This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File:                     TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier:          OLnoqY2D3a87RtWWoLVquPMs0fQwzE8PVIg7oTjwcCw=
Subject key identifier:   BF:AC:98:AB:61:09:0F:AE:25:9F:33:09:51:90:87:80:E4:4D:23:1A
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer:       /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial:       019C397A0CCCA6303F38ABAAF2C0C434F226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number:          180F
Signing time:             Sat 07 Feb 2026 19:00:25 +0000
Manifest this update:     Sat 07 Feb 2026 19:00:25 +0000
Manifest next update:     Sun 08 Feb 2026 19:00:25 +0000
Files and hashes:         1: IDKw72UDV4fBvKey2_GXU4YBDRA.roa (hash: qTZQ2NPnaEey/BLWGhLNERBs92D0ttnILDap5h0iO4A=)
                          2: LfKEiBUYG-rD2066F2HvQK8WvPg.roa (hash: P6VfgqJ5zT/fBeMm4CrVPEyhOWX2kuGJJ1u66qFZ3ms=)
                          3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: FXBH/86qZGJYfv2HsDbw60AMKBq+soCPdl7hUXuRop4=)
                          4: UrbBvwlHu4uSvs0RYok_mjpcJHQ.roa (hash: zeDYSU9xRwUTl0+MDt61kl2HDTZsB77vtuzNNebemko=)
                          5: ukZM-3_xV-iFuOqVLRRZDpxgm-s.roa (hash: vg+eKlX0YTyZM3VY4Qut9mEJDRF4SsmNGim25sAbw6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 18:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:39:7a:0c:cc:a6:30:3f:38:ab:aa:f2:c0:c4:34:f2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
        Validity
            Not Before: Feb  7 19:00:25 2026 GMT
            Not After : Feb  8 19:00:25 2026 GMT
        Subject: CN=bfac98ab61090fae259f330951908780e44d231a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:bb:f4:74:da:51:f7:95:d1:69:38:1f:26:
                    3b:6d:79:ff:2c:1c:84:62:5e:49:06:a3:6c:fd:b5:
                    60:7e:63:31:49:26:aa:52:48:39:8f:f9:6e:07:23:
                    0a:a5:7e:f9:70:c6:0a:c8:bf:41:c8:ed:3c:47:a0:
                    c1:a6:f0:24:ff:0b:4b:f9:f3:fe:9e:63:70:bd:81:
                    87:81:af:ed:d1:5c:12:6b:5f:94:a2:86:6c:1b:ab:
                    b7:e9:f9:5e:f9:96:7f:d2:eb:9c:8d:b3:8d:30:f8:
                    c7:c1:27:e4:23:9f:3e:bd:c3:7c:e0:10:14:99:82:
                    be:8e:f9:0d:f6:37:9a:71:77:b8:46:59:9f:92:af:
                    1c:03:f3:39:bd:27:05:4b:79:f1:54:d9:f5:2b:68:
                    e1:3c:65:03:aa:fc:1b:f1:92:86:4b:be:bb:6d:91:
                    f3:34:7f:fb:4d:6e:0c:2b:4a:82:83:35:0a:d9:73:
                    85:f1:28:7a:96:37:6c:b8:ca:3a:9d:1b:a1:64:99:
                    df:73:8b:8e:a5:31:e5:a1:95:29:62:3d:5b:c2:e1:
                    6f:22:90:a5:f0:fa:c1:a1:5d:e7:51:79:79:22:07:
                    ab:5a:85:a5:1e:7f:b5:2b:15:d2:ae:f5:37:9b:a8:
                    68:a9:66:bb:d8:db:48:e5:80:02:1e:a8:36:ea:b6:
                    99:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AC:98:AB:61:09:0F:AE:25:9F:33:09:51:90:87:80:E4:4D:23:1A
            X509v3 Authority Key Identifier:
                keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bc:17:ca:c8:a9:d3:72:e9:c8:5b:b0:76:6d:38:13:a5:09:
         27:cb:96:b9:f8:cc:44:8f:e9:25:89:5c:b6:31:23:df:ba:a1:
         d8:41:f2:b2:f7:75:d8:40:71:31:f8:1e:6b:a4:33:5c:11:7a:
         34:ef:86:80:38:5f:81:18:da:7a:ce:08:a2:26:b4:09:9e:98:
         0b:05:88:a8:5f:9b:56:3e:e1:b5:23:8f:eb:96:54:ac:ca:f5:
         4d:9d:40:5c:1d:ec:fd:10:7e:14:38:80:11:e7:d3:23:25:ed:
         5f:2b:71:01:76:9e:e3:3d:c2:51:4e:94:03:8f:31:ea:e8:9f:
         1a:4f:4d:ea:8c:15:9f:23:be:02:90:04:20:1c:f8:bc:53:97:
         4b:65:d3:62:b8:5c:18:69:1a:99:91:64:67:2a:ca:1c:35:6f:
         21:2f:d9:4e:5e:4d:75:41:89:01:3f:bb:61:3d:bb:98:b5:b9:
         de:40:71:e1:0f:5a:51:37:5b:78:5d:07:01:cd:4b:a6:72:35:
         17:f7:ba:a5:a7:51:ca:9a:0a:24:cf:0c:85:03:ae:6c:ce:ae:
         2a:e0:61:29:26:e3:e9:ee:01:07:ec:17:36:9e:d4:46:8d:3e:
         4f:9c:13:54:80:7e:13:92:4f:6f:78:34:df:ed:c8:8e:1a:37:
         18:10:ee:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 21:57:45 2026 by rpki-client