This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
File:                     TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json)
Hash identifier:          Lel6EUkiLWJkHVwmWiTV57HNRfNfbb7Ei+gpdry0d+Y=
Subject key identifier:   7C:A0:82:CC:05:B6:74:08:A0:C4:87:42:42:4F:61:3E:8A:F4:35:14
Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
Certificate issuer:       /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Certificate serial:       019C43592F1E9ADAAD5986CDA454AD89F223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
Manifest number:          1799
Signing time:             Mon 09 Feb 2026 17:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:44 +0000
Files and hashes:         1: PNfIBENqPn1C2ky1c3Y7NiG7Ymw.roa (hash: DgC7dqgRapp52CiQQUrzN9ZAbunqBU0/xi2SXO7kKV0=)
                          2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: Yv4qXbyIBwOhsELDef1NqabxC4JN+xag5As582frbUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:2f:1e:9a:da:ad:59:86:cd:a4:54:ad:89:f2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
        Validity
            Not Before: Feb  9 17:00:44 2026 GMT
            Not After : Feb 10 17:00:44 2026 GMT
        Subject: CN=7ca082cc05b67408a0c48742424f613e8af43514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:f6:b9:0e:d2:9d:25:2d:87:1b:73:10:f6:
                    45:25:86:61:f8:7c:cb:88:7e:c1:62:17:09:9e:ea:
                    fb:97:e1:ef:a7:5c:b9:52:21:b4:49:02:c0:76:59:
                    da:27:94:16:7f:8a:69:da:e0:9a:71:ea:5a:9c:c8:
                    f3:18:20:6d:4b:65:c3:ce:77:63:37:7f:c5:2e:43:
                    50:0c:83:cb:a2:20:5e:cd:8d:37:74:6b:1d:8b:52:
                    df:ef:ce:d2:48:4e:03:ff:c3:db:cd:72:d7:d1:25:
                    b7:7e:cc:ea:d5:53:a6:b2:72:bb:07:e0:ca:ce:a5:
                    c5:b7:10:ef:76:08:f7:85:8c:f9:f5:05:25:3d:b4:
                    66:b6:e7:35:53:93:31:42:ac:b6:eb:bb:3a:2a:ca:
                    77:7a:bb:a4:65:6d:b3:f1:97:7f:e9:91:2d:a2:d2:
                    c0:2b:31:67:a6:88:a7:57:23:db:16:a3:d2:90:8a:
                    16:49:2e:f7:85:27:5f:32:b3:d4:1c:bb:fd:2f:2e:
                    94:47:95:b0:81:4b:38:b3:70:67:00:2e:aa:c7:33:
                    e0:8d:39:8e:90:ee:15:24:0f:9d:e4:9c:97:9b:10:
                    8e:64:44:94:b2:65:22:2f:e5:4b:55:e7:41:dd:61:
                    57:73:ad:f4:b7:47:a6:c5:03:13:5d:63:73:e3:cd:
                    c3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A0:82:CC:05:B6:74:08:A0:C4:87:42:42:4F:61:3E:8A:F4:35:14
            X509v3 Authority Key Identifier:
                keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2d:be:e2:74:cf:5b:af:c0:57:4f:37:94:bd:1b:67:85:1b:
         61:5d:a4:aa:0a:16:ce:e6:b3:28:0d:a5:1b:d8:13:27:c1:83:
         36:d4:f3:d4:af:df:cd:28:96:a3:31:79:ec:c0:b3:5f:b0:73:
         bc:46:e7:1e:ef:2b:c1:7a:e1:35:16:cc:6d:a0:a6:94:a7:c7:
         b4:35:65:46:be:68:7c:2a:6e:5c:34:29:be:a3:50:75:86:cf:
         92:d3:8b:3e:7f:d2:6e:de:b5:45:74:53:09:4b:82:bc:5d:64:
         ca:07:c4:7c:f1:46:28:47:0c:4d:06:ef:8c:2e:c3:88:45:dd:
         40:4a:88:a7:14:90:5d:0f:75:08:92:3b:e1:05:b1:52:18:18:
         59:46:9e:25:59:59:90:b6:cf:be:bd:ce:7d:6d:39:16:39:7b:
         fb:69:37:57:5f:20:52:6f:6e:b2:1c:57:74:49:fc:1a:0b:a9:
         7b:76:44:73:bb:77:12:95:a7:ec:73:ee:28:2a:45:d0:65:5f:
         6c:bb:32:2c:4d:f9:99:c8:b1:fe:5a:4e:4e:01:9c:7c:70:06:
         ac:92:af:04:c6:28:8e:37:cb:9b:d5:db:4c:cf:1e:13:18:41:
         6c:f7:45:8d:38:83:cc:63:d1:ba:35:a8:93:bd:cf:84:79:14:
         1b:fd:80:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:28 2026 by rpki-client