This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File:                     4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier:          rlF8/bQLfNEuZqDTpi31e9KH7GOaScwiCeKyOvJ0L+A=
Subject key identifier:   F8:E9:B2:13:90:DD:43:1D:56:FC:BD:FD:5B:EF:18:E4:BE:70:71:0E
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer:       /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial:       019C41A1456526C8694A08795481174CBDDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number:          0918
Signing time:             Mon 09 Feb 2026 09:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:13 +0000
Files and hashes:         1: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: v0q9p4JjgUaYjHbdcdRJvGbpz+q51eJilbDg+k1ow4s=)
                          2: u7z3f5MyS6Pn44Y8ceWPcFJRqYE.roa (hash: wWTcWByT+kygfV9+kd/6R30QexArvjCPKfIUysPXkgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:45:65:26:c8:69:4a:08:79:54:81:17:4c:bd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
        Validity
            Not Before: Feb  9 09:00:13 2026 GMT
            Not After : Feb 10 09:00:13 2026 GMT
        Subject: CN=f8e9b21390dd431d56fcbdfd5bef18e4be70710e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:d9:c3:d2:d5:20:44:bc:18:90:56:60:05:
                    27:2b:65:34:0f:3e:f0:f2:7c:17:59:85:1d:4b:20:
                    b3:21:ec:ad:dc:09:8d:eb:c3:28:e5:f6:69:8c:01:
                    5c:f8:44:e8:b8:61:3e:20:b9:ba:ed:b8:42:05:53:
                    b6:e4:04:e4:32:c2:a1:7d:a6:6b:17:41:a6:e9:66:
                    db:59:f7:bd:2d:dc:14:03:fa:95:25:89:4c:04:49:
                    d1:fe:66:29:13:c5:67:36:63:6e:21:5e:06:d2:f8:
                    0b:19:3e:c2:be:dd:ed:94:9c:fb:8c:8c:07:cb:cd:
                    e9:ee:b7:f6:95:98:f6:d3:d3:90:93:a7:9d:db:e6:
                    6f:ee:44:02:31:ed:f5:b8:9e:30:74:0a:e4:75:0f:
                    7a:95:3c:05:5a:bd:ed:ca:8b:e4:6e:a2:e9:56:a5:
                    6e:bb:99:43:26:8d:cd:8a:68:14:05:85:45:0b:15:
                    ed:16:18:6a:12:e1:ab:f4:fc:a9:21:56:f2:83:4f:
                    86:f8:45:36:a0:f2:6b:43:a5:49:0e:5d:66:cb:d6:
                    93:17:a6:85:30:0a:8d:7f:13:b7:ed:d5:58:75:d0:
                    9e:9e:38:ac:42:18:d1:f4:dc:34:82:b6:f0:58:db:
                    6e:fc:81:3c:46:bd:81:b9:5f:0c:df:62:fb:9b:41:
                    a7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E9:B2:13:90:DD:43:1D:56:FC:BD:FD:5B:EF:18:E4:BE:70:71:0E
            X509v3 Authority Key Identifier:
                keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:58:a3:67:9b:10:91:b7:cf:48:a4:58:0a:6b:e2:e6:f4:bf:
         49:84:52:08:90:ae:13:41:6e:d1:49:c1:f6:26:4f:a4:50:88:
         8d:42:1a:9e:cc:f5:2e:fb:83:d6:7e:61:cc:6a:cf:57:fa:3c:
         b8:57:c5:74:9d:68:c6:18:21:39:59:71:b1:46:71:81:17:c3:
         1e:a0:86:4b:01:64:6e:bb:3e:d1:ea:6d:7b:0a:03:a5:fa:5d:
         b8:d0:22:d6:ac:8f:9f:a7:da:dd:2c:22:2c:00:30:d4:e6:c7:
         19:d5:9b:e7:ba:c1:a9:d3:63:dc:be:43:1e:16:13:79:d0:26:
         60:87:d3:17:da:50:4a:f9:80:b8:b3:a9:31:ef:66:b3:3d:8f:
         b3:44:3e:b0:06:94:a4:04:cc:49:e1:6f:c5:ed:09:bb:66:1c:
         1b:d5:4b:7a:4b:e9:76:93:a0:35:05:eb:cd:a2:66:48:1a:01:
         77:11:a2:26:b9:bf:18:37:c1:94:09:24:f2:de:ac:55:0a:32:
         7b:db:e0:c9:de:a8:54:a1:30:e3:1c:43:4d:cd:64:75:ed:f3:
         06:c5:6a:ff:97:12:54:37:75:09:06:7d:4f:6d:15:08:6b:c9:
         8a:04:62:8a:1f:4e:f8:2b:d5:23:49:50:be:eb:6b:13:21:b2:
         24:8d:2e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:22 2026 by rpki-client