7:29:
         71:b5:34:68:96:92:67:d9:f7:b3:fa:7d:a7:ed:6b:1e:45:39:
         9b:a5:56:b1:9c:c8:5b:d1:88:4a:ac:5d:a4:8c:38:c7:ce:ce:
         97:89:c4:93:80:9d:2e:24:73:d5:bb:67:07:7e:c8:53:61:6a:
         5f:9f:33:b0:c6:7b:37:b5:52:a1:ad:ae:bf:1f:1e:a9:39:31:
         73:48:65:81:4b:6e:0a:bb:8c:87:20:9a:df:da:73:e0:2e:cb:
         48:95:43:76:01:89:8f:ae:04:53:aa:2b:8d:3d:3e:ca:90:d6:
         9a:0f:da:99:3d:09:79:a9:77:25:1f:5e:78:11:c3:f8:12:38:
         aa:5c:c4:9f:b2:ad:a3:b1:83:30:08:e9:84:9d:42:06:de:a8:
         06:d6:99:88:69:21:a7:81:b2:ac:88:5e:a2:e7:09:cc:bd:47:
         5c:dc:e1:e3:5e:64:b4:b4:e3:b7:aa:10:a1:6b:6d:86:85:9f:
         72:3e:14:10:43:4c:7e:39:c2:5f:10:c3:99:5c:28:f4:dd:de:
         f0:47:0c:30:c4:17:23:c6:1c:6f:ab:b9:7a:de:49:22:da:1b:
         67:b6:e1:70:8e:05:59:a7:04:f9:80:99:03:8a:86:e4:80:dc:
         e3:03:08:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:41 2026 by rpki-client