This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File:                     4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier:          2rq8AXWmqOfsBdasCnq+bDtuJel89HDZvKttD4f8/Bo=
Subject key identifier:   DD:91:32:A3:F0:89:7F:5E:69:9E:D6:E9:34:D4:EB:73:43:12:08:4D
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer:       /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial:       019C420FC0FC65AB4818CDF1EC3F9FD4EC16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number:          0EE0
Signing time:             Mon 09 Feb 2026 11:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:54 +0000
Files and hashes:         1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: 3s88/OGCuGUWvBpw8gZLN96F9HuBzRYmS/9cuCjCJRE=)
                          2: sIZQ5tszAsQWV3tSj16L1GSVX6c.roa (hash: UbS6Ylynq2ME7l06L5T3TkFEta0v6LJ++TVobQTXGgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:c0:fc:65:ab:48:18:cd:f1:ec:3f:9f:d4:ec:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
        Validity
            Not Before: Feb  9 11:00:54 2026 GMT
            Not After : Feb 10 11:00:54 2026 GMT
        Subject: CN=dd9132a3f0897f5e699ed6e934d4eb734312084d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:cb:6e:99:fa:ec:58:9f:fc:25:49:87:ff:
                    ed:d5:f8:ef:60:3e:6c:a3:39:62:5d:75:d6:9b:5d:
                    6f:ba:b3:48:51:75:ff:a7:7c:9f:31:b4:14:da:57:
                    fb:67:e4:4c:11:b4:a1:61:3d:b2:ed:52:9c:05:f2:
                    0e:7c:00:19:98:a3:6b:0e:33:05:ec:b5:0e:a2:32:
                    e1:a6:61:da:98:e8:44:b1:3a:f6:8e:e6:6b:61:67:
                    c8:93:89:72:c5:98:88:25:61:f6:5d:ca:ef:2b:fa:
                    74:1a:c5:53:f8:ab:b3:2f:11:58:dc:4c:9d:3b:a4:
                    c1:2a:7a:3d:ab:8d:6f:ec:66:3e:5b:11:da:2c:c0:
                    30:b4:16:e4:33:72:cf:02:5f:83:6f:de:38:9a:f4:
                    7a:f0:95:e8:4d:b7:1a:a4:c1:36:f7:76:76:4c:02:
                    09:b8:c1:b1:5a:f3:0c:ca:8e:56:01:3a:b7:64:54:
                    5b:cd:48:8e:ad:ef:fc:0c:b5:a6:7f:30:de:ab:ca:
                    c2:d2:dd:62:42:3e:64:8c:ce:a4:42:bf:7e:65:c4:
                    cc:56:6f:64:5b:ac:0c:eb:be:65:9c:c8:7a:08:59:
                    8c:86:8d:6e:d5:2a:e0:ef:14:56:31:f4:d1:75:01:
                    e1:3e:e5:b7:b0:81:5c:14:45:82:e7:b9:7d:ae:cc:
                    f9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:91:32:A3:F0:89:7F:5E:69:9E:D6:E9:34:D4:EB:73:43:12:08:4D
            X509v3 Authority Key Identifier:
                keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d6:15:7d:8a:a1:97:ab:1d:fc:cc:c2:98:c2:95:6f:cc:06:
         2d:bf:6d:38:78:eb:93:e5:b2:19:1d:cc:08:6d:1d:17:07:32:
         02:46:cc:b2:4f:ae:2c:25:10:d4:dc:05:b0:99:be:e2:52:32:
         21:f5:56:b8:f7:af:3f:31:1e:c2:9c:88:46:f1:50:5a:95:b8:
         2e:ad:f2:e9:58:ec:b0:ef:7c:80:49:c7:1a:8d:00:78:48:34:
         47:63:6b:73:5b:c4:2e:92:08:fd:e5:56:6f:af:0a:cb:cc:dc:
         39:1f:e0:fc:dd:2f:6c:37:a9:41:f7:f9:5b:3c:fb:e1:d6:46:
         b9:1b:9e:9f:23:0a:9d:f9:5b:e5:f1:cf:54:bc:c3:0d:8e:64:
         86:66:51:f2:85:09:c1:4c:2e:02:cc:82:76:7b:1a:4d:3d:3e:
         11:34:4a:97:49:e8:d6:0d:81:49:a2:07:0f:60:f9:35:ea:0d:
         6d:42:38:a2:e1:1b:e4:59:f1:30:a8:45:d5:30:96:f5:07:86:
         dc:96:4e:bf:ec:25:b5:a3:03:db:36:d4:70:38:a5:08:46:9f:
         46:75:e5:3c:a8:ca:82:bd:26:2b:1a:9a:0b:78:43:5b:86:54:
         f5:66:ff:0a:d4:e7:d5:3c:fe:ac:8b:33:26:13:1c:2a:c3:96:
         9b:d5:f4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:37 2026 by rpki-client