This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File:                     4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier:          ap5iAZtcI4cGL9mEE6n/hETRMDlk4SqthhN2NFL8TS8=
Subject key identifier:   57:20:38:6F:AF:F8:F3:37:36:9F:E4:64:C4:5A:1C:8D:6D:2A:6F:47
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer:       /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial:       019C42EB889B40D33BEED359C7F73B0CFFBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number:          0C3C
Signing time:             Mon 09 Feb 2026 15:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:57 +0000
Files and hashes:         1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: mSOZ4nw09HgdyRw9KbccRl7O9U7NLELvk7uc+toUdDE=)
                          2: 6c0GmPSIo0E5XPLL6BcvGXFoeoU.roa (hash: XKGNTxIctVAHlMjqMo1n+V2kjvQsJG2Ze8aGQf0oQWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:88:9b:40:d3:3b:ee:d3:59:c7:f7:3b:0c:ff:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
        Validity
            Not Before: Feb  9 15:00:57 2026 GMT
            Not After : Feb 10 15:00:57 2026 GMT
        Subject: CN=5720386faff8f337369fe464c45a1c8d6d2a6f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:1a:38:33:71:27:4e:20:c0:0e:52:f5:9b:
                    0f:d0:fe:bd:fd:a4:50:ae:de:e4:0e:ae:80:25:0d:
                    f0:05:44:41:50:a2:e9:ad:9c:af:e4:29:e0:09:d7:
                    01:46:9b:32:dc:d8:d4:3f:b5:61:87:1e:87:f2:24:
                    f7:77:64:a2:e1:75:04:44:34:9b:af:a0:be:21:b1:
                    52:d1:2c:56:e8:4e:bd:18:c2:96:8f:fe:4c:0a:e9:
                    ec:ad:31:e4:82:17:16:3e:3e:72:f4:80:52:8e:5a:
                    53:93:8b:ae:79:58:61:f7:2d:39:6f:f4:89:0d:d3:
                    f6:39:0d:cd:ce:65:e1:ee:0b:54:2f:12:3c:59:c3:
                    73:8c:b7:c6:55:ff:83:ef:d3:81:77:ca:2c:0e:1c:
                    04:db:43:b0:be:c1:79:52:22:b3:7d:6d:ca:87:17:
                    6a:7f:2d:b0:fa:70:af:4a:f6:a9:0c:a1:a7:bf:8b:
                    1c:d1:1e:b0:38:5d:a5:95:21:66:8b:4f:2e:25:0d:
                    43:81:cf:80:d7:4a:1d:39:08:5a:42:4a:5c:f0:39:
                    10:d8:76:49:5e:90:bc:26:d8:96:ad:5a:f9:25:55:
                    42:0b:05:1f:89:f9:b6:df:13:ba:43:1f:94:d3:c7:
                    da:93:ba:cf:69:4b:2d:94:b4:be:20:a3:82:d7:eb:
                    dc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:20:38:6F:AF:F8:F3:37:36:9F:E4:64:C4:5A:1C:8D:6D:2A:6F:47
            X509v3 Authority Key Identifier:
                keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3b:13:84:5d:7b:99:b1:9a:a3:13:a3:38:a5:41:a0:62:68:
         f6:37:45:93:fe:bd:d0:9e:29:92:9c:67:09:c0:ec:ff:d8:0a:
         56:b1:76:40:6c:d5:4e:d1:e7:2c:15:31:ff:96:40:ee:b2:a9:
         99:c5:4c:be:90:cc:49:b5:44:3f:b5:b7:17:0c:da:69:8d:17:
         15:19:35:7a:ac:a6:ac:27:81:02:24:dd:e2:62:cf:50:a3:1b:
         87:e6:6a:7d:5f:6b:20:80:ca:13:8e:59:a5:82:46:03:ad:9c:
         52:c1:75:f8:61:4b:23:3a:e2:e9:ab:cc:95:30:73:9d:3c:a5:
         78:3f:ee:57:c3:85:24:ea:92:05:ee:86:7b:3b:d7:cf:3c:6a:
         2f:bf:ea:d7:ed:d0:a5:99:19:10:41:5a:64:50:14:7a:ee:f5:
         29:8a:da:97:03:9b:c2:8f:cd:04:c5:95:9d:29:a1:68:31:26:
         8c:9f:d5:c3:c7:f5:dc:a3:bb:92:a4:5b:0f:57:70:05:18:ce:
         eb:2a:b2:c2:87:22:cf:e9:22:43:e4:bb:cb:2f:3a:0c:d8:1e:
         4b:1f:2d:6b:65:42:59:58:b5:5f:9c:ce:98:9d:24:a5:fd:1c:
         ea:b7:ba:e5:c2:3b:44:82:1d:d6:f9:f7:82:a7:df:8d:2f:0b:
         f4:f4:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:47 2026 by rpki-client