This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
File:                     TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json)
Hash identifier:          mLBHFoFdrY4/GlgTXS4bcfdpHITlntWZ1bC6mEFvRfA=
Subject key identifier:   AC:A0:42:56:0F:DF:0E:1F:E5:2A:A9:C2:6D:62:FB:69:7A:BD:68:FF
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Certificate issuer:       /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial:       019C43C6FB200B404E90FE1DA4E450AE8714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
Manifest number:          1426
Signing time:             Mon 09 Feb 2026 19:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:39 +0000
Files and hashes:         1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: RT9Y8XrKGnSU/FiJqwYVTFADXs+YqcWRr/X7hL7C3Kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:fb:20:0b:40:4e:90:fe:1d:a4:e4:50:ae:87:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
        Validity
            Not Before: Feb  9 19:00:39 2026 GMT
            Not After : Feb 10 19:00:39 2026 GMT
        Subject: CN=aca042560fdf0e1fe52aa9c26d62fb697abd68ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:44:42:4d:e1:b6:0e:4e:a0:9c:5a:6c:3f:
                    9b:13:8f:79:d8:39:49:bf:88:e3:cb:09:70:b6:ee:
                    5f:b8:ee:16:d3:68:d3:e9:fa:ff:2e:88:c9:6f:7d:
                    98:d4:7d:12:77:82:56:06:41:c4:92:a8:3b:0e:ad:
                    5d:e5:80:33:c3:d1:b1:d7:ba:b3:cd:c9:7c:f0:2a:
                    2f:89:da:19:f2:e9:76:ef:3c:33:90:d2:df:34:ae:
                    e2:46:fe:ca:41:7b:b7:fd:27:1a:28:ba:22:83:b0:
                    0d:4d:7e:d3:df:98:3c:4d:ee:1a:cf:6a:17:8d:f3:
                    c8:f5:27:67:c3:8b:c0:d9:77:45:a2:48:26:ed:db:
                    5c:6a:f3:17:cf:f8:45:22:52:5e:92:73:fe:c5:e3:
                    d7:e1:a9:81:d3:54:00:1d:7b:00:30:a9:69:f1:1a:
                    ce:97:b9:44:9b:11:2b:b1:40:a6:ba:a4:dd:eb:d1:
                    b3:2c:29:5d:48:ed:a1:34:a2:25:46:5f:c0:53:30:
                    49:64:87:05:f7:47:90:19:e1:52:4f:a4:5b:b7:1e:
                    c4:f6:c5:5e:8a:b4:5b:39:dd:7a:5a:4b:f2:39:4a:
                    4e:82:e3:33:bd:ea:ce:f7:51:d6:6c:41:91:82:8a:
                    34:9e:d8:74:66:c5:18:ae:3f:9a:b7:bd:8f:61:87:
                    46:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A0:42:56:0F:DF:0E:1F:E5:2A:A9:C2:6D:62:FB:69:7A:BD:68:FF
            X509v3 Authority Key Identifier:
                keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:68:3b:65:47:05:76:35:c1:c5:03:c3:99:78:6d:89:5a:22:
         74:6d:9c:e6:3f:ea:fb:73:74:27:d8:f7:20:20:16:6f:05:3d:
         47:e6:87:d4:18:ee:5d:bf:66:77:90:b1:e6:b9:40:f5:5d:74:
         3d:fa:12:9e:0a:1a:14:9c:62:fc:b7:b6:ef:6f:a1:df:e0:dc:
         fe:07:ac:a7:c3:ba:85:aa:aa:92:6b:02:39:0b:ad:15:68:0e:
         37:4c:31:07:e6:33:54:8d:80:27:6c:e3:0e:6a:5d:3d:eb:06:
         7f:81:c9:b1:e3:b8:95:e8:b1:1d:e5:0a:e3:05:c8:27:68:3d:
         89:f6:eb:d9:1a:4e:24:0c:a0:11:23:2b:60:28:e8:ae:25:bf:
         97:41:77:51:60:42:86:5e:54:87:d0:0e:74:24:d2:ac:9c:23:
         8e:64:92:ec:6f:af:7b:67:b8:3d:47:6c:1f:0f:8f:5e:13:66:
         51:e8:d1:ac:33:1b:a7:69:67:0e:4a:87:65:a1:6e:cc:da:d8:
         09:63:98:1c:10:97:65:ba:7e:db:79:f2:01:87:30:91:b6:fa:
         e4:8b:7a:45:d8:3a:78:c7:7d:47:66:7b:51:79:e6:e6:a5:46:
         4b:72:5b:40:f2:33:19:b7:a9:af:62:4d:5e:15:aa:9f:64:ed:
         da:c5:c4:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxvsgC0BOkP4dpORQrocUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMDc4OGFhZDIyYWM0MzcwZDUxOGNiN2ZiOWRmZTcyNGI0
MWY5NTcwHhcNMjYwMjA5MTkwMDM5WhcNMjYwMjEwMTkwMDM5WjAzMTEwLwYDVQQD
EyhhY2EwNDI1NjBmZGYwZTFmZTUyYWE5YzI2ZDYyZmI2OTdhYmQ2OGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8NEQk3htg5OoJxabD+bE4952DlJ
v4jjywlwtu5fuO4W02jT6fr/LojJb32Y1H0Sd4JWBkHEkqg7Dq1d5YAzw9Gx17qz
zcl88CovidoZ8ul27zwzkNLfNK7iRv7KQXu3/ScaKLoig7ANTX7T35g8Te4az2oX
jfPI9Sdnw4vA2XdFokgm7dtcavMXz/hFIlJeknP+xePX4amB01QAHXsAMKlp8RrO
l7lEmxErsUCmuqTd69GzLCldSO2hNKIlRl/AUzBJZIcF90eQGeFST6Rbtx7E9sVe
irRbOd16WkvyOUpOguMzverO91HWbEGRgoo0nth0ZsUYrj+at72PYYdGswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKygQlYP3w4f5Sqpwm1i+2l6vWj/MB8GA1UdIwQY
MBaAFE8HiKrSKsQ3DVGMt/ud/nJLQflXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85YzA0ZDUtNDU5Yi00ZmUyLTg0NTAt
ZTExYWIyNjFjYTdiLzEvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85YzA0ZDUtNDU5Yi00ZmUyLTg0NTAtZTExYWIyNjFjYTdi
LzEvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2g7ZUcF
djXBxQPDmXhtiVoidG2c5j/q+3N0J9j3ICAWbwU9R+aH1BjuXb9md5Cx5rlA9V10
PfoSngoaFJxi/Le272+h3+Dc/gesp8O6haqqkmsCOQutFWgON0wxB+YzVI2AJ2zj
DmpdPesGf4HJseO4leixHeUK4wXIJ2g9ifbr2RpOJAygESMrYCjoriW/l0F3UWBC
hl5Uh9AOdCTSrJwjjmSS7G+ve2e4PUdsHw+PXhNmUejRrDMbp2lnDkqHZaFuzNrY
CWOYHBCXZbp+23nyAYcwkbb65It6Rdg6eMd9R2Z7UXnm5qVGS3JbQPIzGbepr2JN
XhWqn2Tt2sXEow==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:13 2026 by rpki-client