This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
File:                     4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft (raw, json)
Hash identifier:          TCJBMHdlKlfmoiBSswq2xkH51ehT55vEDlXp7zRrWdc=
Subject key identifier:   54:9C:72:07:53:23:28:5B:D4:18:27:0C:3F:42:7C:F7:BB:7D:48:07
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Certificate issuer:       /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial:       019C42EBA2BAD0F580CF9EB78992AE727ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
Manifest number:          1821
Signing time:             Mon 09 Feb 2026 15:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:04 +0000
Files and hashes:         1: 4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl (hash: cJyt25k2YUCXYhsHrZwGlOR8ZOePlVgFSNcDZfxPv4s=)
                          2: QoYf0tAUEKqIrSmIG2tWWODeEqY.roa (hash: xUGeL/d9PAos8zWTD1cTYvl/O/Fd7xB/QfyjZxYeQ2g=)
                          3: s5zHySgUNC4r9yyDLUGS6hKc5AU.roa (hash: MCsyJIJVnFTvjDhLswke9JGgZHvXeY1VQLlom/hhChI=)
                          4: trEBVhTnYojMGk31Am98ZfEdQ9o.roa (hash: ZUjcn+k6KVdZ0YruJwm/37Xg7sBIq8yD/WZghxDB9RQ=)
                          5: u4dfVgTBlyOwWNQ0P6NKkpYOUUQ.roa (hash: w4779kW3IR6Ef4OLAy8K23RNH+GshDoVigRrQzkg78w=)
                          6: xvzjWZWQsB3A6lco8X1BjK51Rro.roa (hash: R+i0CBWTZwrH14DiftjMYo17Tzx/3SLww5XYhZACozo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:a2:ba:d0:f5:80:cf:9e:b7:89:92:ae:72:7a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
        Validity
            Not Before: Feb  9 15:01:04 2026 GMT
            Not After : Feb 10 15:01:04 2026 GMT
        Subject: CN=549c72075323285bd418270c3f427cf7bb7d4807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:fe:cb:c8:7b:b5:ab:51:8a:1f:65:95:9c:
                    d5:67:ac:4d:21:c3:14:2a:bf:48:9d:b4:55:d8:3d:
                    fb:eb:14:ff:98:1e:da:27:e0:bb:14:cf:7a:7b:d9:
                    68:67:39:76:bb:f8:cb:0e:2e:f2:02:06:88:cd:50:
                    da:af:7f:c0:8d:87:06:f1:8d:8e:8c:62:1d:5f:98:
                    a4:17:4f:76:27:1c:70:b8:7c:14:62:b8:5f:96:56:
                    65:e1:80:26:16:e3:fb:c2:2b:df:4b:3b:dc:d4:82:
                    3f:9e:d9:63:08:5c:2b:ae:ea:6b:08:39:32:12:bc:
                    05:60:f4:38:18:54:63:9e:cc:8d:50:99:6d:13:01:
                    e0:e3:01:cf:b4:1c:93:a9:8b:4a:ae:9e:92:7e:39:
                    8a:b8:91:5b:02:8a:d8:16:f1:34:04:88:9d:5a:c7:
                    b0:e7:72:99:84:5c:f3:c4:a1:8b:dd:08:ae:a7:11:
                    71:a7:53:a6:79:5d:2a:2a:e9:36:45:48:52:14:91:
                    d7:1a:dc:c3:ea:89:23:9c:0c:d5:71:6e:aa:ea:e2:
                    0a:f5:48:b5:d7:b3:2d:a1:95:ab:49:a5:cc:76:c0:
                    8b:d5:15:eb:13:f6:a7:e2:93:33:dd:2b:d6:3c:4c:
                    db:f0:b6:9f:ca:76:d1:2d:ab:6f:e9:d4:f2:7d:31:
                    0d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9C:72:07:53:23:28:5B:D4:18:27:0C:3F:42:7C:F7:BB:7D:48:07
            X509v3 Authority Key Identifier:
                keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:57:7c:29:1d:d1:41:8f:8d:a2:e1:f4:3d:0d:f5:0a:f7:5d:
         c8:b2:41:ac:fb:31:23:7d:2b:ec:66:07:86:eb:03:a2:5b:b7:
         09:c1:b2:d6:e2:c8:78:d8:66:b8:82:0f:0d:33:73:eb:f2:b0:
         8b:3b:83:e3:a3:37:2c:ac:c1:e9:8f:bc:69:a5:46:ff:0a:7e:
         77:26:54:3a:f4:91:d8:f0:8b:ba:98:c5:b8:c2:63:c0:10:b5:
         e1:0f:2a:b0:14:8f:f0:f6:b0:65:9c:a6:b6:cc:28:8c:2a:52:
         de:14:25:b1:7c:82:7d:ea:b8:42:e1:94:9e:89:1e:70:91:e0:
         76:20:16:c7:74:56:fb:54:7a:cb:ae:e6:c5:d0:f7:a5:58:04:
         f7:d0:7c:1c:ab:51:d0:e6:a8:9e:6c:5e:b1:5a:ad:9e:09:f7:
         87:b1:c2:8c:cb:e9:1f:fd:e5:63:52:49:9f:f0:97:a3:41:9d:
         b0:5b:59:1e:78:ee:92:04:a4:81:06:cf:32:78:1f:5e:69:32:
         fa:51:67:9e:fd:1d:f5:1e:d4:85:c2:a2:f0:43:d4:67:c1:a2:
         08:1f:e5:d4:31:ae:2a:99:11:a7:a5:86:de:21:de:5e:59:ec:
         0d:10:57:4e:bb:d4:7f:6a:72:30:b5:09:89:38:7f:09:9e:7a:
         a9:80:a4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:57 2026 by rpki-client