This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File:                     4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier:          hsgVtLbSy7XBkqg6Mz7DveXZtwU6v2DZVvT9q21yZ68=
Subject key identifier:   E8:D9:8B:DA:AE:26:23:A2:DC:E2:1E:FF:7E:E3:0E:EF:25:DD:FF:06
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer:       /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial:       019C416B010EC659C43F3C723C6566A892B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number:          1521
Signing time:             Mon 09 Feb 2026 08:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:57 +0000
Files and hashes:         1: 1eykC-2BnVsWo7Ye-BCUzkQkUoQ.roa (hash: XORzzia+v0TQle6S3eSeTmbfXijHFXJwl9VwUUmAcRw=)
                          2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: NsM8k08t59NWXzfPr/Ry5vC1MGikU8NNtM3xZHwOuP4=)
                          3: NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa (hash: 3elpIcyAaRbsEU++I8EIRcmrePMiDX7Ycf8Xs+7sNy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6b:01:0e:c6:59:c4:3f:3c:72:3c:65:66:a8:92:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
        Validity
            Not Before: Feb  9 08:00:57 2026 GMT
            Not After : Feb 10 08:00:57 2026 GMT
        Subject: CN=e8d98bdaae2623a2dce21eff7ee30eef25ddff06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:5d:75:15:26:35:e2:5e:15:95:89:4a:da:
                    be:df:60:76:3c:22:1e:66:d0:f2:bd:12:b8:a0:04:
                    d4:34:9b:20:73:03:dd:ff:0a:1f:90:62:9c:32:f8:
                    a5:17:f2:88:ef:e8:ef:fc:d1:8c:1b:e2:f4:b8:ab:
                    56:8d:30:0b:04:42:21:f8:2b:9d:73:89:ca:ff:73:
                    f7:bd:d1:c6:b0:37:b9:86:81:b4:3d:27:19:ef:58:
                    06:06:37:7b:75:08:f6:a5:3f:46:67:3f:a6:57:ba:
                    2e:d2:60:ff:02:1e:eb:b3:0e:41:f6:5c:2c:00:33:
                    df:1e:a4:46:21:a0:8b:30:47:0e:36:a6:c3:97:ab:
                    1c:b4:9e:6c:f6:d5:ce:cf:a9:8e:65:0d:ad:b4:04:
                    35:e0:41:d5:34:80:48:f7:b7:fc:a7:12:81:1b:a0:
                    8c:d8:d2:3b:61:25:97:46:f0:6b:87:81:02:08:c3:
                    7a:b6:e1:10:4c:d2:7e:f0:c7:bb:d3:16:1a:be:06:
                    c9:28:17:2f:dc:a8:95:c5:d4:b4:90:75:c3:73:95:
                    4b:1b:1a:3c:40:c0:80:32:5b:ca:3e:89:f7:12:de:
                    7e:8a:28:06:a0:30:6f:c1:ba:2a:e7:5d:73:a2:ff:
                    55:5a:7e:f8:91:86:5b:80:1d:ba:c9:0e:12:a3:d9:
                    b7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D9:8B:DA:AE:26:23:A2:DC:E2:1E:FF:7E:E3:0E:EF:25:DD:FF:06
            X509v3 Authority Key Identifier:
                keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a5:31:15:5d:03:d2:d5:7e:0d:91:85:4a:ef:5c:1b:ee:9b:
         4a:c9:65:4e:bc:99:14:8f:fb:45:df:db:70:fc:d8:e4:ca:ed:
         83:eb:87:db:38:6b:4e:f2:d2:9b:68:eb:f6:af:26:b0:26:8f:
         94:8c:31:eb:62:44:4b:ed:b7:d1:c2:15:dd:7b:13:c5:ba:74:
         a4:68:66:f5:fd:ed:84:2b:d1:8a:15:af:ea:9c:f9:19:46:a0:
         f1:d6:92:a3:c1:0c:eb:1c:bb:dd:da:fe:97:04:8b:12:c1:a5:
         76:d9:7c:d1:85:83:47:17:ad:1d:1b:7f:9a:3e:58:9a:63:f8:
         08:c2:18:98:bf:d3:52:84:78:e4:5b:39:4d:6d:f6:8c:d2:57:
         ac:d1:f4:36:1e:bc:40:85:17:01:f8:5c:8a:f6:a4:13:7a:f4:
         ab:bd:f8:c0:12:e6:da:32:b8:9c:5a:f9:d9:93:e8:30:db:8c:
         86:45:6c:c9:c7:85:25:ac:a7:72:46:f4:df:9f:64:8f:62:2f:
         1e:c4:7d:1b:b5:0d:16:68:df:ff:3a:9d:f2:0f:13:f1:e1:d6:
         17:1f:a1:95:51:e5:7a:f1:64:c9:9c:50:d0:99:20:a9:f6:22:
         b7:bf:54:e6:b8:f0:6e:d0:dd:9f:73:ad:e8:8c:66:9b:26:3a:
         15:ad:46:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:28 2026 by rpki-client