This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File:                     TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier:          Q41wTV3lYmNGLZ+shaUZDLsLuWtg5h7jchRyrZURffg=
Subject key identifier:   09:02:E1:92:8A:9B:38:03:B2:68:FF:1E:C2:F1:3D:97:0D:17:D6:B3
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer:       /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial:       019C43904398A4A26FA0DD114CBC07A00122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 18:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:53 +0000
Files and hashes:         1: NU0khScwjPjv2Td0G2zhVpmilbA.roa (hash: AeqeiYhPTRBagvHIsxnzHVAbHQ3SfkNkz9Z07JIdpsg=)
                          2: QRtiZIJ3lC4wddKs5UQgizYT0KY.roa (hash: lrhTL8oElij8rm8reXnXmQ+K5/YFB6C+f/8MDpdyFUU=)
                          3: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: Fac4N/OUn9nGdJ5bTqFEGGR53FpOdefPSAhZ0pHDuaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:43:98:a4:a2:6f:a0:dd:11:4c:bc:07:a0:01:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
        Validity
            Not Before: Feb  9 18:00:53 2026 GMT
            Not After : Feb 10 18:00:53 2026 GMT
        Subject: CN=0902e1928a9b3803b268ff1ec2f13d970d17d6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:39:bb:65:24:fb:a4:2f:c2:be:80:c4:11:
                    ad:a6:2b:3e:28:dc:98:06:7e:3f:5d:4c:64:e6:7e:
                    b9:d3:13:f8:16:48:51:df:d1:e2:db:0a:8e:a7:d2:
                    1f:6c:c9:e9:e3:b8:00:68:0f:a7:d2:47:18:9e:86:
                    c4:39:7e:eb:3a:69:cf:61:ab:73:1a:33:df:84:58:
                    ee:46:d1:21:b1:58:8f:a2:fc:30:81:d0:a8:8f:16:
                    b4:0e:0b:d6:51:e5:70:7e:b0:00:6f:93:73:ab:23:
                    12:a8:b1:50:55:22:09:04:13:71:42:6e:02:d2:80:
                    cf:04:29:a5:39:be:6a:19:98:16:7d:8d:4f:0a:86:
                    1b:3b:a9:05:7f:ae:66:8d:c5:26:69:13:c4:a2:a0:
                    48:5c:3c:3e:7b:cf:2d:d8:6c:03:51:98:92:62:f6:
                    b5:ec:04:43:c9:be:fb:01:2c:e9:d1:33:8a:07:42:
                    4c:94:e4:50:26:6a:8e:c1:07:3a:cf:22:7d:66:ea:
                    ca:f4:b4:4b:99:23:e7:52:84:47:6c:4f:b9:91:61:
                    1f:53:b0:ae:4f:a1:21:11:64:1a:22:54:fc:97:3d:
                    96:c0:4d:2a:3e:d9:3d:ba:8a:60:88:ae:9b:ae:f4:
                    52:b4:83:33:dd:96:79:a7:5c:01:3e:a2:c5:4a:7f:
                    d4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:02:E1:92:8A:9B:38:03:B2:68:FF:1E:C2:F1:3D:97:0D:17:D6:B3
            X509v3 Authority Key Identifier:
                keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:55:e6:a6:7d:c2:a7:a5:39:5a:b7:e9:4c:5c:36:d6:a7:ab:
         a3:e8:b5:fd:fa:a2:db:9d:4c:8e:25:6a:cf:86:f9:91:17:6c:
         61:da:4f:d4:9f:ab:3f:27:01:09:d3:98:2d:d4:12:4e:e9:54:
         22:7e:22:f0:2c:86:08:17:c2:6c:22:9e:45:d8:92:7e:8c:63:
         90:8f:d2:09:66:03:f5:a4:e2:a2:d2:6a:2c:a1:a3:38:45:9d:
         2c:22:20:fb:73:49:5a:63:1f:0f:91:fc:27:53:69:ad:a3:b4:
         0a:dd:c7:99:11:51:98:63:14:3d:52:aa:04:6c:23:c3:a2:1e:
         18:22:2c:ff:41:f1:d9:a7:47:66:18:db:94:da:e1:38:b5:90:
         b8:11:89:90:06:97:0c:03:ad:9d:01:07:3f:e7:49:1a:fd:31:
         fd:3e:f3:86:c6:77:8a:a6:ad:e9:b7:fc:2a:6d:9e:d8:3f:6d:
         e4:e6:cc:66:77:d4:ec:cb:85:db:60:10:d4:e9:9b:a5:77:0e:
         67:14:e4:7b:41:9d:04:9a:35:0d:67:85:83:bb:a2:dd:fe:a8:
         8f:94:92:1a:d6:4b:1c:de:2b:24:2c:6d:30:91:ed:36:ad:df:
         46:bb:f4:b3:27:e4:a9:33:db:27:a7:67:88:29:79:7a:ce:f3:
         b8:f4:4a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:53 2026 by rpki-client