This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
File:                     4Genud52frl9tk5RZHhJRjO9VOo.mft (raw, json)
Hash identifier:          yRPdtRW0MIhM0GjJ40rlrs8OSY1CqhrQ4D0ued8LvYs=
Subject key identifier:   70:B9:FE:BF:82:4F:D6:3F:79:29:57:86:4B:DD:33:E4:37:7F:62:E5
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Certificate issuer:       /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial:       019C4547665BCB3DA83DF135F06CF2275671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
Manifest number:          0E12
Signing time:             Tue 10 Feb 2026 02:00:33 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:33 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:33 +0000
Files and hashes:         1: 4Genud52frl9tk5RZHhJRjO9VOo.crl (hash: hQt5GXUh5wrD2obR1fi8qFEqCqbniu6lubp16pCuXf4=)
                          2: CdfLb6TofkWtReh_YXLGBpk_g6c.roa (hash: wzdkGkKknbVJYDWx/Ffoau27HnZpYfEves1fyMYu134=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:66:5b:cb:3d:a8:3d:f1:35:f0:6c:f2:27:56:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
        Validity
            Not Before: Feb 10 02:00:33 2026 GMT
            Not After : Feb 11 02:00:33 2026 GMT
        Subject: CN=70b9febf824fd63f792957864bdd33e4377f62e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:80:c9:a8:f3:e5:af:52:3e:0c:32:70:4a:
                    56:3c:4f:8a:b3:11:bd:d9:c6:5d:63:84:86:d2:c6:
                    8b:de:4c:a9:49:3f:6f:b6:4d:7c:69:7a:4c:1b:3b:
                    35:ab:e0:38:6e:ad:d2:ca:47:48:cd:d6:96:2b:a3:
                    26:ec:9b:54:35:38:3c:42:be:e3:07:34:12:9c:e6:
                    9c:fc:c5:d4:42:01:32:57:79:b6:f3:e2:66:90:10:
                    b9:3f:7c:18:a8:7b:27:32:6e:29:6e:8a:06:be:6e:
                    2b:47:c9:0a:9c:16:6c:e5:20:ae:3b:8c:1c:8a:81:
                    91:de:ab:d3:b7:5f:21:65:49:f8:c5:d5:65:ab:d1:
                    f3:4f:5c:ef:33:27:e0:9d:88:01:13:4a:79:e3:82:
                    47:5f:1c:b4:e3:93:2f:f1:fb:11:aa:cd:b7:e2:e5:
                    9a:0a:86:d6:97:29:6d:74:53:51:54:3d:74:ae:4d:
                    f2:80:48:92:c0:aa:20:b7:0c:65:89:75:28:92:18:
                    d4:0e:14:8a:d3:ca:4d:63:d7:88:1d:d0:7b:0b:1f:
                    9f:c9:ff:67:20:fd:f8:a8:4d:d0:ca:b5:a6:d1:b1:
                    8e:3b:58:be:f4:a2:e0:08:c1:1e:bf:0f:e8:5a:05:
                    8b:74:4a:d5:62:19:69:c1:0f:da:7c:0e:ba:36:e5:
                    4f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B9:FE:BF:82:4F:D6:3F:79:29:57:86:4B:DD:33:E4:37:7F:62:E5
            X509v3 Authority Key Identifier:
                keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:64:13:df:20:2b:5f:a4:3e:95:ef:8e:d8:af:0b:17:9b:f7:
         56:17:4f:f7:6d:2a:da:0f:b6:e5:ff:9b:35:e3:ac:00:13:e2:
         42:d3:9e:a1:7b:3d:56:60:2b:8d:a7:66:b5:ea:01:90:48:7e:
         ff:4e:2c:6f:7a:b0:12:1c:07:65:2f:bf:72:71:13:40:b0:89:
         fd:c1:8d:36:a2:d7:fd:a5:da:dd:ae:89:9d:c7:a2:2c:cf:1e:
         2f:c9:19:db:73:6e:94:e3:40:8e:93:87:05:64:74:bc:96:86:
         35:57:4f:c5:10:3d:97:3d:8c:92:77:cb:7c:a8:88:0d:41:ac:
         1d:aa:a7:09:26:c9:11:1c:93:68:2c:6a:0d:99:4d:3f:05:6f:
         7f:c8:8f:11:c1:bd:f5:0b:04:54:17:63:fe:e7:4b:13:fc:a8:
         ea:9a:59:c7:6d:56:4d:5c:bc:16:f2:5d:20:5a:03:e2:db:eb:
         ef:5e:93:c0:31:8f:d9:e7:6d:3e:c2:73:e3:48:db:c0:ed:3f:
         a0:c4:b0:20:34:09:69:97:f5:10:97:e3:d9:ca:98:2b:c5:26:
         1d:1e:8b:c1:b9:fd:9b:59:62:ba:5f:74:a5:14:81:e1:b1:d0:
         ef:2e:d9:85:68:4f:7b:2c:19:74:c1:a2:b7:bf:d1:ca:35:20:
         12:5e:11:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:06:15 2026 by rpki-client