This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File:                     4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier:          wothMMN7S9bftpbA1iJ0++JtB48BpaqdgVjDEpZsvXY=
Subject key identifier:   67:90:E9:D4:85:5E:71:BC:DB:19:0E:0D:89:62:36:8D:5C:F6:03:1E
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer:       /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial:       019C424688A8A8245BD131A89924B290E5D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number:          08D6
Signing time:             Mon 09 Feb 2026 12:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:44 +0000
Files and hashes:         1: 1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa (hash: WqRlSVx1Vu6h+ixUdX0cx9Mi9fCqLKMKSDgwbsVbLZ8=)
                          2: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: Qpyl3khgiIt2THZnbr8rt0Q580FNm/1/5BpoL83j4E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:88:a8:a8:24:5b:d1:31:a8:99:24:b2:90:e5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
        Validity
            Not Before: Feb  9 12:00:44 2026 GMT
            Not After : Feb 10 12:00:44 2026 GMT
        Subject: CN=6790e9d4855e71bcdb190e0d8962368d5cf6031e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:47:1c:7a:54:97:1e:2d:57:65:54:c1:f5:
                    9e:e9:b2:fd:5c:c9:26:b6:65:4d:9a:6f:64:04:97:
                    11:c4:16:23:03:2e:09:b4:4e:30:1b:0b:54:69:31:
                    fc:a7:12:0c:0a:16:dc:67:4a:27:6c:35:c7:7f:b1:
                    3d:37:ce:63:6b:89:49:a4:b9:ef:b9:43:6d:6a:e4:
                    65:18:da:99:ea:4c:eb:fd:bc:2f:92:d3:e8:e9:37:
                    85:4e:2d:2f:0c:db:51:57:30:84:99:fa:42:24:7d:
                    07:e8:dc:cb:fd:11:41:d7:28:f7:22:a8:2d:9f:89:
                    61:a4:1a:20:d9:53:68:3a:84:1a:ac:1e:ad:5c:8b:
                    b8:3a:88:1f:6c:00:cb:9d:74:62:a0:6c:ff:4d:67:
                    10:b3:d4:b2:f9:5d:00:3c:c9:39:c9:04:06:0a:5d:
                    17:04:65:4b:5b:7b:2c:0d:fd:5f:d4:9a:6b:e3:3f:
                    99:3e:e9:41:cb:36:40:3e:94:33:0a:1c:ab:57:a5:
                    be:70:16:81:f0:d3:05:d1:41:6b:55:b6:08:b3:cc:
                    8b:e5:0b:ce:1c:3e:d6:1f:77:f3:10:fa:4f:71:ef:
                    d0:7b:df:9c:a8:a2:e4:81:52:62:cf:a6:f7:cc:00:
                    bc:ea:e2:f9:5d:87:70:ad:6d:28:f0:17:81:c2:5b:
                    18:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:90:E9:D4:85:5E:71:BC:DB:19:0E:0D:89:62:36:8D:5C:F6:03:1E
            X509v3 Authority Key Identifier:
                keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b3:8c:7c:7a:1b:3f:28:75:4a:2a:f2:ca:13:11:29:86:1b:
         89:e3:a7:2f:c9:43:ea:a0:b0:be:a4:eb:36:68:0f:af:8e:66:
         59:f7:5a:6e:fd:ca:87:f6:58:14:91:03:cc:fc:ad:1f:ca:1e:
         f6:29:f9:7d:97:d8:dc:4c:a0:cd:b6:0f:54:d3:8d:f9:e9:9b:
         e5:53:6c:ad:4c:c0:65:46:83:a8:fb:fa:8a:1b:ae:4b:4a:3e:
         ac:c6:5b:dc:e1:5a:36:cd:ca:f6:24:a4:5c:fb:1c:3c:52:46:
         2d:de:ae:b0:53:b4:c3:2b:16:4e:1f:01:c0:ac:21:79:22:df:
         d2:93:09:7b:57:9e:3f:01:02:d0:fb:0a:1e:dc:bc:a3:2a:74:
         af:d1:12:e9:7d:b3:b6:f0:a1:16:69:a5:fe:df:31:52:32:29:
         ef:f8:b4:31:e3:b3:76:c5:af:74:04:47:74:3d:c4:80:e3:65:
         ff:6a:15:ba:aa:0e:e6:bd:6a:db:6c:ff:97:57:09:43:93:8c:
         16:b6:06:bb:4e:4a:9d:34:0c:ef:c5:9f:fb:28:03:35:a1:d3:
         9b:ea:3b:57:ce:19:27:04:bd:a3:14:10:4b:98:b0:27:e4:48:
         dd:77:b6:16:5f:11:d0:bb:37:00:e6:b0:54:19:91:f7:a6:aa:
         a7:e6:b7:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRoioqCRb0TGomSSykOXQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjkzMDZiYzYxNWMzMjBhZTQxYTRlNzI2NjNlYmJhOThl
ZjM1N2MwHhcNMjYwMjA5MTIwMDQ0WhcNMjYwMjEwMTIwMDQ0WjAzMTEwLwYDVQQD
Eyg2NzkwZTlkNDg1NWU3MWJjZGIxOTBlMGQ4OTYyMzY4ZDVjZjYwMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi5HHHpUlx4tV2VUwfWe6bL9XMkm
tmVNmm9kBJcRxBYjAy4JtE4wGwtUaTH8pxIMChbcZ0onbDXHf7E9N85ja4lJpLnv
uUNtauRlGNqZ6kzr/bwvktPo6TeFTi0vDNtRVzCEmfpCJH0H6NzL/RFB1yj3Iqgt
n4lhpBog2VNoOoQarB6tXIu4OogfbADLnXRioGz/TWcQs9Sy+V0APMk5yQQGCl0X
BGVLW3ssDf1f1Jpr4z+ZPulByzZAPpQzChyrV6W+cBaB8NMF0UFrVbYIs8yL5QvO
HD7WH3fzEPpPce/Qe9+cqKLkgVJiz6b3zAC86uL5XYdwrW0o8BeBwlsY2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeQ6dSFXnG82xkODYliNo1c9gMeMB8GA1UdIwQY
MBaAFOP5MGvGFcMgrkGk5yZj67qY7zV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEt
M2NkMzNmZjMyNzQzLzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEtM2NkMzNmZjMyNzQz
LzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnrOMfHob
Pyh1SiryyhMRKYYbieOnL8lD6qCwvqTrNmgPr45mWfdabv3Kh/ZYFJEDzPytH8oe
9in5fZfY3EygzbYPVNON+emb5VNsrUzAZUaDqPv6ihuuS0o+rMZb3OFaNs3K9iSk
XPscPFJGLd6usFO0wysWTh8BwKwheSLf0pMJe1eePwEC0PsKHty8oyp0r9ES6X2z
tvChFmml/t8xUjIp7/i0MeOzdsWvdARHdD3EgONl/2oVuqoO5r1q22z/l1cJQ5OM
FrYGu05KnTQM78Wf+ygDNaHTm+o7V84ZJwS9oxQQS5iwJ+RI3Xe2Fl8R0Ls3AOaw
VBmR96aqp+a3nw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:52 2026 by rpki-client