This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
File:                     TdI0IiZKecAxVILtTyfHUTU_Jrs.mft (raw, json)
Hash identifier:          dK9x6Vt9aM7fT4xxnGJyqJCQ7PP8QYHS5x0rb2MONMY=
Subject key identifier:   B0:FB:31:05:79:51:6C:3C:07:7A:DC:96:FC:6B:A6:0F:61:1B:C3:D0
Authority key identifier: 4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
Certificate issuer:       /CN=4dd23422264a79c0315482ed4f27c751353f26bb
Certificate serial:       019C435961B4491B25B41EB0A3A93D51B95F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
Manifest number:          095D
Signing time:             Mon 09 Feb 2026 17:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:56 +0000
Files and hashes:         1: R5RdCB9jBqc-I8sQkC7bDMJCJEM.roa (hash: TI8xD7ZekXFKyUpXLrhp0xuP0vXKDHQ1CwoOHjH85AQ=)
                          2: TdI0IiZKecAxVILtTyfHUTU_Jrs.crl (hash: cbe2m5EEB7Zo9n3Qm2v9hGr7wzcGhZQn8Ej1pSbGijg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:61:b4:49:1b:25:b4:1e:b0:a3:a9:3d:51:b9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd23422264a79c0315482ed4f27c751353f26bb
        Validity
            Not Before: Feb  9 17:00:56 2026 GMT
            Not After : Feb 10 17:00:56 2026 GMT
        Subject: CN=b0fb310579516c3c077adc96fc6ba60f611bc3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:62:40:49:8f:6a:4f:58:ed:4e:2b:23:b6:
                    90:0b:e3:98:22:34:59:9b:97:e9:63:76:21:34:83:
                    2a:b3:01:7b:a5:ad:6f:1f:c9:48:f0:b7:cb:84:ce:
                    22:f7:5f:2e:65:58:43:a7:93:3b:27:cc:4b:f6:c9:
                    5b:13:43:fc:a5:4c:c4:ed:5a:4d:2e:15:c5:74:e2:
                    9e:a7:a7:a4:75:b2:6e:a4:f0:94:7a:d1:eb:1a:46:
                    d9:5b:16:af:63:e1:d2:f2:75:b9:76:9b:d6:40:89:
                    1e:f3:97:c6:f0:b8:7a:9a:24:ac:df:48:93:82:a1:
                    bb:14:97:fd:0b:6f:8f:8a:2b:cd:11:95:44:77:31:
                    af:6d:98:96:ea:23:a7:35:a6:ac:75:e5:56:59:8e:
                    26:b2:46:42:12:6a:db:13:98:4e:28:dd:99:a1:1f:
                    15:51:1b:51:0f:bc:e8:68:ce:31:11:cb:01:8c:3a:
                    4d:be:c8:0c:ad:0b:d3:09:2c:88:d9:04:5f:9a:8a:
                    b9:fe:62:36:9f:43:3b:8e:7d:8f:a8:65:5a:b4:c7:
                    6a:af:dc:eb:74:67:52:8d:bb:cb:9c:47:96:ca:2d:
                    9e:ce:68:b4:13:99:c3:91:88:49:0b:2d:2a:3e:70:
                    c1:49:4e:e5:34:70:b8:ea:6d:0d:f9:b3:f3:78:a9:
                    19:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FB:31:05:79:51:6C:3C:07:7A:DC:96:FC:6B:A6:0F:61:1B:C3:D0
            X509v3 Authority Key Identifier:
                keyid:4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d2:81:a5:09:f7:bb:54:61:b8:a4:ad:f6:d9:23:27:c8:35:
         2c:74:b0:35:b1:1d:8a:81:e9:a7:6a:77:5d:c7:d0:f7:6e:03:
         98:1f:14:36:3a:99:96:57:1e:9d:ee:cc:53:6d:a5:ec:9d:58:
         a7:e4:c9:61:48:0d:f8:c4:dc:43:6a:b1:b3:78:49:6c:65:ba:
         31:4e:75:75:41:59:e0:51:9e:ee:41:5d:d1:e5:7a:58:40:c0:
         c3:05:48:ca:64:74:39:86:1f:70:a9:74:fb:7d:10:ae:9e:f6:
         7b:9d:89:e1:78:e6:c3:58:7c:46:61:3a:79:a6:8d:c9:4c:2c:
         79:a4:f6:90:c1:46:b4:64:0a:99:db:9e:54:38:72:50:32:ba:
         d6:cd:d7:83:49:99:65:d7:db:f1:e5:44:b9:e4:75:95:b6:df:
         b4:0b:74:a3:0d:43:a8:55:30:62:85:46:15:0f:a1:51:e5:84:
         5c:c6:b3:da:5c:b7:0c:83:78:21:0d:ed:85:45:65:da:5d:9f:
         68:0b:4c:48:55:8f:18:ea:fa:f8:22:19:24:cb:da:ad:b3:d5:
         73:dc:bf:f3:46:6d:88:97:62:fb:ad:44:c9:58:40:2b:4f:5c:
         f4:9c:42:03:ae:5a:d4:3c:6d:0e:4a:04:38:03:a7:1a:3f:79:
         15:1f:83:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:31 2026 by rpki-client