This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File:                     ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier:          0PXVq0SksfhIVGgs5AHVqbWF45zfpPTKbKfU9U+am9s=
Subject key identifier:   DA:AC:05:86:FA:6C:67:AD:98:E6:2B:E6:33:54:5D:F2:6A:E7:7B:9E
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer:       /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial:       019C42EB935FA0BCF538430A286772DCE3EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number:          113D
Signing time:             Mon 09 Feb 2026 15:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:00 +0000
Files and hashes:         1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: KiNeEyAwbxZN2FZPby59vd7Wky0/5pNav/cf0+N7HIg=)
                          2: xiaweqVG1CHDJgRNejRo2P9eeyc.roa (hash: n+28y42hDHDi1kYZcXvQyLxR0og5kY9omFStP76UHoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:93:5f:a0:bc:f5:38:43:0a:28:67:72:dc:e3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
        Validity
            Not Before: Feb  9 15:01:00 2026 GMT
            Not After : Feb 10 15:01:00 2026 GMT
        Subject: CN=daac0586fa6c67ad98e62be633545df26ae77b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:aa:6d:46:b2:7d:ee:85:68:f2:88:ac:38:
                    39:10:93:18:b1:a5:d0:83:d2:fe:15:28:3f:3a:73:
                    be:6e:76:8e:1e:8e:ae:f1:d1:24:64:f2:64:3d:a3:
                    d4:3f:39:aa:40:d5:b1:91:63:75:9e:6f:00:55:2b:
                    78:dd:df:d4:a0:e4:01:d6:1a:7a:a1:91:f4:dc:34:
                    43:1b:41:69:1e:c9:73:01:8c:37:b9:77:0c:7f:7b:
                    2f:e0:6e:c1:10:a0:58:13:97:4d:6e:4d:de:78:50:
                    5d:79:15:fc:91:4e:32:3f:59:fe:15:e7:be:ec:4c:
                    39:2d:79:63:9a:6a:82:34:91:13:e6:fe:81:58:fc:
                    e2:87:28:56:f1:2d:ed:1e:8c:78:91:56:c4:11:73:
                    3f:fa:1e:ef:cf:31:c4:2c:a3:3a:6d:da:27:f3:fb:
                    f8:18:32:05:99:4c:f5:6a:57:84:b2:cc:3d:df:f7:
                    38:c1:b4:4d:a9:f7:3e:2d:e7:fa:a5:d2:d1:17:2e:
                    4a:bc:59:e2:9d:87:0e:88:59:d5:9d:be:f9:e9:c5:
                    b2:e3:81:58:84:46:19:d1:87:86:77:70:56:76:8c:
                    e7:d2:b0:34:b0:54:0f:ad:02:33:70:0a:e6:7b:7c:
                    ea:42:9f:16:ce:4b:7e:35:dd:76:ad:c3:6e:f4:44:
                    1d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AC:05:86:FA:6C:67:AD:98:E6:2B:E6:33:54:5D:F2:6A:E7:7B:9E
            X509v3 Authority Key Identifier:
                keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:73:69:b7:e4:61:45:20:fe:88:ca:f8:1a:e2:74:13:91:3f:
         32:14:33:07:c1:2c:fa:7f:2f:de:54:fd:94:8c:77:2e:31:c6:
         e8:19:c9:c3:13:66:f7:d7:e1:9d:46:f9:ab:1d:54:5f:15:60:
         e2:f7:11:a1:f6:d6:02:ba:d2:2c:af:f7:ab:5b:e5:8b:63:d7:
         92:b1:22:1e:8b:c3:4a:1a:cc:9d:c8:d2:8d:81:a4:c7:48:ef:
         82:7f:3b:34:72:91:98:94:fc:24:07:7a:be:ae:96:86:c4:9f:
         60:80:e8:d8:a4:79:11:e8:29:df:dc:c8:39:70:8d:22:cf:bf:
         77:d8:e7:cd:4a:8e:a7:c5:bf:82:00:15:89:81:89:ad:07:28:
         f0:d6:cc:fd:63:af:03:9a:45:08:13:cc:cb:9b:0c:79:16:b0:
         de:eb:a2:fa:e1:6e:02:89:dd:ff:de:ce:5c:2e:fd:d6:a6:19:
         a7:68:9f:f6:ce:b3:94:53:39:86:3f:96:4f:11:63:fd:b8:1e:
         e9:12:e6:0f:15:8a:e1:b2:2a:d0:d0:4d:d5:85:b3:81:d8:89:
         b7:f5:98:88:51:63:7a:6f:72:84:d9:e0:f8:f7:cb:b5:50:88:
         4c:0e:f9:5b:33:2d:a7:b5:3f:f5:21:e1:4b:24:b7:f0:a5:12:
         17:78:b7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:56 2026 by rpki-client