This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
File:                     tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft (raw, json)
Hash identifier:          Jcw2MBqZNhDi0F8bTLAEH68De6vGawc1lDomxw67KGs=
Subject key identifier:   38:CC:0D:9B:24:65:E8:64:98:40:6A:C3:D0:FB:34:2D:8A:E3:0E:3F
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Certificate issuer:       /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial:       019C4390B00A66131C16778001873C098882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 18:01:21 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:21 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:21 +0000
Files and hashes:         1: NDhq8_kQqGPgm41GchZ3TtgeGeg.roa (hash: +9TejtgpguDTAT190VXenQHqi2LFLLtouTU0DZkmU8U=)
                          2: tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl (hash: C6f7FKyv2+GwTOW9+5pvRMfmGsiluaq9moX9EB4QfVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:b0:0a:66:13:1c:16:77:80:01:87:3c:09:88:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
        Validity
            Not Before: Feb  9 18:01:21 2026 GMT
            Not After : Feb 10 18:01:21 2026 GMT
        Subject: CN=38cc0d9b2465e86498406ac3d0fb342d8ae30e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:50:c0:28:40:be:24:cf:e0:3d:69:5f:03:63:
                    0c:eb:2e:78:31:ce:da:be:86:c9:d8:1e:f8:be:84:
                    83:ca:39:9b:ce:65:c9:f3:4d:d1:10:c3:5c:ff:f8:
                    fc:86:c5:ed:b2:98:cf:0d:89:1a:c6:e4:c0:56:d5:
                    fa:e6:a0:e6:22:54:a6:f2:87:20:b2:76:22:cf:6d:
                    3b:53:6c:7a:38:9e:4c:4a:86:51:29:dc:80:d1:40:
                    18:e1:96:1c:b0:c8:6c:b6:ec:bd:25:7b:cd:bc:4a:
                    e4:5e:70:70:d6:c7:41:2d:40:9a:fe:43:1a:ba:44:
                    16:f8:f7:42:6e:d7:07:94:c3:4c:cf:d4:2b:b4:55:
                    9f:29:96:16:a8:10:03:0a:d3:e0:90:f0:cc:bc:d2:
                    57:0f:6f:3f:31:5f:42:b7:8f:dd:4d:6b:16:1c:72:
                    5d:13:a9:80:02:89:10:1b:62:87:4a:f1:d3:1c:1c:
                    6e:e8:6b:72:ba:ac:88:89:e2:73:b1:59:14:3b:15:
                    06:3e:fc:cc:2a:c1:0f:7c:70:e2:2b:31:a3:6a:36:
                    1c:ee:f4:b1:b0:39:2a:e0:c5:00:12:11:50:75:8b:
                    e5:1a:41:d5:87:59:66:dc:d1:87:e2:ec:f8:0a:73:
                    28:82:9e:69:30:ba:18:77:b8:f7:1c:52:15:5b:d4:
                    c0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CC:0D:9B:24:65:E8:64:98:40:6A:C3:D0:FB:34:2D:8A:E3:0E:3F
            X509v3 Authority Key Identifier:
                keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ef:c8:98:ee:ea:25:3f:92:87:ae:b4:6a:d1:97:d0:43:8d:
         7a:db:58:f1:6b:ac:8f:3c:1f:10:c4:46:6e:b0:2e:72:b0:17:
         b6:b5:d9:51:1f:9e:3e:25:ab:70:31:d8:df:60:8d:48:bc:9a:
         d4:0f:65:c7:4e:d0:12:50:c9:52:fc:26:ff:1c:ce:53:38:09:
         98:63:52:ca:fa:db:cc:4f:15:e3:64:7a:35:b2:84:f0:9a:9e:
         8b:c3:69:9e:f0:04:59:e4:7b:17:d5:aa:dc:bc:cc:b0:24:4c:
         77:65:07:d5:34:cd:03:96:d1:a6:b8:7b:93:92:89:49:2b:9d:
         49:a5:c4:52:4f:d0:15:ac:00:43:65:d2:a5:41:37:fe:2a:d8:
         0c:64:d3:10:8b:c9:61:9c:e5:37:ae:68:b7:0b:4c:50:5b:f8:
         f2:8e:4f:99:01:9b:66:ef:a8:fc:7b:90:2e:49:70:03:14:ae:
         c8:db:85:fe:64:14:61:86:dc:ee:a8:76:d3:8e:cc:c4:9a:47:
         47:70:5d:df:f2:ad:ca:7c:7a:60:1d:e5:f2:be:01:82:43:20:
         8e:68:c8:16:00:d3:c0:54:91:52:77:17:48:ba:2d:43:af:9c:
         5b:3c:d9:03:07:24:a0:cd:3c:b4:f8:73:83:eb:7b:43:79:59:
         01:96:bd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:29 2026 by rpki-client