This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File:                     4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier:          rf5TAF0LFfa15TChPBCgu5ZlIF/FKyTg5veOxuGqxPw=
Subject key identifier:   B5:92:3E:E3:31:92:67:C7:4E:29:26:B0:2A:FF:44:E0:48:64:3F:9B
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer:       /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial:       019C42B42CC0D9DEC1A9FB45E67C73EC1832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number:          151E
Signing time:             Mon 09 Feb 2026 14:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:29 +0000
Files and hashes:         1: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: cnmKA6EBuLURxaI8WC3o5H2/uj3QhwZZbZHETEW59pI=)
                          2: BdqGs3R6xCnjEwShLrflyZwaVp0.roa (hash: RR88JIqbu0K/mTZcvwGkA42FVlGztgnaWCqdDikFkjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:2c:c0:d9:de:c1:a9:fb:45:e6:7c:73:ec:18:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
        Validity
            Not Before: Feb  9 14:00:29 2026 GMT
            Not After : Feb 10 14:00:29 2026 GMT
        Subject: CN=b5923ee3319267c74e2926b02aff44e048643f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:1e:f8:3a:be:c6:91:cf:b9:fd:c4:5e:b7:
                    8c:1c:9b:c0:d9:a9:6d:99:af:cd:b7:d9:0e:14:56:
                    95:b0:63:72:5f:29:a7:5c:4b:2e:b1:fb:a3:51:f7:
                    de:20:07:36:c0:93:39:17:34:f5:af:45:38:62:c6:
                    ad:06:de:14:27:ac:b4:ee:bc:9d:4e:12:77:a4:ba:
                    86:6b:d8:f8:88:61:9c:33:ca:9c:b5:52:57:2b:5d:
                    1a:ca:fa:51:68:38:2b:9d:35:58:5e:74:9d:5c:b4:
                    fa:9c:e3:0f:0d:f9:23:06:c7:38:f0:d0:66:84:55:
                    8a:cc:c6:a3:d4:92:74:31:b7:69:25:a4:9b:c8:e6:
                    42:c6:6e:8e:44:9e:d2:72:3f:62:31:54:87:c8:a8:
                    bb:27:ae:cd:e4:dc:8b:33:5f:90:99:65:79:80:d1:
                    20:08:be:be:93:a5:12:01:ed:d9:70:16:c6:02:87:
                    ee:94:da:d6:c4:55:03:5b:82:84:b0:b5:6b:04:a1:
                    2d:67:1c:17:08:17:80:ad:0e:24:04:67:07:08:88:
                    7b:ba:6a:26:27:af:6b:32:21:9b:c2:b2:e4:c3:11:
                    ae:3a:59:4d:ad:7e:e7:3f:60:86:72:94:ef:72:7a:
                    60:07:2d:0a:26:a2:dd:cf:1a:3e:51:bd:05:31:3b:
                    18:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:92:3E:E3:31:92:67:C7:4E:29:26:B0:2A:FF:44:E0:48:64:3F:9B
            X509v3 Authority Key Identifier:
                keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a5:b1:09:5e:7a:63:b4:b3:cf:76:a0:60:83:3f:d1:ed:c2:
         3c:81:5e:fb:3c:90:f7:3c:28:0e:e9:c7:e5:28:8a:bd:0d:22:
         86:47:4c:e3:0c:0f:33:28:d9:55:83:4d:0f:66:df:5e:8f:d2:
         16:89:58:da:ce:ca:0f:0b:c4:11:e4:b3:92:67:af:01:90:0c:
         e4:2e:72:62:97:50:84:3e:96:27:58:67:13:5d:5d:db:16:36:
         08:c2:8c:5a:cf:6f:8f:a7:fb:b3:48:40:d6:a8:c2:f7:ec:e8:
         2f:d6:7e:0d:05:a5:78:95:49:f0:7c:45:bf:fd:3d:22:d9:9c:
         73:69:51:4c:3a:4f:76:db:fe:87:75:f5:0a:b6:8e:40:f8:8a:
         6c:57:69:a8:42:7d:8a:58:f2:63:3a:ce:d6:7e:0e:c0:8d:40:
         c0:ab:cd:fb:1e:45:59:3a:c0:4e:c3:f7:b1:01:87:08:e0:aa:
         b9:bc:9a:a6:89:ca:36:f8:7e:5b:52:0b:2d:99:25:84:78:33:
         83:eb:67:9e:96:de:42:61:51:72:69:f4:bc:66:be:72:aa:ed:
         13:bd:f8:20:1e:f5:46:d4:27:68:fa:7f:ba:1c:13:0a:6c:89:
         1e:e2:8f:0e:36:d0:d9:97:b1:2a:7e:55:0e:af:64:4d:2e:a1:
         1b:20:34:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtCzA2d7BqftF5nxz7BgyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMGM3YWM1NmIxMWUxMDRhYmIxNjdiYjFhYjM3OTJiM2Zh
N2MzZDMwHhcNMjYwMjA5MTQwMDI5WhcNMjYwMjEwMTQwMDI5WjAzMTEwLwYDVQQD
EyhiNTkyM2VlMzMxOTI2N2M3NGUyOTI2YjAyYWZmNDRlMDQ4NjQzZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPke+Dq+xpHPuf3EXreMHJvA2alt
ma/Nt9kOFFaVsGNyXymnXEsusfujUffeIAc2wJM5FzT1r0U4YsatBt4UJ6y07ryd
ThJ3pLqGa9j4iGGcM8qctVJXK10ayvpRaDgrnTVYXnSdXLT6nOMPDfkjBsc48NBm
hFWKzMaj1JJ0MbdpJaSbyOZCxm6ORJ7Scj9iMVSHyKi7J67N5NyLM1+QmWV5gNEg
CL6+k6USAe3ZcBbGAofulNrWxFUDW4KEsLVrBKEtZxwXCBeArQ4kBGcHCIh7umom
J69rMiGbwrLkwxGuOllNrX7nP2CGcpTvcnpgBy0KJqLdzxo+Ub0FMTsYQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWSPuMxkmfHTikmsCr/ROBIZD+bMB8GA1UdIwQY
MBaAFOAMesVrEeEEq7FnuxqzeSs/p8PTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mMjAwNzEtMjJhMS00NjFkLWI2YmYt
NGZkMGUxYjljMTJmLzEvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mMjAwNzEtMjJhMS00NjFkLWI2YmYtNGZkMGUxYjljMTJm
LzEvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKWxCV56
Y7Szz3agYIM/0e3CPIFe+zyQ9zwoDunH5SiKvQ0ihkdM4wwPMyjZVYNND2bfXo/S
FolY2s7KDwvEEeSzkmevAZAM5C5yYpdQhD6WJ1hnE11d2xY2CMKMWs9vj6f7s0hA
1qjC9+zoL9Z+DQWleJVJ8HxFv/09Itmcc2lRTDpPdtv+h3X1CraOQPiKbFdpqEJ9
iljyYzrO1n4OwI1AwKvN+x5FWTrATsP3sQGHCOCqubyaponKNvh+W1ILLZklhHgz
g+tnnpbeQmFRcmn0vGa+cqrtE734IB71RtQnaPp/uhwTCmyJHuKPDjbQ2ZexKn5V
Dq9kTS6hGyA04g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:53:07 2026 by rpki-client