This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File:                     TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier:          eDOwtxr4AiUceKIlbLv5hsnWS8FQfauTFjDdqkJNaDQ=
Subject key identifier:   29:1E:90:9F:73:33:00:82:6F:C4:04:EB:09:E9:E5:97:B3:4F:62:B8
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer:       /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial:       019C42B471510CA9D65A3D4238A7F17E0921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number:          119B
Signing time:             Mon 09 Feb 2026 14:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:47 +0000
Files and hashes:         1: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: DRTH0ks//5gjCjlNknofzVCg1YBPV3tRVdcsvSoMHX4=)
                          2: taVJ-Q2hMTd13C7NB7DobfbxLWA.roa (hash: /rtclsT6DmoztL99hwNHoG6rHBH4YjW2YpA+4zkm4f4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:71:51:0c:a9:d6:5a:3d:42:38:a7:f1:7e:09:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
        Validity
            Not Before: Feb  9 14:00:47 2026 GMT
            Not After : Feb 10 14:00:47 2026 GMT
        Subject: CN=291e909f733300826fc404eb09e9e597b34f62b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:cd:56:d2:46:8d:29:99:1b:be:66:39:2f:
                    a0:a1:42:3d:bf:0c:89:c5:46:e4:74:d3:9d:69:1b:
                    f3:90:b2:05:5a:ad:bb:cd:76:bd:ee:3f:a7:50:16:
                    8e:4f:f1:0d:6d:bc:2d:3d:e7:33:65:41:66:d8:09:
                    f9:e1:8d:13:a7:f7:85:0a:8d:5f:c0:03:28:4e:53:
                    dd:38:e2:28:c1:44:4f:f8:df:c4:f6:30:9a:89:ac:
                    4a:bb:9a:43:e3:2e:a8:e0:30:28:4e:7a:07:cd:2d:
                    5c:4c:31:85:52:c7:16:17:9e:9f:ba:08:1a:8c:a3:
                    49:b6:0f:9c:9f:8b:ad:e1:05:82:93:63:8a:fe:18:
                    3e:f7:c0:54:4b:89:b0:b7:9f:10:4b:eb:5d:08:b8:
                    0a:3f:27:c1:7d:9f:62:28:6f:49:e7:f8:e7:3f:1d:
                    71:1d:18:e4:5d:29:55:6a:b9:f8:ad:48:22:e2:2e:
                    80:b7:70:8b:98:ae:d5:48:95:06:b5:3d:e6:2a:24:
                    69:6f:ac:28:a2:af:e5:31:ad:cd:95:cb:bd:c3:15:
                    f2:8a:5b:cd:51:df:1b:55:18:e9:e4:ca:ad:d2:c5:
                    13:cc:24:b1:4a:2e:bf:53:78:7d:d0:92:56:03:a3:
                    5c:62:31:fe:ec:54:7e:32:1f:44:cc:23:e4:0e:ef:
                    ff:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1E:90:9F:73:33:00:82:6F:C4:04:EB:09:E9:E5:97:B3:4F:62:B8
            X509v3 Authority Key Identifier:
                keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5f:34:78:07:be:8a:bb:51:d8:8d:c4:29:45:00:76:bd:02:
         a9:bf:a0:83:7b:c2:d5:32:0f:22:6e:a1:48:6b:18:23:18:fe:
         c7:b8:cf:33:dd:d4:39:28:94:13:92:59:e9:8f:36:f8:d5:08:
         cf:39:34:09:ee:30:9f:b8:33:d8:f4:8b:1b:67:74:19:1c:71:
         ef:e3:97:d1:97:cc:92:5c:09:5d:cf:96:c6:e9:79:14:d7:ac:
         0f:03:c2:59:4b:36:2b:5a:c8:3b:17:0d:53:23:04:56:e7:d6:
         f5:c4:62:62:81:63:5d:04:24:eb:06:a2:e9:2e:40:27:45:6c:
         e5:e7:dc:28:9d:07:bb:90:a2:7e:4f:ad:86:5d:c9:cf:32:69:
         09:98:6b:79:cb:c3:10:d8:32:b2:b5:e3:a4:1c:ce:ac:20:65:
         cb:ee:ad:94:87:c0:d9:0d:ef:ca:76:bd:7a:db:21:35:9f:ed:
         aa:f2:17:02:82:02:4a:8c:20:e6:cd:72:d5:25:63:1f:2f:91:
         d8:5a:0c:5c:bc:98:55:8a:46:26:93:bf:c9:5b:bd:a9:76:42:
         fd:d0:68:80:e5:d5:ef:a2:73:24:76:cb:20:58:74:1a:2d:35:
         02:3d:ce:0d:41:95:4d:98:9e:3e:a6:a4:d7:97:59:59:5c:c8:
         29:31:67:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:31 2026 by rpki-client