This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
File:                     Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft (raw, json)
Hash identifier:          G8xz5bE7h9cc4BFuy49u7yMsueSQAbgqdNaRYn2QUrE=
Subject key identifier:   53:7D:06:AC:01:81:20:D7:69:C9:61:8D:8B:CA:7A:55:1E:72:F1:A3
Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
Certificate issuer:       /CN=4edc689bb22d09475574f41c0e5d97c045930928
Certificate serial:       019C42B492624DB0464AA97D6B55C4090374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 14:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:56 +0000
Files and hashes:         1: 1qel5UJvF0Nw_b-bGu5_QNoqlRk.roa (hash: dYaVAlWLEdmSPPhA4+BPhKB1MJDLY30AwRM+D7oK3SI=)
                          2: Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl (hash: pUsLeVDtjzIdkSCTSJle0AhWqCEcv6PWWA9rN9Q/gnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:92:62:4d:b0:46:4a:a9:7d:6b:55:c4:09:03:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928
        Validity
            Not Before: Feb  9 14:00:56 2026 GMT
            Not After : Feb 10 14:00:56 2026 GMT
        Subject: CN=537d06ac018120d769c9618d8bca7a551e72f1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:8a:e1:48:79:6a:8c:51:ae:90:6f:48:bc:
                    f2:75:3f:9d:39:4b:d7:c6:6c:4c:38:74:e3:dc:57:
                    d4:4c:a6:3b:eb:85:91:79:c3:58:00:92:43:49:1c:
                    d2:3e:57:5f:be:17:25:7f:a5:68:3f:93:00:21:a0:
                    71:40:95:b5:6a:05:ca:78:28:50:96:c8:b3:66:dc:
                    b9:e2:ca:92:0b:4a:11:fa:3f:b1:2c:b2:5b:0e:b9:
                    04:ee:2c:b9:7b:f9:a8:19:f9:7b:59:6b:ba:51:e2:
                    41:e4:1a:a0:59:40:a8:64:19:39:fa:69:7c:f6:62:
                    9e:c5:d5:2e:24:bb:69:f2:19:b8:b4:ae:b5:da:4f:
                    72:8c:88:42:6c:b4:35:cd:f3:c7:11:01:47:49:f5:
                    c2:4d:34:69:02:1a:1f:94:48:3f:0f:fb:40:ed:5c:
                    45:69:2e:55:03:a5:63:0c:98:96:f3:cb:86:18:dc:
                    79:52:b5:df:e3:1a:32:35:b6:f8:0e:69:82:e8:f2:
                    90:87:0a:ec:4f:a5:3e:d2:d4:9e:9c:7e:15:16:41:
                    51:b5:cc:5f:70:b5:84:b4:81:60:23:51:2b:fc:ff:
                    cc:0b:b0:5f:a2:83:51:f0:25:a7:22:de:3e:66:f7:
                    0a:fb:0b:47:0a:bc:c0:57:ef:84:d7:61:69:07:16:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7D:06:AC:01:81:20:D7:69:C9:61:8D:8B:CA:7A:55:1E:72:F1:A3
            X509v3 Authority Key Identifier:
                keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:0a:e7:0a:12:38:2c:44:4f:ce:95:79:cd:c4:95:7a:c8:95:
         5c:18:a5:f2:cc:94:b8:bf:0d:df:ef:95:68:95:7e:e7:4a:ee:
         bc:d4:e1:fe:95:28:82:37:33:2d:77:8c:e3:4c:79:8a:52:0f:
         ce:81:0d:6d:55:3c:58:fb:87:c3:4d:50:74:50:db:6d:24:2e:
         b3:1f:4a:57:8d:b8:2b:57:3d:62:fb:9f:84:ee:36:28:17:54:
         ab:2b:33:22:be:bc:07:49:6d:45:03:a3:ad:2b:34:4b:dc:08:
         3e:4b:e8:44:f0:5d:56:f5:56:39:d1:a7:5a:d8:43:9f:9f:94:
         91:31:80:ca:2f:63:79:af:a2:ef:38:a2:0c:99:67:7f:6a:ae:
         27:69:c7:73:08:1f:04:4b:7b:6c:19:7c:d8:33:b5:23:15:38:
         0c:50:1e:99:bd:5c:10:bf:57:ef:8f:97:ea:95:36:f3:fc:7c:
         9d:ce:f5:fe:cb:e6:58:7c:a2:71:92:df:38:9b:8c:d2:92:cc:
         c3:be:a8:a1:a6:19:8a:b5:35:78:19:2f:43:59:d1:6a:7e:94:
         a8:06:9b:ba:01:95:a6:d7:29:86:a3:41:80:41:1e:93:a0:b4:
         bd:a2:5f:9a:70:42:6e:c0:a9:c8:0e:a7:0e:b9:63:1e:c5:e6:
         f7:5f:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:25 2026 by rpki-client