This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
File:                     SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json)
Hash identifier:          CcYPAFCG0/YToJYVOGMxVZOPXEZgc6KUlHbTDv0cmj0=
Subject key identifier:   2B:E4:EC:84:90:74:64:8D:63:70:8D:50:E4:21:81:E4:1E:90:37:97
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Certificate issuer:       /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial:       019C41D8957F1522CC0E401718687FE82C05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
Manifest number:          04CA
Signing time:             Mon 09 Feb 2026 10:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:38 +0000
Files and hashes:         1: LZgnWlWrjTCukxd_XCJP8Vtjqkk.roa (hash: rbZKiC7VxvRdtB9FGEjRH+5pWBKmKmF8M+8quOww67M=)
                          2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: fu9D2d5RGEVcrdSWVzXReFqDPPQPp6xFNRoaSITt7bE=)
                          3: h9b4JeNT7A8pWHM8uaXkZ3HWW2c.roa (hash: 8n1s/5mgSp5GN9ljUgJO+fSaluuMo/7ZenBSfeNwrrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:95:7f:15:22:cc:0e:40:17:18:68:7f:e8:2c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
        Validity
            Not Before: Feb  9 10:00:38 2026 GMT
            Not After : Feb 10 10:00:38 2026 GMT
        Subject: CN=2be4ec849074648d63708d50e42181e41e903797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:b3:bb:82:f1:c0:d1:43:37:70:ab:bf:33:
                    1b:19:04:7a:48:76:77:8b:14:55:27:a7:3d:cf:c6:
                    09:6e:9e:6f:77:12:9e:d7:88:4f:51:69:d7:99:2c:
                    64:2f:76:02:96:cd:c6:f9:e7:ef:60:5c:a5:56:56:
                    54:89:18:2c:6c:96:41:dd:a0:01:ce:f3:22:ca:88:
                    38:d5:41:3e:4d:23:4c:9d:e0:3c:76:6b:21:c6:8d:
                    93:c2:07:7b:2a:d8:d3:2d:80:47:72:dd:a3:6e:ba:
                    11:c9:c3:2c:5f:03:39:14:1c:d8:48:1b:0a:d9:ad:
                    34:45:a5:bb:71:d1:65:07:32:20:4c:be:75:99:e7:
                    31:d7:c5:22:a4:43:8e:57:6e:47:5a:c4:c8:4c:a5:
                    4b:37:35:6c:7c:d7:8a:c8:4f:b4:3f:dd:de:0b:2a:
                    c2:17:8c:a1:69:55:24:34:dd:8a:00:79:c4:dc:90:
                    8f:a3:8f:2c:94:e8:7a:d6:d4:b5:ee:8f:00:72:e4:
                    3c:f1:4c:09:9d:8b:2e:98:39:13:73:65:19:79:38:
                    21:e5:c9:c8:2d:23:87:e2:a5:4e:3f:5f:9a:a2:b8:
                    12:d4:1d:78:3e:d0:65:ae:86:ae:e7:37:ba:e5:d6:
                    87:77:93:dc:75:b3:fb:aa:78:17:17:95:d5:b5:0c:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E4:EC:84:90:74:64:8D:63:70:8D:50:E4:21:81:E4:1E:90:37:97
            X509v3 Authority Key Identifier:
                keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ee:6d:f3:b7:ce:5c:fa:cc:42:35:96:0d:32:f7:c4:db:d4:
         8f:6e:e2:96:8c:c7:95:0f:cb:5d:ca:6b:51:c0:7f:9d:5c:71:
         b9:5d:9e:07:27:9f:6e:c8:e8:7a:94:ef:37:eb:b7:c8:6c:55:
         17:03:8a:13:10:70:88:d0:19:ec:c9:3f:c3:bf:6a:ad:19:49:
         34:e2:73:48:27:69:b2:96:ca:bf:2d:68:eb:ac:9f:03:08:9b:
         d6:e0:d7:d5:02:11:69:8d:63:2b:1a:05:c8:91:e7:6b:18:67:
         3a:68:97:5c:04:36:11:38:5c:9c:fb:51:44:e2:28:7f:29:b0:
         0b:c9:b7:c0:d0:a0:90:fe:14:4f:90:3b:a5:f9:5d:93:fb:b3:
         25:7e:75:7a:55:f0:c1:73:b5:c9:f3:ae:b6:5a:5a:f5:db:40:
         4a:a0:ca:13:2e:e6:69:1a:08:8e:7b:6a:4a:33:7e:02:a7:10:
         39:07:5c:c1:46:11:7c:d2:d3:7b:b3:fc:29:67:ae:cf:99:2f:
         ce:92:cc:9e:4b:53:21:17:5a:f5:e9:e6:a1:73:20:87:ad:35:
         9c:86:86:25:a1:28:fc:ea:71:78:2b:ea:bb:63:a4:f5:c9:f5:
         de:2d:35:71:9d:93:f8:b4:79:46:d4:ec:fb:2f:5e:f5:cf:d8:
         c5:0e:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:39 2026 by rpki-client