This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File:                     4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier:          J7+A49J566hjWmtrZCAhcjJ+zny/TGglVlBsDB2uzQ0=
Subject key identifier:   2C:2A:95:B3:E7:40:11:DD:9A:20:31:C1:7D:69:11:94:E8:AB:4B:AE
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer:       /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial:       019C41A16BDB4036B49FCC627BB9FC22A9AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 09:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:23 +0000
Files and hashes:         1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: ariZwADX+Man1QalzTaB0qiZTBzrJOILtB1RT8lTyCc=)
                          2: azb1_WO3_kwPuSAgYoVTIRPk0go.roa (hash: 1/nAUytly79O0AERwCaGs88tFerHBFBw3HoH4Qov+gM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:6b:db:40:36:b4:9f:cc:62:7b:b9:fc:22:a9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
        Validity
            Not Before: Feb  9 09:00:23 2026 GMT
            Not After : Feb 10 09:00:23 2026 GMT
        Subject: CN=2c2a95b3e74011dd9a2031c17d691194e8ab4bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:65:5d:c9:9c:2f:2d:ed:64:64:c2:37:37:
                    80:c9:1b:c1:7c:27:b7:49:cf:77:f0:b4:e8:0d:0a:
                    b9:9a:16:76:44:45:9f:ee:cf:13:b6:7e:04:c1:27:
                    5c:58:13:ef:01:ac:40:22:d2:7f:05:78:05:d1:17:
                    93:0a:ba:38:73:5b:ad:f2:b9:3d:c3:f0:8d:5a:d5:
                    95:3b:65:f4:07:13:81:80:a5:76:c6:53:6e:eb:94:
                    c5:3e:f5:d2:72:73:bd:29:80:9c:5b:26:a5:f6:41:
                    a9:18:b4:55:6d:8d:c4:da:05:0f:74:72:e1:02:a9:
                    dc:2d:bf:63:3e:01:a3:dd:c6:ec:c1:5d:8f:83:de:
                    ca:4b:10:74:17:f8:5e:d9:29:21:a8:c0:f1:6c:ff:
                    b5:6b:a0:be:e9:dd:9e:29:62:f7:ae:cd:04:8a:8b:
                    8d:b0:70:14:f5:d9:6d:df:f8:97:5a:b3:e1:9f:a6:
                    93:95:0e:d7:fd:0e:84:ba:6a:28:d2:37:23:56:41:
                    2b:6d:0e:bd:77:dc:f9:a6:41:76:17:16:5f:84:5b:
                    01:5b:0b:c5:c3:a9:02:71:a8:99:1d:5e:f6:8f:cf:
                    91:bb:80:93:f7:11:c7:2b:65:48:bb:65:8e:03:5d:
                    57:0f:9d:19:bd:a8:b5:9c:14:18:d2:02:13:91:fe:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2A:95:B3:E7:40:11:DD:9A:20:31:C1:7D:69:11:94:E8:AB:4B:AE
            X509v3 Authority Key Identifier:
                keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:91:89:04:9e:86:d9:74:98:5b:4f:6e:20:da:69:d7:31:ee:
         82:b9:6a:10:79:b1:4b:53:0b:5b:64:ee:c1:1d:c6:f4:63:b7:
         73:81:d0:69:a0:63:4c:e5:a7:40:e8:b2:75:88:25:f6:2f:08:
         a8:3b:9b:8c:d1:02:84:7f:df:a2:b3:74:be:d6:00:7f:a9:41:
         f9:0a:ea:46:99:92:ac:11:96:57:a4:40:f1:d4:e6:46:e1:e7:
         59:26:f2:8a:14:91:4c:59:cd:5e:24:3b:55:14:61:a0:78:35:
         85:ec:2e:d2:bf:1f:02:e8:48:f8:2f:07:d4:8e:ae:79:7e:ff:
         9a:48:10:49:ff:b5:a2:b8:5c:0b:81:d0:47:da:1f:be:02:22:
         6d:42:33:72:42:6d:49:73:7a:cd:54:06:ec:46:84:b4:45:8c:
         4d:54:58:bc:eb:fe:25:a5:7b:39:13:d3:20:b5:c0:4c:6d:e4:
         b5:6b:5a:41:6d:d8:94:98:e2:ed:63:3b:65:63:78:75:6f:ab:
         78:53:5b:04:77:34:2c:4d:47:2d:ae:2b:68:77:39:11:63:e1:
         29:ff:9d:5d:1b:97:45:56:6f:32:4b:2d:81:76:75:44:c5:60:
         f0:04:72:e4:a2:30:79:5a:32:ba:bb:1c:54:cb:d1:f1:5a:e8:
         ab:05:ba:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:57 2026 by rpki-client