This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File:                     S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier:          FDeZpBEQCKFS74+z88fmx4d4IchvhUMhp4rRzhE5RzM=
Subject key identifier:   8F:D4:2A:08:FE:11:4D:33:BE:58:6D:40:2B:3B:8A:66:2F:E6:15:93
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer:       /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial:       019C4210461D918B1089651D6469160A64BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number:          0EA4
Signing time:             Mon 09 Feb 2026 11:01:28 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:28 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:28 +0000
Files and hashes:         1: FSFyylYZoJ__LJ0VFZP-2aItmuE.roa (hash: 4TUbcjRKjpEozpWO2rDakc6T9yJDVcy+nvZz/pOEz9A=)
                          2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: VQ53lrOPABvfpAUG1ZmWty9p/aC3vJ6V4MikTJ4/d6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:46:1d:91:8b:10:89:65:1d:64:69:16:0a:64:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
        Validity
            Not Before: Feb  9 11:01:28 2026 GMT
            Not After : Feb 10 11:01:28 2026 GMT
        Subject: CN=8fd42a08fe114d33be586d402b3b8a662fe61593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:18:05:08:7d:9e:20:d5:f9:d8:81:da:2e:
                    ac:bf:56:3e:1f:e3:32:7e:87:9c:da:b7:5b:0c:9d:
                    0c:4b:bd:6f:a8:59:58:d7:c4:2c:66:7c:a5:61:2f:
                    57:14:07:5f:69:98:8d:b6:62:82:54:77:a6:22:3c:
                    2a:d6:7c:31:28:f2:fd:97:f9:05:d2:37:dd:eb:a8:
                    ac:dd:c8:27:d2:2e:63:b7:99:80:5e:1b:a2:c4:e5:
                    17:e4:df:ce:dc:d0:72:da:66:d0:0c:e6:f1:e1:1a:
                    9e:ec:f5:4d:98:14:44:94:4d:0d:a9:58:35:f6:77:
                    d0:4f:de:7f:b3:0a:96:22:42:73:6a:03:00:fe:2d:
                    94:67:40:f7:23:a9:ed:dd:31:a9:ac:e0:44:b8:ad:
                    af:fb:22:6a:72:25:53:40:49:0c:f5:d9:e7:f4:c3:
                    47:75:e8:33:e1:53:7a:18:8e:29:eb:99:10:2d:c9:
                    bd:98:97:f1:63:88:84:3d:37:8c:fa:57:b1:3a:ba:
                    b8:fe:2d:f9:fd:b3:14:95:4f:c6:83:87:60:42:d6:
                    81:b3:4e:93:c4:b3:2b:50:70:95:b6:04:1f:7e:fa:
                    07:12:c0:c5:32:36:5c:af:de:42:db:a5:94:f8:39:
                    b8:66:93:45:ea:9c:b4:a2:40:e8:b2:26:05:d4:13:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D4:2A:08:FE:11:4D:33:BE:58:6D:40:2B:3B:8A:66:2F:E6:15:93
            X509v3 Authority Key Identifier:
                keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:cb:28:ca:47:04:bb:85:be:41:23:25:51:2c:ad:1c:01:b0:
         a0:bc:3c:fc:01:aa:13:60:4a:c0:58:0e:84:c1:3c:55:1b:07:
         b2:8d:89:c9:87:69:60:e9:e5:f1:0f:4a:3f:50:66:a6:9d:1d:
         d4:8a:2d:2d:9b:8b:d6:f4:20:97:82:14:65:c9:8b:fc:8c:dc:
         d0:6f:88:48:ab:06:a0:a3:65:3f:9a:3b:7a:19:76:7b:12:57:
         48:5a:fb:8e:6c:6b:a2:76:83:26:0f:05:0c:3c:f0:c9:07:b6:
         9a:38:45:0a:d7:de:bd:07:fc:18:74:f8:43:db:7c:0d:81:fc:
         d4:1a:ee:f8:cf:55:94:52:49:c6:37:a9:30:6f:a8:1f:8c:27:
         09:b3:6a:f2:1a:ff:9b:a0:e7:41:ed:a4:50:89:fb:db:ce:1d:
         15:16:7b:f2:89:7e:8b:bd:e4:ef:3c:52:d9:97:06:94:82:d9:
         dd:b2:9f:3e:e6:0a:b4:b8:93:55:bb:dd:a5:2f:ca:81:1f:8f:
         42:b3:d4:aa:c0:c6:43:cc:7a:24:50:44:29:79:d9:21:84:c0:
         e7:2c:bd:e8:c9:4c:3b:cb:66:85:f5:c8:09:d4:15:ee:04:08:
         a7:17:15:09:72:42:e4:38:2f:a1:dc:e0:85:ef:dd:74:e0:fa:
         28:c9:1c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:39 2026 by rpki-client