This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File:                     tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier:          gah3gtAoo1rdhzdiD6QIPVD2rnp36ylrgep9pHePE0Q=
Subject key identifier:   21:1F:69:92:82:F2:68:67:09:D1:E4:C3:76:00:F6:CC:AA:1D:38:1F
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer:       /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial:       019C4133D7DF618DB7A3A934B1B8F92E4661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number:          1577
Signing time:             Mon 09 Feb 2026 07:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:42 +0000
Files and hashes:         1: YeKtEsYaTNZoSHj3N6MlBsotJrQ.roa (hash: twTw0giPhGzIQ/V/HMZrgKRp++mkr21dxckWNhdSudg=)
                          2: ielQr4EC94tydWptb7Zy7oQJTlg.roa (hash: IK1qVKo+95L3ssLme0pcM7macPsa/yBGCJukgetUuXk=)
                          3: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: AGrmuDR3PFDUlXb+14L+jQAd29aYLOtfIsKCtcMQuP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:d7:df:61:8d:b7:a3:a9:34:b1:b8:f9:2e:46:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
        Validity
            Not Before: Feb  9 07:00:42 2026 GMT
            Not After : Feb 10 07:00:42 2026 GMT
        Subject: CN=211f699282f2686709d1e4c37600f6ccaa1d381f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:52:22:f7:7e:9a:c8:e4:b3:2f:36:33:ad:
                    b1:27:98:a0:82:28:4d:bd:1c:0a:cb:f8:34:f9:c7:
                    ef:14:8f:66:fe:c0:d0:46:d1:50:95:7e:bd:cb:af:
                    53:31:80:4d:8f:2e:6a:41:6f:5d:5b:73:93:43:90:
                    d5:8c:a8:6f:6c:8d:de:99:dd:66:59:15:f3:af:4b:
                    b7:16:bb:85:6e:78:56:e9:85:da:4c:aa:c7:0e:d4:
                    30:6b:a0:7e:d5:89:be:34:ef:a1:0f:30:48:7d:72:
                    fc:e1:19:76:5e:ab:fb:c4:ac:b6:98:57:7a:3f:e3:
                    9f:26:b4:3e:39:9a:33:34:24:30:5e:9b:1c:f3:15:
                    de:6a:e0:0b:74:b0:c8:29:a4:4e:52:09:33:18:51:
                    6e:19:65:5a:5a:1a:7b:00:37:09:ca:8e:61:ff:c3:
                    63:ca:d9:d7:72:81:54:3c:e4:40:d4:4f:5a:8d:ec:
                    42:91:44:cb:23:2f:87:f7:88:a6:49:78:7a:a7:e2:
                    e0:2c:63:1e:37:59:50:84:b7:d2:4b:c0:1b:a5:8b:
                    1f:94:8c:42:de:e0:a1:cb:97:6a:43:0e:72:c8:ac:
                    1e:d0:cd:48:f4:38:64:f6:77:df:4b:7d:06:99:29:
                    1e:dc:48:74:c1:6d:d0:7c:61:7f:5d:ba:f7:4d:8e:
                    11:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1F:69:92:82:F2:68:67:09:D1:E4:C3:76:00:F6:CC:AA:1D:38:1F
            X509v3 Authority Key Identifier:
                keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7d:8f:57:9e:65:38:a8:5a:ca:78:80:94:32:fb:e3:65:c9:
         b3:0a:c6:ab:46:87:1e:43:a4:72:b6:a5:02:9b:eb:36:86:63:
         fe:70:ea:ff:fd:30:1d:ba:75:1d:a9:61:bd:20:99:dc:bc:f8:
         08:63:c5:7d:bf:39:f7:60:58:fb:a7:bc:82:4d:ef:0e:66:73:
         35:64:7d:35:05:01:be:a8:12:3f:83:ed:11:6a:81:be:58:ea:
         98:9c:34:55:cc:e9:de:0a:24:f9:6c:32:00:ae:eb:8b:75:6b:
         b4:e7:b5:12:57:e0:b3:d2:45:8a:98:2d:11:8c:8b:14:b3:d0:
         3b:68:3a:7a:5d:bb:dc:fd:b5:fb:ac:6d:94:36:22:6b:48:73:
         98:ac:cb:1a:46:61:5e:3c:27:0d:44:04:2f:ee:67:5e:f6:ef:
         7d:6d:40:77:2f:6c:14:69:93:75:f8:93:b9:21:ea:4c:98:a0:
         08:d9:60:3b:87:f1:48:d5:56:46:3d:84:c4:a4:7f:a0:ee:9d:
         a5:cb:d6:97:a8:b7:d1:68:f9:0e:0d:8d:a2:3f:0d:52:43:d5:
         57:dc:9b:1a:1c:f7:82:df:0d:25:c6:0a:83:bd:5d:07:36:81:
         05:4e:19:0d:13:cc:ee:e3:44:c3:a2:3b:c2:98:e6:1e:7f:60:
         d3:19:3f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:32 2026 by rpki-client