This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
File:                     Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft (raw, json)
Hash identifier:          ub7kGakRBjWrfIfSGDNy5XpgiwWDMUw6FcZxW0fxfoE=
Subject key identifier:   05:7A:71:B7:67:0E:5F:17:85:37:2C:87:FB:C4:D0:92:98:C2:73:A2
Authority key identifier: 4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
Certificate issuer:       /CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Certificate serial:       019C42B4348C79C824AF0F5A5B5F0BA35C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
Manifest number:          05D9
Signing time:             Mon 09 Feb 2026 14:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:31 +0000
Files and hashes:         1: HW5RUStuLbxYQOe8Gu-H_E5aWV0.roa (hash: x07LEmxGJBV5xPNSCMiyKaX4u86SUnl4qoOBSfBpXEw=)
                          2: Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl (hash: MWzXKe7UrrPBjEB7afQ/hrGo5uBxu7dnrdW/gAkaFkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:34:8c:79:c8:24:af:0f:5a:5b:5f:0b:a3:5c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
        Validity
            Not Before: Feb  9 14:00:31 2026 GMT
            Not After : Feb 10 14:00:31 2026 GMT
        Subject: CN=057a71b7670e5f1785372c87fbc4d09298c273a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:20:66:9a:29:4a:b1:54:2d:89:55:bd:47:
                    f0:65:6a:94:f4:a2:a7:e1:5d:af:3e:7a:07:f2:5f:
                    b5:b4:92:ae:21:d7:c1:f9:95:83:76:0b:1c:e0:a3:
                    4d:1b:9d:92:23:74:63:eb:56:30:11:6c:ff:9e:86:
                    e2:c2:bf:90:be:00:10:cd:e6:ca:24:91:26:39:62:
                    7e:04:6d:95:21:90:63:e2:b9:de:4d:f4:fd:f2:26:
                    22:25:e9:8d:94:cd:9e:24:87:c6:c6:9a:67:5c:6a:
                    b7:b9:52:12:d6:d7:2e:50:38:c2:c8:63:f8:c6:fa:
                    ba:54:1a:83:8c:16:ba:69:7f:2d:65:b0:1a:da:fb:
                    e4:ac:8e:2e:c8:a9:72:7b:7c:47:7f:e0:37:9b:c8:
                    23:9f:f9:35:92:77:ab:3c:75:fb:c5:0b:aa:8a:f5:
                    44:ab:d4:03:a7:24:89:b1:08:9c:c6:92:a0:14:3e:
                    b8:c3:77:50:19:96:1a:e7:44:87:94:0c:82:02:a8:
                    08:d4:8a:61:37:36:43:70:1b:43:cb:ed:59:74:61:
                    9a:7f:82:0e:db:73:37:81:b0:48:be:8c:07:c3:79:
                    7c:1f:9f:e8:46:44:87:6f:62:7e:b6:6b:51:59:e1:
                    6d:c0:35:5f:c0:90:31:c6:eb:6f:f3:fb:c6:16:32:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7A:71:B7:67:0E:5F:17:85:37:2C:87:FB:C4:D0:92:98:C2:73:A2
            X509v3 Authority Key Identifier:
                keyid:4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:86:cb:52:5f:4b:17:50:43:69:84:b8:1a:f9:20:40:88:69:
         d6:fa:2a:00:f4:6a:a5:f0:89:c2:e5:dc:c2:94:38:60:bc:c2:
         f0:91:88:99:11:28:a4:1f:6b:c8:89:71:03:a8:69:67:17:56:
         71:e5:80:20:3d:c6:14:72:3e:77:7f:5a:26:1a:c5:26:ff:51:
         81:82:d7:3b:fe:45:5f:dd:1b:bd:00:f0:99:2c:70:98:8a:ac:
         90:3d:ea:06:e8:6c:ce:1c:e1:c7:a9:d3:cc:ee:1d:7a:f4:2f:
         66:5b:8d:d6:a3:2b:42:54:6c:a5:38:1b:4d:5f:92:5a:45:e1:
         31:b8:7e:e5:6b:bc:ac:6d:17:33:5e:f7:52:fe:5c:3f:30:a0:
         ad:69:3d:9c:11:c8:be:99:c2:01:f7:f6:4c:13:47:07:62:5c:
         ff:c3:47:33:1f:06:05:46:49:48:31:83:31:47:09:b8:d7:81:
         5f:8e:f5:f0:ed:4b:14:4c:d5:84:f9:a8:ff:eb:e5:74:76:64:
         6c:46:f2:54:94:d6:07:5f:86:86:ad:55:bf:0c:9a:46:8c:fd:
         75:eb:8f:a9:aa:3d:ea:93:b1:ab:96:37:4d:cd:ed:05:7a:e4:
         ed:dc:e4:f3:5b:f6:07:93:96:7f:45:59:5f:36:5d:aa:ca:c8:
         f4:38:fe:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:03 2026 by rpki-client