This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File:                     f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier:          InHHqLq9hBiSIaw1VOklIzPoSQWy2iSCwNa1GSf3vEE=
Subject key identifier:   3C:4E:B9:43:F9:B3:2B:F7:C1:49:19:22:E4:D9:00:B8:6C:BC:32:1D
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer:       /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial:       019C420F6F9ECBAC982F2F877FD2587ECD6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number:          043E
Signing time:             Mon 09 Feb 2026 11:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:33 +0000
Files and hashes:         1: Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa (hash: vf8tQnW7oqoTXI/ZHAP1eVwRqXSdr72IdtoqliIf4Ys=)
                          2: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: 925VBga0wO1ewbY2jZF7GPfFhqPgd6PnJXGTUt+okYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:6f:9e:cb:ac:98:2f:2f:87:7f:d2:58:7e:cd:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
        Validity
            Not Before: Feb  9 11:00:33 2026 GMT
            Not After : Feb 10 11:00:33 2026 GMT
        Subject: CN=3c4eb943f9b32bf7c1491922e4d900b86cbc321d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:17:fe:6a:02:a3:aa:4e:ae:ff:9e:f9:b7:05:
                    70:82:92:81:d4:ac:d6:35:1a:a7:15:60:ee:31:45:
                    6c:23:b7:2e:e3:16:e1:9f:10:d6:f0:77:02:ef:bf:
                    9f:c1:d0:b9:13:cf:e9:f1:4a:e7:b3:53:b6:53:f6:
                    61:8e:b2:17:d5:02:f4:3d:cf:bb:1f:73:31:cd:50:
                    a9:41:05:d6:24:5d:52:9f:8a:eb:e2:01:97:9a:09:
                    67:23:7b:9b:22:ce:7d:03:44:e3:ce:50:7a:67:27:
                    56:81:73:85:64:c1:e4:a5:ce:e8:99:a9:22:97:0d:
                    c6:6a:02:17:1f:c1:17:86:1e:49:9d:4b:03:6b:fe:
                    43:14:0e:8d:ed:3a:a9:38:b6:82:c2:07:a4:b8:9c:
                    db:d7:58:64:39:17:ef:91:13:85:44:9a:f9:c2:f5:
                    55:61:1f:97:28:7f:da:46:ea:d1:b9:c2:3b:a6:f3:
                    a1:dc:4c:c6:0e:be:ab:1c:2a:c1:df:8b:af:ee:1e:
                    d0:b8:a3:43:97:d3:43:cb:82:35:b2:b8:75:d2:ea:
                    b9:95:d2:be:7d:8a:1e:e9:e3:d4:bd:7f:f1:df:4a:
                    21:15:d6:15:05:a8:36:41:eb:76:23:64:c5:b7:2b:
                    15:f2:79:13:2b:80:a2:80:c7:e1:cb:37:64:d8:47:
                    50:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4E:B9:43:F9:B3:2B:F7:C1:49:19:22:E4:D9:00:B8:6C:BC:32:1D
            X509v3 Authority Key Identifier:
                keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:19:bc:d1:11:c8:da:8d:4b:40:56:15:62:38:c9:9a:b3:ad:
         73:aa:a9:99:cf:c3:f3:e7:e0:a2:e1:2e:b3:47:59:a6:38:96:
         00:73:95:12:a8:7a:1d:5a:38:40:68:8b:45:fa:16:34:7b:39:
         48:05:65:d1:9d:35:e7:a2:39:fa:74:55:12:4a:32:da:7d:45:
         fe:19:e7:c1:94:89:ee:8d:d8:35:f2:c1:d5:a3:7e:2b:ff:f2:
         cc:2a:dd:e4:3a:f4:53:13:6d:f9:05:d4:64:78:8b:61:ab:c1:
         f7:c1:8f:46:96:2e:cc:6c:fe:47:95:14:14:74:a9:ce:ef:2f:
         3a:fb:bd:c4:a4:22:2a:9b:e8:ee:18:eb:f7:62:0a:88:ba:59:
         f7:62:2c:9e:96:2e:fd:8e:1c:2b:ea:22:8c:e6:ed:c5:8a:bb:
         a5:28:00:e7:52:be:0a:05:dd:9b:5d:ef:84:c4:87:a2:d7:b6:
         cc:a2:82:6c:67:02:8e:7d:cc:2a:33:30:5d:e8:7f:ec:48:79:
         fb:86:70:51:4a:7d:bc:72:02:86:be:18:83:99:dd:61:14:49:
         79:7a:e2:6d:f4:d8:2b:29:86:6b:40:81:86:0b:e6:d5:c7:fe:
         2c:85:ea:50:c7:ba:8f:d0:64:9d:87:10:fa:98:6b:a6:e2:15:
         28:49:25:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD2+ey6yYLy+Hf9JYfs1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmODVlOTkwMzU0Mzk3ZTM2YzBjYTkwM2EwYzYyMGM3NzA5
ZWZkY2QwHhcNMjYwMjA5MTEwMDMzWhcNMjYwMjEwMTEwMDMzWjAzMTEwLwYDVQQD
EygzYzRlYjk0M2Y5YjMyYmY3YzE0OTE5MjJlNGQ5MDBiODZjYmMzMjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhf+agKjqk6u/575twVwgpKB1KzW
NRqnFWDuMUVsI7cu4xbhnxDW8HcC77+fwdC5E8/p8Urns1O2U/ZhjrIX1QL0Pc+7
H3MxzVCpQQXWJF1Sn4rr4gGXmglnI3ubIs59A0TjzlB6ZydWgXOFZMHkpc7omaki
lw3GagIXH8EXhh5JnUsDa/5DFA6N7TqpOLaCwgekuJzb11hkORfvkROFRJr5wvVV
YR+XKH/aRurRucI7pvOh3EzGDr6rHCrB34uv7h7QuKNDl9NDy4I1srh10uq5ldK+
fYoe6ePUvX/x30ohFdYVBag2Qet2I2TFtysV8nkTK4CigMfhyzdk2EdQwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxOuUP5syv3wUkZIuTZALhsvDIdMB8GA1UdIwQY
MBaAFH+F6ZA1Q5fjbAypA6DGIMdwnv3NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEt
OGM5ZDU4MjNiYWQ5LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEtOGM5ZDU4MjNiYWQ5
LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBm80RHI
2o1LQFYVYjjJmrOtc6qpmc/D8+fgouEus0dZpjiWAHOVEqh6HVo4QGiLRfoWNHs5
SAVl0Z0156I5+nRVEkoy2n1F/hnnwZSJ7o3YNfLB1aN+K//yzCrd5Dr0UxNt+QXU
ZHiLYavB98GPRpYuzGz+R5UUFHSpzu8vOvu9xKQiKpvo7hjr92IKiLpZ92IsnpYu
/Y4cK+oijObtxYq7pSgA51K+CgXdm13vhMSHote2zKKCbGcCjn3MKjMwXeh/7Eh5
+4ZwUUp9vHIChr4Yg5ndYRRJeXribfTYKymGa0CBhgvm1cf+LIXqUMe6j9BknYcQ
+phrpuIVKEklpQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:04 2026 by rpki-client