This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File:                     TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier:          54HLVWAxlGz4Hx8mwE3KONo10Gvrc2RazRJi5+VtMHI=
Subject key identifier:   8F:55:89:28:49:C4:05:2C:72:5E:8B:2D:E2:77:C2:2F:2C:22:CA:C6
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer:       /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial:       019C43C7309CA0259522A86BCD05257373B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 19:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:53 +0000
Files and hashes:         1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
                          2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: ZsAQYnmDIwjV5qU9DqdpgHTCHog+GdqywU1cKItUCkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:30:9c:a0:25:95:22:a8:6b:cd:05:25:73:73:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
        Validity
            Not Before: Feb  9 19:00:53 2026 GMT
            Not After : Feb 10 19:00:53 2026 GMT
        Subject: CN=8f55892849c4052c725e8b2de277c22f2c22cac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:eb:9d:3e:d1:d7:89:e3:f1:18:55:5f:84:
                    11:3d:63:90:74:21:0a:cc:26:1d:d1:3d:12:a5:bc:
                    b4:b8:61:5d:35:a8:27:33:b8:84:a4:cc:b2:82:42:
                    de:5c:4c:27:c3:53:4b:f2:12:6b:b4:21:c2:95:1d:
                    35:4e:f1:91:8b:21:de:5c:66:03:cd:17:a8:48:79:
                    ca:3a:49:0a:9c:7c:c4:54:60:9e:4f:00:a8:51:eb:
                    37:4b:0a:bc:2b:44:09:70:66:a0:9e:c6:0c:7a:27:
                    84:75:5a:d3:a3:79:8f:9d:fe:c4:b3:0c:c4:7b:d6:
                    00:46:92:f3:49:ee:1f:1c:21:b8:d3:2c:1c:5d:79:
                    e5:9f:34:f8:25:b9:92:8c:07:8d:a6:2c:7b:bd:95:
                    af:af:28:0f:eb:90:cb:02:56:13:02:63:6a:ae:38:
                    2f:35:12:ea:27:e5:02:ab:f4:0b:e9:cb:21:61:27:
                    0a:61:ff:ef:b0:ab:6a:a9:a6:3f:24:cb:4a:49:60:
                    65:a2:c9:58:a9:d5:db:9d:a5:e3:f5:8f:dd:95:41:
                    30:a7:46:20:4b:81:9c:1d:50:80:b4:53:4e:c6:89:
                    27:5f:cd:d6:b6:3c:65:70:90:8b:f3:ef:2a:ad:26:
                    38:2c:01:51:eb:0d:88:4a:54:ca:56:ca:4f:58:74:
                    5d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:55:89:28:49:C4:05:2C:72:5E:8B:2D:E2:77:C2:2F:2C:22:CA:C6
            X509v3 Authority Key Identifier:
                keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:83:9c:aa:04:f2:35:aa:7c:01:4b:af:df:a7:48:c0:a7:16:
         0b:28:e6:82:16:b9:b4:51:24:d4:af:dc:fa:98:35:74:c3:67:
         d9:3b:3b:8e:74:35:63:d0:be:e6:57:aa:d7:f2:aa:ca:b3:b5:
         42:7a:5d:33:19:47:aa:f7:7a:5a:4f:9b:c6:4d:6f:aa:bd:14:
         a0:78:1f:76:7c:71:5e:b1:33:bc:12:b0:3b:5b:1e:bb:e4:13:
         71:41:85:f3:e3:a8:1f:6e:0c:9f:80:f3:a4:fb:7c:f0:79:2a:
         06:f1:1d:b6:01:06:96:27:77:98:d6:49:08:b5:70:c5:7f:87:
         e5:e5:0a:68:44:18:c8:86:61:e3:ba:a8:26:3d:b5:33:ee:3e:
         30:40:11:8b:5e:ba:2f:d8:ce:a2:0c:2a:79:a0:dc:c9:8a:f8:
         cc:04:13:7d:db:ab:d8:61:86:88:56:cb:be:b9:5f:92:93:63:
         ef:02:52:07:30:26:2d:02:72:9d:29:f3:83:fa:45:b0:14:71:
         bd:ef:27:05:21:13:93:c9:84:39:95:b5:ab:d6:4b:f5:f9:b1:
         ea:91:a6:9f:f4:36:b4:79:26:bb:34:22:55:bc:e8:75:b8:20:
         61:c4:a0:8e:de:f4:5d:25:a6:c5:e3:9b:29:73:dc:25:59:d2:
         e1:16:a2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:59 2026 by rpki-client