This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File:                     4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier:          owA/6F2oGuZGuJCC2Jji2rqHxoI9XOfH1cBjRZYL4fQ=
Subject key identifier:   D0:EA:24:F3:14:97:29:44:5B:EC:8D:5A:9B:31:98:88:B5:BD:64:A7
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer:       /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial:       019C420FD5CECADF2814C2A8ADC0107AF00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 11:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:59 +0000
Files and hashes:         1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: 6nCows63t2aUO/q+WGlNDEzqY4v8ArGPA2YEJYXvf0s=)
                          2: I8Y7k4PBkzGM3uGR_Gc3m5roLv8.roa (hash: Z+HeN443sRDuiL/lJ2AnO37Q1Ethfs5BRmHnOhLCr4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:d5:ce:ca:df:28:14:c2:a8:ad:c0:10:7a:f0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
        Validity
            Not Before: Feb  9 11:00:59 2026 GMT
            Not After : Feb 10 11:00:59 2026 GMT
        Subject: CN=d0ea24f3149729445bec8d5a9b319888b5bd64a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:30:4c:f9:2e:06:41:66:03:cb:2c:9c:3f:
                    6a:d8:16:e7:b2:eb:ab:51:93:ca:8b:d2:18:05:7d:
                    98:4c:e6:60:f4:ff:41:25:51:b8:f9:0c:e7:5f:79:
                    dd:0c:d8:1f:57:90:e3:2b:f4:b7:cc:63:de:1a:c7:
                    5a:ff:96:c2:f1:eb:a9:a4:36:9f:13:db:7b:00:b9:
                    15:0f:c3:f3:71:5d:cd:a5:22:00:eb:dc:fa:20:ef:
                    cb:f4:39:fd:20:f2:3c:be:5c:af:eb:bf:20:bf:97:
                    50:76:04:c3:05:f3:0f:f1:78:3c:e8:68:57:3f:23:
                    6f:3f:cc:d6:9d:9e:2e:2c:86:17:5c:7d:b4:e0:51:
                    29:3e:4e:b4:f2:9c:bc:b3:bc:e4:a8:09:a0:7f:0a:
                    30:bb:6f:48:bc:57:00:0b:ed:2b:1a:af:ad:b9:1c:
                    7b:58:5b:c6:7d:1c:ee:21:a1:99:b5:d3:48:f1:fd:
                    64:e3:74:7d:b0:31:0e:71:52:fd:63:e5:7b:66:a3:
                    cf:db:00:81:2d:b6:18:e3:ae:0f:db:73:eb:8d:74:
                    b3:31:d4:21:31:b5:2a:15:c8:d7:f5:9f:b3:49:57:
                    37:35:45:be:86:35:2d:60:5e:b7:35:56:70:99:24:
                    c4:fb:0f:e8:26:ab:e9:ae:95:9a:97:62:b3:3e:cb:
                    64:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EA:24:F3:14:97:29:44:5B:EC:8D:5A:9B:31:98:88:B5:BD:64:A7
            X509v3 Authority Key Identifier:
                keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2a:fd:1e:10:92:43:ca:d8:b4:3d:31:e1:7a:a7:c8:2f:e6:
         6c:de:b0:48:8e:d4:bd:7e:9a:62:c0:06:7d:5d:91:fe:fa:08:
         37:88:6d:6b:7b:8c:a0:8f:41:f0:81:ec:47:32:ea:b6:bc:08:
         12:05:d0:e7:2d:c1:df:93:65:7e:84:4f:70:19:66:4b:2d:f4:
         fc:10:6f:31:5d:44:04:b8:fb:e8:55:8c:39:e9:35:8b:fa:c6:
         41:68:67:ec:95:3b:b0:08:66:c8:8c:2d:e9:c4:90:30:e5:0f:
         ba:d3:f7:d3:74:da:eb:b1:e3:7c:f7:13:3d:8d:1d:cc:9f:08:
         92:05:64:08:35:2c:c7:86:4f:db:05:11:83:87:3a:1c:f2:e6:
         db:c6:97:48:88:41:73:c6:aa:51:c8:cb:58:0e:cb:c1:c4:6f:
         0e:e3:49:f0:2e:f8:29:1e:1f:df:48:5c:4b:32:8f:58:2d:94:
         89:4b:64:13:57:aa:34:79:15:f9:dc:b9:fe:70:c6:94:f5:bf:
         fb:de:30:7d:8d:2b:81:4b:e8:3b:90:50:ec:71:e8:65:4f:56:
         0f:da:16:c4:d6:3d:c9:b8:4a:e1:37:7c:d2:56:d0:a4:0e:36:
         65:27:7e:be:63:b3:1b:74:77:2c:63:de:3c:ad:a7:d3:79:a6:
         e6:96:26:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:36 2026 by rpki-client