This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
File:                     TC9Y05SvcD-57w_FN77Q6X23Wo8.mft (raw, json)
Hash identifier:          DQM6TnNQUEzI0TBum/XYpkyfDqdXRYRoOJ7tzypw9QI=
Subject key identifier:   E7:4B:74:A8:F0:2A:51:1B:35:E6:AE:8B:C4:91:1A:85:4C:2E:AD:8B
Authority key identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
Certificate issuer:       /CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Certificate serial:       019C41A15B1ABF439E49EE1DBF4DC4DD9063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
Manifest number:          17A4
Signing time:             Mon 09 Feb 2026 09:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:19 +0000
Files and hashes:         1: TC9Y05SvcD-57w_FN77Q6X23Wo8.crl (hash: Im3vsl0Xu7Hk1t12qZNWKwzv+YeJqZUk6sE/Hpzo+3s=)
                          2: f1_YlMHXkfEcxm8CmCBrCLxkGqk.roa (hash: nGiLxaL0gxMQlJ8QNtQpsASY+2PMktxV9lPqNFVspg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:5b:1a:bf:43:9e:49:ee:1d:bf:4d:c4:dd:90:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
        Validity
            Not Before: Feb  9 09:00:19 2026 GMT
            Not After : Feb 10 09:00:19 2026 GMT
        Subject: CN=e74b74a8f02a511b35e6ae8bc4911a854c2ead8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:9f:84:3c:50:b4:26:2a:8d:36:34:20:16:
                    64:ff:18:e5:3a:e6:f3:36:40:17:89:d8:b0:72:39:
                    95:56:b9:26:c6:4e:0a:2d:4e:c8:c3:0b:dc:44:19:
                    da:56:3e:12:d1:d0:bd:b8:f4:36:c3:56:33:bd:84:
                    51:f0:22:e4:81:96:e6:f6:35:e6:83:a1:eb:d6:8e:
                    c9:24:b5:09:c5:1f:a0:45:7b:9d:45:b7:0d:68:e2:
                    a7:78:ee:44:9c:c8:5b:f7:43:1a:54:28:ca:91:84:
                    a2:2e:20:b2:85:db:a9:81:a7:f8:c0:e0:47:78:4b:
                    bb:68:40:e1:f3:2e:ce:99:86:1d:dd:fb:a9:c9:43:
                    db:ed:5d:aa:d8:45:e2:1c:b6:94:2d:26:d0:18:c1:
                    c2:c5:a7:d1:85:e6:a0:87:82:58:19:a9:ab:4d:67:
                    b2:dc:8f:a6:ac:ff:c3:9b:35:1a:93:be:67:9b:a2:
                    3b:11:66:1c:ae:a5:03:cd:c7:22:9d:7c:1c:8a:77:
                    a9:4b:ef:23:c8:81:45:ab:1f:4e:cb:4d:2a:49:5b:
                    0b:1e:9f:fc:bc:27:fa:92:d2:a8:df:90:76:9d:bb:
                    2d:68:2c:a5:5b:6d:c0:62:f5:96:2e:03:14:38:62:
                    cf:44:77:a0:1b:4a:09:17:95:e5:7e:5a:af:90:7d:
                    26:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4B:74:A8:F0:2A:51:1B:35:E6:AE:8B:C4:91:1A:85:4C:2E:AD:8B
            X509v3 Authority Key Identifier:
                keyid:4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:94:1c:44:fc:eb:b2:44:74:12:9b:71:50:3e:a3:45:a1:97:
         37:7d:59:38:f4:d3:f7:f0:88:8e:50:75:3a:b2:10:91:66:c1:
         e1:cf:f8:7d:0c:f8:53:7a:88:0c:26:c2:7e:c7:87:a4:20:c8:
         27:b5:82:c6:52:94:3e:5c:dd:d8:56:3c:80:b4:51:c6:94:00:
         6e:b6:55:80:4a:e2:b1:a5:56:70:2d:09:af:f0:78:71:14:2b:
         72:5e:b6:b8:bb:d8:47:b9:38:9f:6b:7d:d6:bb:b2:1c:54:f3:
         65:fd:17:93:52:91:05:b9:f3:27:5e:67:58:a2:8e:f3:e4:23:
         57:37:22:b5:62:36:e1:b0:8d:a7:37:0a:07:cf:22:5d:e5:07:
         32:03:d9:30:7e:71:e1:08:e0:49:f1:6d:48:2c:b9:d7:f4:7b:
         5a:36:36:39:48:fb:ba:dc:8c:79:48:97:4f:35:88:43:26:4a:
         65:d2:cd:57:f8:3e:4b:64:0c:b0:b0:18:f7:27:95:03:d3:c0:
         47:89:c4:3d:ec:3e:61:95:d7:f0:3d:a2:5e:37:5d:d9:a8:ea:
         d3:0b:52:4d:84:e1:97:b5:0b:bb:fc:a2:49:54:ae:b8:16:bb:
         19:77:4b:10:19:1d:ad:ab:96:6b:bb:68:5d:16:5f:04:3d:38:
         8f:f8:42:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:43 2026 by rpki-client