This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
File:                     4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft (raw, json)
Hash identifier:          VrKZV8lXZsEt+CGObg0B/fFr3+xN+hncAonSUNDB1GA=
Subject key identifier:   16:D9:EB:17:25:A8:1F:27:4F:D9:C9:6C:41:4D:E0:8D:C5:8F:53:A5
Authority key identifier: E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
Certificate issuer:       /CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Certificate serial:       019C416A6968EC2B80473E7C386251D074D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 08:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:18 +0000
Files and hashes:         1: 28-UkpXxAzZbO8vuIBQRnkr5eRE.roa (hash: YFs8JOoUa4SUku2tRg5QnVz5rp4j/Pv7WxhvaMnlFHg=)
                          2: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl (hash: 72tjxFrP5XpLScxNcauMipkG5cxvLpYEyrxojYA96Ao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:69:68:ec:2b:80:47:3e:7c:38:62:51:d0:74:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
        Validity
            Not Before: Feb  9 08:00:18 2026 GMT
            Not After : Feb 10 08:00:18 2026 GMT
        Subject: CN=16d9eb1725a81f274fd9c96c414de08dc58f53a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:c3:0d:79:10:7b:64:19:1d:f1:ba:c9:d0:
                    16:c2:2e:ac:c9:ff:48:30:8d:cb:b3:18:28:42:eb:
                    df:06:1d:0b:a9:ba:cd:f4:37:12:d1:68:0a:6b:ea:
                    d9:87:90:85:f1:ed:8c:2c:56:b9:3d:be:c9:1d:33:
                    75:73:03:fb:b0:87:4c:fc:cb:48:ca:d0:5e:fe:a7:
                    08:8f:cd:e4:e2:30:f2:06:51:29:25:9a:72:a1:3c:
                    d9:03:3d:12:ab:6a:53:4e:47:ef:36:de:fe:bb:07:
                    1b:1b:84:b5:b7:18:23:c6:f6:7a:ba:23:c8:08:bf:
                    a4:01:2c:68:e5:73:fc:7d:c7:44:c2:bf:99:f0:41:
                    ac:bd:b1:12:da:13:79:93:36:b1:bf:21:75:44:e2:
                    dd:64:70:1a:d9:ff:7e:90:77:ac:7f:a7:31:6d:34:
                    40:f3:39:65:d1:0a:89:ec:73:f6:2a:e3:46:c2:9a:
                    cd:80:1a:48:38:8b:92:23:83:01:2a:56:17:86:9f:
                    2e:70:09:fe:dc:ba:0a:f3:f2:19:b1:51:ec:3c:ef:
                    2e:25:d2:f6:1f:fa:78:07:e0:9f:08:37:24:69:4b:
                    be:3c:f8:64:73:1d:d2:cd:54:df:2b:7b:cc:e8:e4:
                    58:ea:68:60:71:b8:77:07:fc:50:ef:04:cf:aa:cf:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D9:EB:17:25:A8:1F:27:4F:D9:C9:6C:41:4D:E0:8D:C5:8F:53:A5
            X509v3 Authority Key Identifier:
                keyid:E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:e7:1b:6d:fa:40:72:30:0c:2d:24:e3:36:28:86:fc:ca:
         6e:a2:41:02:48:83:02:1f:de:68:80:f5:eb:4d:f4:13:42:c4:
         e6:a4:1b:ee:13:e3:db:3c:69:5d:61:58:16:b5:97:7f:22:33:
         fc:7f:85:6c:4b:1d:3a:e9:35:04:cc:8d:0a:20:7a:27:62:45:
         8f:3b:e6:b4:4c:ca:7a:30:1f:94:10:f0:b0:93:bb:27:2b:09:
         f0:b5:78:b1:76:a0:6e:ba:e3:d2:b6:f4:82:9a:f9:b8:ea:05:
         cb:5d:bb:ff:e6:12:e5:da:dc:f4:83:a8:36:84:fd:7a:17:ee:
         d5:3d:da:e8:15:e1:8c:fb:42:33:60:ff:38:75:dc:f7:b7:bc:
         46:5c:fb:7e:43:57:0f:b5:8b:8c:70:3c:79:ae:1b:23:f4:35:
         59:ab:1e:14:16:40:53:57:68:d4:a2:d6:20:e4:49:c3:b3:c0:
         bf:60:f0:fe:5a:9e:bb:2a:b5:aa:4a:59:40:ef:05:f7:f9:33:
         af:6f:f5:9e:e3:71:90:86:10:04:2a:ca:32:8b:45:b0:7c:76:
         60:f8:32:a3:1a:aa:5f:3d:d2:fe:80:06:4e:64:d6:79:f5:4a:
         61:98:9c:ed:3e:65:07:aa:7a:9b:74:ba:a3:13:d7:c0:3b:21:
         d7:c2:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:11 2026 by rpki-client