This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
File:                     4-d1gqvilic_V6RVSq2m-lwf6bA.mft (raw, json)
Hash identifier:          kFS0YHrGjWQ5Nn3zv4ljQf4w54MhiXbUxKZC3dqkjqE=
Subject key identifier:   75:53:8F:E9:B3:78:98:7D:F0:7A:CC:FF:C9:99:09:16:6A:7F:B8:D5
Authority key identifier: E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
Certificate issuer:       /CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Certificate serial:       019C4246383ECDCB658D5F6C816413E1CDF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
Manifest number:          06D6
Signing time:             Mon 09 Feb 2026 12:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:23 +0000
Files and hashes:         1: 4-d1gqvilic_V6RVSq2m-lwf6bA.crl (hash: sZNb3HJfcqcGRHJ8RHG/wsCarOqleJFTaBEH434jqxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:38:3e:cd:cb:65:8d:5f:6c:81:64:13:e1:cd:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
        Validity
            Not Before: Feb  9 12:00:23 2026 GMT
            Not After : Feb 10 12:00:23 2026 GMT
        Subject: CN=75538fe9b378987df07accffc99909166a7fb8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:3b:50:da:18:0a:1c:91:46:fd:72:67:83:
                    5a:22:1a:51:58:d8:50:4a:c5:94:bd:5d:e3:65:25:
                    eb:31:15:9d:f5:d8:7f:1c:49:38:50:18:9b:5f:dd:
                    fa:c7:1c:55:78:81:c6:a9:43:5a:8c:16:13:0e:e2:
                    15:ad:10:34:12:31:6d:90:aa:3d:71:25:70:ad:67:
                    2c:26:e2:d9:3d:2c:41:a3:74:41:67:55:20:34:5d:
                    e8:3b:1f:2f:72:ed:aa:74:ca:37:74:99:27:7c:2d:
                    0e:76:39:fb:26:93:ad:c3:67:09:cb:0f:58:30:bb:
                    1e:13:58:78:b7:f1:2a:33:28:a1:e3:19:eb:9e:61:
                    3a:30:cc:95:78:09:f0:09:28:c9:09:ac:b3:2d:0a:
                    0d:26:8b:2c:0c:ba:56:4c:01:1d:7a:1f:92:eb:ad:
                    fa:2f:11:1c:d0:ed:4d:ff:48:dd:cc:43:8f:b7:bc:
                    5b:0f:ee:01:20:cf:24:39:57:ee:86:0b:a7:54:b9:
                    62:d3:84:5c:ec:d5:5d:d3:c4:a9:fd:26:4d:0d:71:
                    89:1a:70:e4:19:21:53:30:e5:30:91:48:54:cc:73:
                    ec:54:67:b2:ff:db:19:e1:50:0a:bf:af:c3:63:bf:
                    3e:2f:3f:e5:89:36:52:df:c9:00:37:a9:c8:21:da:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:53:8F:E9:B3:78:98:7D:F0:7A:CC:FF:C9:99:09:16:6A:7F:B8:D5
            X509v3 Authority Key Identifier:
                keyid:E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:84:b0:f7:7b:fb:eb:0e:36:aa:c5:6b:ac:30:f1:0d:36:b2:
         98:1a:db:14:4b:76:66:cb:67:dc:28:b7:b6:a7:4c:26:50:83:
         7e:89:3c:5f:90:12:a1:50:bd:9a:ae:b5:16:42:38:1b:84:92:
         78:b9:3a:bb:03:17:07:53:63:1e:02:47:f9:af:78:c2:e4:53:
         72:23:b0:32:19:e4:a4:79:28:8d:7c:51:c7:de:75:d1:55:ed:
         4f:73:ca:09:7e:d9:f5:ca:f8:57:49:0c:85:d6:4a:c0:64:7a:
         60:5f:ce:de:11:df:06:0a:13:b2:36:3d:a0:ec:68:03:bb:a1:
         08:1e:50:d6:28:57:80:58:be:48:ee:cd:ce:04:ea:6f:f0:c5:
         23:14:03:ae:40:00:c6:2d:a7:b8:8a:ed:c9:e4:12:4c:b6:79:
         cb:9c:6c:96:17:91:c6:5b:93:64:25:02:3d:e8:b0:14:4b:e5:
         8f:25:c7:17:07:ad:3e:78:5c:a7:c7:03:e0:3c:bd:53:45:fc:
         d0:47:fa:ba:0f:7a:c1:49:24:c4:7e:07:fb:2f:a7:52:da:fd:
         77:8b:be:d2:20:32:2f:34:b7:4b:72:dc:6f:86:83:4d:00:39:
         54:8f:14:78:21:66:82:72:cb:0d:ed:39:35:b5:6b:33:fa:21:
         fa:2e:4b:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRjg+zctljV9sgWQT4c3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZTc3NTgyYWJlMjk2MjczZjU3YTQ1NTRhYWRhNmZhNWMx
ZmU5YjAwHhcNMjYwMjA5MTIwMDIzWhcNMjYwMjEwMTIwMDIzWjAzMTEwLwYDVQQD
Eyg3NTUzOGZlOWIzNzg5ODdkZjA3YWNjZmZjOTk5MDkxNjZhN2ZiOGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqok7UNoYChyRRv1yZ4NaIhpRWNhQ
SsWUvV3jZSXrMRWd9dh/HEk4UBibX936xxxVeIHGqUNajBYTDuIVrRA0EjFtkKo9
cSVwrWcsJuLZPSxBo3RBZ1UgNF3oOx8vcu2qdMo3dJknfC0Odjn7JpOtw2cJyw9Y
MLseE1h4t/EqMyih4xnrnmE6MMyVeAnwCSjJCayzLQoNJossDLpWTAEdeh+S6636
LxEc0O1N/0jdzEOPt7xbD+4BIM8kOVfuhgunVLli04Rc7NVd08Sp/SZNDXGJGnDk
GSFTMOUwkUhUzHPsVGey/9sZ4VAKv6/DY78+Lz/liTZS38kAN6nIIdr66QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVTj+mzeJh98HrM/8mZCRZqf7jVMB8GA1UdIwQY
MBaAFOPndYKr4pYnP1ekVUqtpvpcH+mwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xNjgwOTYtYzg4Ny00NzZmLWIzMzUt
MTE4OTYwZWY2MmM2LzEvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xNjgwOTYtYzg4Ny00NzZmLWIzMzUtMTE4OTYwZWY2MmM2
LzEvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYSw93v7
6w42qsVrrDDxDTaymBrbFEt2Zstn3Ci3tqdMJlCDfok8X5ASoVC9mq61FkI4G4SS
eLk6uwMXB1NjHgJH+a94wuRTciOwMhnkpHkojXxRx9510VXtT3PKCX7Z9cr4V0kM
hdZKwGR6YF/O3hHfBgoTsjY9oOxoA7uhCB5Q1ihXgFi+SO7NzgTqb/DFIxQDrkAA
xi2nuIrtyeQSTLZ5y5xslheRxluTZCUCPeiwFEvljyXHFwetPnhcp8cD4Dy9U0X8
0Ef6ug96wUkkxH4H+y+nUtr9d4u+0iAyLzS3S3Lcb4aDTQA5VI8UeCFmgnLLDe05
NbVrM/oh+i5LrA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:52 2026 by rpki-client