This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
File:                     tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json)
Hash identifier:          CIVp+fpkRJt9oS70lCLdj5xfosmN23pOqi6guExu60c=
Subject key identifier:   F6:8B:51:9B:69:6B:19:D6:D7:91:87:02:D3:51:95:FB:E9:28:BA:25
Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
Certificate issuer:       /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Certificate serial:       019C446C2A07CFC5FBDA95680708169A1F8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 22:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:05 +0000
Files and hashes:         1: LSmA9aVfYN8vZx-gz7lEvcEIFtY.roa (hash: NeSU5/g2soRo6L8ictxWw8A5QCSPK8gFyqkHuAKeHv8=)
                          2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: tEOEMnYROALBS0x//af2zV098cezdTZD/tTt2oCFkLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:2a:07:cf:c5:fb:da:95:68:07:08:16:9a:1f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
        Validity
            Not Before: Feb  9 22:01:05 2026 GMT
            Not After : Feb 10 22:01:05 2026 GMT
        Subject: CN=f68b519b696b19d6d7918702d35195fbe928ba25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:99:2a:18:5d:c3:2c:6f:44:f4:df:e3:21:a6:
                    00:4e:53:54:f7:86:f1:13:c8:78:c0:ca:72:99:00:
                    08:5b:31:14:b5:7a:3d:ef:1f:8e:69:17:53:c6:c4:
                    f8:ad:b7:d9:8a:8e:49:ef:21:c0:75:d6:ab:94:74:
                    df:ff:6a:c1:b7:77:06:40:aa:ba:0c:c9:95:a8:fb:
                    52:b8:6f:d8:af:05:25:23:e2:57:ae:c6:f0:25:b6:
                    f0:84:dc:18:fc:2e:98:e4:c0:fe:b9:f6:ec:db:51:
                    90:16:96:13:76:74:ad:86:43:8e:82:60:91:5f:38:
                    22:32:26:fc:ef:d9:ac:5a:6d:c7:90:7d:55:6a:d0:
                    1f:d1:aa:c4:db:c0:97:7e:a9:84:66:0b:eb:52:2d:
                    d0:2c:1d:e5:b6:ed:af:16:b9:24:3d:00:a7:e2:a5:
                    01:4d:51:1e:cc:8e:c4:47:90:bf:59:32:fb:bb:93:
                    a3:e6:ad:60:62:41:6e:a5:36:b1:04:37:4a:af:1b:
                    de:da:de:b3:0a:81:9b:2f:3e:c7:9c:71:78:34:8b:
                    56:48:1d:14:ad:43:40:96:8a:be:ac:ee:04:89:94:
                    e3:08:97:83:c1:aa:4b:cd:27:c1:a3:33:ab:9d:e7:
                    c0:4c:16:3e:aa:f0:7b:9a:ee:c2:d1:85:2d:03:d9:
                    7b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8B:51:9B:69:6B:19:D6:D7:91:87:02:D3:51:95:FB:E9:28:BA:25
            X509v3 Authority Key Identifier:
                keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ad:f1:36:fb:7a:e9:5e:d7:f8:85:5d:4c:64:a0:74:d6:c1:
         9f:33:b9:f5:4c:69:88:83:33:9b:3f:7a:5d:6f:b0:73:93:63:
         a2:de:7c:da:2c:a1:66:6a:4e:97:68:46:e0:f3:31:2d:63:68:
         97:dd:17:e1:63:b2:ca:9a:e2:4a:06:f7:61:64:d5:6a:8a:fa:
         c8:62:33:aa:65:28:23:a3:47:a5:a6:80:f8:d7:36:3c:35:4b:
         81:db:ee:c1:cc:4b:0c:2f:b2:8c:fd:cb:5d:58:f1:30:cf:26:
         20:17:f4:a4:70:ef:22:c2:9b:87:a0:8b:e6:d1:0e:37:67:33:
         49:96:e6:18:26:68:b2:af:07:b2:38:70:00:0e:75:c7:56:43:
         b0:24:6d:7e:d3:d7:f7:75:2f:65:dc:06:ee:4f:77:e9:53:da:
         41:a5:19:0b:2f:ad:34:20:8a:f3:f3:61:9b:98:cd:2e:c8:c1:
         3a:ff:2c:74:80:0f:1b:52:f3:fa:6f:d6:6f:01:e0:62:e5:49:
         7c:f8:b7:c6:24:c1:53:7c:25:5e:02:9f:2a:4e:93:8a:71:fd:
         10:77:e3:7f:a5:83:41:5f:4a:45:02:a0:0f:67:fd:c4:f9:2d:
         be:74:1c:34:75:a3:a3:3d:70:75:3f:ee:88:d8:26:a2:18:1d:
         d5:97:82:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:18 2026 by rpki-client