This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File:                     4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier:          rPxUuanrCUZs5gQnadIgbKT0oAMF4J5tdbp9f6d3x3M=
Subject key identifier:   0C:B8:52:E8:68:83:1A:AF:E4:8C:0C:47:D8:F5:E9:2F:B2:3E:74:4A
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer:       /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial:       019C41A172F9A89F312BA5F0CC45FC9E74C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number:          093C
Signing time:             Mon 09 Feb 2026 09:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:25 +0000
Files and hashes:         1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: 8VYIDn1KL/P1HnCUTbxR/V9HyzD/yU1DWMybTNLQFPw=)
                          2: MPWn9lYh7Ig78eg1IuFu_hQVgcY.roa (hash: iyM+MzYg4hUTkqmFv32rNevlyEv/xOwD98IypdwiHXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:72:f9:a8:9f:31:2b:a5:f0:cc:45:fc:9e:74:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
        Validity
            Not Before: Feb  9 09:00:25 2026 GMT
            Not After : Feb 10 09:00:25 2026 GMT
        Subject: CN=0cb852e868831aafe48c0c47d8f5e92fb23e744a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:5b:3b:4d:2b:ac:8a:6c:37:36:c8:69:6b:
                    a8:f7:b0:ae:82:93:99:ad:53:2f:94:48:5b:48:2a:
                    ee:d0:b2:ae:4d:21:a7:44:87:fb:ee:13:50:6d:5c:
                    70:2e:69:b4:02:e9:fe:aa:05:18:19:07:10:cb:68:
                    63:76:1b:9c:f7:ce:99:d7:bd:f1:ec:b3:de:32:93:
                    eb:e8:4b:44:52:61:10:72:94:a2:23:8c:75:5d:d4:
                    79:c0:e5:27:72:29:32:27:0f:4a:30:0e:e0:1e:4d:
                    ec:ec:9c:d7:d6:34:4b:37:5f:77:27:f3:50:02:02:
                    7e:4a:fb:6d:be:d5:02:bc:94:96:d4:68:9e:78:93:
                    12:cb:cb:42:4a:a5:dc:0c:8c:f5:23:94:a6:f7:18:
                    68:dd:f6:94:af:c6:98:ff:a4:e7:49:07:b4:b1:18:
                    cd:0c:34:70:9c:de:75:ee:5b:52:d8:96:4b:2f:d0:
                    21:5e:83:4d:1d:ba:b7:8a:82:cd:18:20:e9:b7:47:
                    8a:77:e4:04:19:f3:26:e4:c9:a7:72:d8:5a:a6:1f:
                    0e:99:ba:65:c1:92:15:40:1b:61:1b:e4:d5:4a:36:
                    e0:1c:16:81:dc:0f:07:01:fa:a6:e0:e4:82:be:ab:
                    ec:93:e6:a8:35:a1:25:90:5d:5d:7e:41:af:38:d6:
                    ce:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B8:52:E8:68:83:1A:AF:E4:8C:0C:47:D8:F5:E9:2F:B2:3E:74:4A
            X509v3 Authority Key Identifier:
                keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1a:ec:5b:04:a6:25:45:b1:ae:9e:8c:45:02:36:29:cc:00:
         c5:46:be:df:87:b4:36:2c:c3:f0:23:fa:bb:e8:23:43:7e:5e:
         1b:8e:8a:09:9d:40:a9:fa:8c:08:3e:a7:f7:47:29:07:d8:79:
         f0:7f:2b:81:64:ec:f7:e6:31:18:01:ed:4b:4c:61:ac:53:51:
         37:69:d4:9b:e3:02:0e:89:ea:65:7d:10:38:3b:46:4b:82:89:
         82:5e:25:b8:c5:48:f9:96:25:50:8b:38:5a:47:fd:09:69:9c:
         f4:be:53:68:2d:c0:36:36:3b:79:20:c9:70:cc:89:d5:b4:fa:
         ad:08:56:0e:d8:48:06:e4:75:1a:99:df:84:5b:08:d6:8a:51:
         2c:36:8b:73:a2:87:65:13:e9:13:92:e0:12:04:f2:eb:55:4b:
         69:10:3f:9b:18:4e:97:9f:72:d0:10:f2:64:34:b7:be:68:a5:
         8c:2a:7b:71:0d:0c:1c:e1:4d:cb:aa:dc:8b:1a:7d:30:47:76:
         4b:ec:31:50:77:03:a1:74:d3:61:e8:c9:bb:91:c5:90:95:13:
         39:b8:a9:f1:52:10:62:50:52:b8:68:a8:d8:4d:68:95:a4:c0:
         03:4b:db:8c:ff:84:e9:02:3b:41:a8:3a:59:ab:ef:bd:c5:09:
         80:fe:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:02 2026 by rpki-client