This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File:                     4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier:          UnJqQugcUiNxppCvW7pPugqRVLZD+NtQTu0kFdQSwbc=
Subject key identifier:   DC:8B:B7:F2:86:C1:BA:37:23:2C:8C:66:60:AB:0C:58:A8:ED:D0:F2
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer:       /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial:       019C42B43F70BBA552CB70E7B64D6C8293A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 14:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:34 +0000
Files and hashes:         1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: jdzld0CbgJD8Q0mRUhSegfufYPgAbSC00yBQniiv8JI=)
                          2: J1Zd6j9Lcwtys2PuV4W0VrM-mt4.roa (hash: 0QTHJDhGxK5m6zxqs1yz2ztZUhs7s6VuZHp2XlfhZqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:3f:70:bb:a5:52:cb:70:e7:b6:4d:6c:82:93:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
        Validity
            Not Before: Feb  9 14:00:34 2026 GMT
            Not After : Feb 10 14:00:34 2026 GMT
        Subject: CN=dc8bb7f286c1ba37232c8c6660ab0c58a8edd0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:fc:6d:1b:e1:f4:8e:c4:bc:88:97:aa:52:
                    50:cf:00:00:46:19:18:99:7b:c3:f4:a5:70:aa:3f:
                    b0:9d:55:2f:72:43:ba:87:63:59:00:52:8f:12:60:
                    6d:7c:62:66:29:eb:f1:30:da:79:13:3a:ce:b9:ad:
                    43:0d:0e:ae:e4:38:b0:da:af:f1:10:65:df:64:1c:
                    a8:e9:2e:b4:ad:44:06:35:87:2a:ca:0d:27:6d:50:
                    b8:03:25:63:2d:16:21:4a:6d:fd:1b:6c:0a:d9:b2:
                    fe:d9:3f:c7:a7:ac:4c:a5:12:ae:99:37:7e:b5:0e:
                    46:d6:58:5e:9e:d7:af:5e:4e:57:47:61:18:c5:de:
                    6f:3c:21:7d:d8:8c:b8:c8:c9:dc:bd:ae:d3:80:34:
                    5e:2d:55:c2:9f:17:b1:56:30:db:ad:92:b9:6f:83:
                    0d:a5:d3:14:d6:23:ad:20:e6:42:e6:bf:1c:a8:93:
                    fe:60:46:5a:15:4a:f5:22:6a:a0:15:7c:44:74:1c:
                    11:0c:e7:ee:c0:60:9d:89:f0:17:78:20:7b:5b:2d:
                    ba:b5:1a:2c:45:37:9f:cc:fd:6f:d8:4b:43:fb:d9:
                    cb:ce:19:5e:e5:2e:3d:7c:e5:f9:4c:df:b7:c7:31:
                    31:5a:53:a0:cb:9c:0c:32:3c:80:41:5b:7b:a6:bb:
                    8b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8B:B7:F2:86:C1:BA:37:23:2C:8C:66:60:AB:0C:58:A8:ED:D0:F2
            X509v3 Authority Key Identifier:
                keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9f:82:04:67:8e:f6:19:fb:c2:5e:90:f4:d8:6d:32:70:94:
         53:3a:b2:9f:8f:e2:b4:a0:3b:3b:9e:37:77:55:e7:d9:72:00:
         1b:ac:91:5d:24:bd:1f:29:17:48:6b:84:d6:35:b5:bb:78:bb:
         5d:3f:14:0e:a0:d3:1b:12:9c:9e:c8:1f:5b:74:59:8f:a8:cd:
         8b:5c:49:6b:cd:25:b4:44:67:e4:58:7d:b3:da:88:40:27:83:
         72:ae:bb:46:23:82:67:f5:5f:ad:5a:d5:1d:7d:85:a6:fe:82:
         40:a8:e6:90:11:31:11:47:79:5d:2d:bb:3e:c8:c2:f0:da:fe:
         10:59:ee:dc:1f:43:f0:be:39:97:47:3a:68:f7:55:66:67:5c:
         87:98:3b:60:8d:ba:93:2c:d0:eb:75:8b:c5:38:c8:48:e5:3d:
         d2:6a:a1:c3:53:2c:8c:f1:84:19:f1:41:20:a4:96:31:cc:61:
         b2:b1:89:4f:56:c7:e1:b1:b6:d1:56:19:8d:66:e0:64:ec:45:
         ca:6d:b6:9c:79:d8:68:c5:ed:cd:01:32:93:ad:77:00:eb:1d:
         cf:94:1a:8b:f8:18:d1:36:e1:c3:f9:ac:14:0b:93:d2:be:b7:
         ae:52:ff:47:21:df:59:da:84:ea:21:ea:7b:f3:77:e2:1e:d5:
         81:9c:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:25 2026 by rpki-client