This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
File:                     4oPErS_YckqMfV6vQxgUyz0VEn4.mft (raw, json)
Hash identifier:          61GFv78LEjvqGlsu8h0ye3w/rrZS+nbfIi0RAA5iS5M=
Subject key identifier:   64:13:CC:06:8A:85:83:43:E1:B3:B6:A9:6C:12:96:FC:CB:BC:44:57
Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Certificate issuer:       /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Certificate serial:       019C41A1F70C4A0974BC9156708CC5BA894D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
Manifest number:          0654
Signing time:             Mon 09 Feb 2026 09:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:59 +0000
Files and hashes:         1: 4WLRwhJOxK42p4s3y8Pi-f-uwGg.roa (hash: towBJONDWlEy1Ghtn/h9pt+Tf2v85Qo/Obp+rcJdKYc=)
                          2: 4oPErS_YckqMfV6vQxgUyz0VEn4.crl (hash: bX0sQSzjZuhFzkTacaciZI75DaAbUm/oqZwbLFj/ExI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:f7:0c:4a:09:74:bc:91:56:70:8c:c5:ba:89:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
        Validity
            Not Before: Feb  9 09:00:59 2026 GMT
            Not After : Feb 10 09:00:59 2026 GMT
        Subject: CN=6413cc068a858343e1b3b6a96c1296fccbbc4457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a9:4a:6d:ae:41:d0:42:29:91:59:41:2c:ef:
                    83:ac:fe:78:b5:a8:c8:13:7d:f3:36:c8:f5:f5:4f:
                    70:92:fa:3d:1b:7a:86:7e:95:aa:6f:98:70:2e:96:
                    71:97:9d:3e:3e:61:20:fb:4c:e6:51:e7:1f:f5:7c:
                    b0:03:aa:06:fc:87:18:e9:56:93:06:e5:fb:68:20:
                    3b:4b:92:ed:c9:63:f0:02:83:81:54:ea:e1:67:48:
                    2b:2c:68:6c:49:f6:1e:7d:84:1f:61:49:58:20:2e:
                    ad:04:2f:04:22:b6:df:33:d5:54:26:6d:71:e6:d5:
                    3d:f6:31:b6:9e:32:84:8f:1d:ad:37:ea:bf:2b:6b:
                    cb:77:1a:e9:8c:00:16:2f:a5:bc:fb:64:cb:aa:1a:
                    55:59:03:4a:05:47:94:9d:b0:2c:65:a3:ba:23:25:
                    a2:4d:e1:37:22:f8:d6:63:0b:a0:ab:84:80:63:b1:
                    21:8e:a0:f2:51:3f:2a:42:a0:98:37:b6:f6:e9:8d:
                    17:52:c8:a1:6a:da:6d:5d:50:64:d1:2c:cd:d1:85:
                    1c:a6:7a:f2:f5:d5:37:d3:71:4f:48:75:7e:aa:e2:
                    07:39:dd:eb:69:41:c9:0e:9c:13:f2:9c:e1:72:3d:
                    dc:22:ae:a5:a2:9b:bb:a4:ae:c2:08:3d:34:25:39:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:13:CC:06:8A:85:83:43:E1:B3:B6:A9:6C:12:96:FC:CB:BC:44:57
            X509v3 Authority Key Identifier:
                keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:62:07:7a:48:d7:91:49:28:be:aa:c0:8c:b7:9d:0b:63:4e:
         2d:df:2f:d2:9e:88:9d:e7:e5:d7:98:af:ad:c2:cf:23:83:41:
         a1:ae:41:2a:67:0d:c7:33:f6:13:8e:4a:cc:bd:84:f4:ca:76:
         c2:60:5d:5a:46:80:64:95:e4:1a:00:55:68:48:15:08:6e:ec:
         5d:4b:e8:8b:a9:fd:e4:1a:22:be:2b:2d:a2:2a:62:16:fe:b9:
         d0:0b:df:bb:3e:52:79:2d:d8:44:e9:5e:b3:d7:05:77:8a:8b:
         e2:52:ff:ea:a6:12:15:6d:9c:7c:26:68:a3:8f:fb:51:fb:c7:
         30:d4:de:bf:81:d4:66:0e:4d:fe:26:db:8c:0f:8d:d7:9a:5c:
         3f:55:ad:f6:07:ae:49:15:07:85:0f:2e:09:24:a5:65:4d:c8:
         ba:3d:87:57:c0:26:23:e9:fb:a9:a9:a8:2e:25:6f:a0:cf:21:
         78:3a:4b:e6:53:41:b6:be:fe:1b:40:d3:2e:da:8f:27:8a:e0:
         62:51:04:11:bb:54:12:0e:ab:35:19:d5:bb:d7:7a:47:7e:63:
         4d:71:cf:c6:4a:87:db:f1:31:d2:b9:db:d6:0b:a0:e4:74:39:
         b2:b5:0f:bc:03:fc:02:88:8b:f2:2d:f5:f8:2d:ae:0e:65:64:
         27:04:e3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:29 2026 by rpki-client