This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
File:                     4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json)
Hash identifier:          lRIMd35XqqXm2QW7xeti/27XUFNIZbH4QsKZ2mu56is=
Subject key identifier:   C3:2F:87:5D:EB:1D:A1:E2:20:CD:A7:59:55:EA:E5:D4:60:69:D4:86
Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
Certificate issuer:       /CN=e3342c586371d465bcf35f79e1660e11e0805155
Certificate serial:       019C4134143A08B1F2EA571DD95684484A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
Manifest number:          027C
Signing time:             Mon 09 Feb 2026 07:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:57 +0000
Files and hashes:         1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: SY+s3m4w46MlIRaDdLJI+h1QMLmgDhFKBYXDngO3aDQ=)
                          2: EOa20siYhVvooEhEC-epku9D3Yo.roa (hash: CaHqewaEFsaPKRUAGEnwAKh1/0YdOwyqr30Vur/C7RQ=)
                          3: F-khUpYShoOhEncM3MZ3Y_Wm7h4.roa (hash: zuk3r9ZBjNWRUgr9lOJrcdso6ykt5/DxOmxhn65NsfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:14:3a:08:b1:f2:ea:57:1d:d9:56:84:48:4a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155
        Validity
            Not Before: Feb  9 07:00:57 2026 GMT
            Not After : Feb 10 07:00:57 2026 GMT
        Subject: CN=c32f875deb1da1e220cda75955eae5d46069d486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b9:b1:ed:cb:9b:aa:c3:8a:8c:ea:9d:98:ea:
                    6a:ad:8f:0a:0b:1b:58:af:07:2c:8b:93:a6:4e:8b:
                    5a:03:b5:70:83:4a:f1:50:2c:bd:f1:2d:6a:1f:78:
                    96:34:b3:78:98:f4:99:fb:c4:2b:cb:9b:c5:53:15:
                    93:ad:c1:f1:9c:47:71:60:0d:cf:6d:64:06:e8:9b:
                    31:03:d8:d2:53:a1:f7:30:b2:2d:fd:56:bc:29:2a:
                    3b:62:b1:a0:f5:8d:67:a0:dd:23:a4:47:59:b8:25:
                    1f:97:99:81:a0:56:2e:73:fa:28:1c:4a:95:e0:8a:
                    40:76:6a:03:9a:1c:36:fa:4b:53:84:f1:c5:34:26:
                    dc:87:7f:1f:8b:90:29:a3:cf:8c:1d:7e:24:89:3a:
                    89:cb:d3:6a:37:0c:6c:ff:9b:19:3c:f8:6b:ea:ae:
                    bd:06:75:eb:e8:6f:3c:e0:3b:3d:3a:e7:43:f0:ba:
                    87:60:7f:71:08:3a:ab:6f:29:88:dd:ff:d5:7b:1e:
                    60:71:9a:c3:e5:03:2d:96:36:43:04:64:e5:e9:fd:
                    c8:78:fc:97:a3:6d:23:a8:74:56:74:bd:8f:fc:a4:
                    b0:ee:09:60:58:a0:31:2c:de:0c:33:e7:23:3f:7d:
                    34:b7:3a:30:97:b3:b8:18:2c:82:a0:7f:cf:0e:7b:
                    20:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2F:87:5D:EB:1D:A1:E2:20:CD:A7:59:55:EA:E5:D4:60:69:D4:86
            X509v3 Authority Key Identifier:
                keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:56:ef:f5:b9:0e:6a:fa:17:ef:e6:4c:3c:05:78:a8:8c:fb:
         df:f5:ab:ba:de:21:9e:81:41:9d:dd:b1:c3:b5:5a:61:bb:f6:
         7d:17:62:8b:5f:c7:8c:95:7f:8a:15:2b:e5:7b:d2:4b:1d:bd:
         7b:30:fa:f8:4f:72:61:d2:b0:29:96:c5:4b:58:69:11:5f:8c:
         dc:b6:a9:8a:63:d6:2b:79:64:eb:6d:df:eb:7a:fe:2c:d1:23:
         d4:c2:39:63:31:fb:e7:89:43:fb:80:31:d4:95:a8:69:f5:3a:
         8e:04:5d:0a:ab:df:19:3b:da:1f:e5:56:2a:23:d3:34:54:e4:
         f8:59:bc:b9:e4:b6:1d:01:ba:38:77:da:d7:82:94:1a:bb:3a:
         2f:9d:db:fc:e9:89:9e:fe:ef:dc:f5:4f:f2:6f:75:9b:25:f4:
         93:79:72:c0:13:cc:ec:71:1b:a9:e5:93:57:b2:18:ed:98:e8:
         64:40:72:b7:11:2b:39:5f:2e:4a:14:0b:49:fe:22:5f:53:e9:
         f0:84:e3:a3:70:de:63:05:53:31:d5:6f:28:58:41:f0:85:e9:
         1d:b8:18:9c:ad:3d:ae:cb:43:92:fa:48:e6:e7:e8:23:74:21:
         aa:9c:52:12:c4:db:72:9e:60:3d:c0:64:e1:13:5b:98:ae:c6:
         0c:68:57:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBNBQ6CLHy6lcd2VaESEpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMzQyYzU4NjM3MWQ0NjViY2YzNWY3OWUxNjYwZTExZTA4
MDUxNTUwHhcNMjYwMjA5MDcwMDU3WhcNMjYwMjEwMDcwMDU3WjAzMTEwLwYDVQQD
EyhjMzJmODc1ZGViMWRhMWUyMjBjZGE3NTk1NWVhZTVkNDYwNjlkNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7mx7cubqsOKjOqdmOpqrY8KCxtY
rwcsi5OmTotaA7Vwg0rxUCy98S1qH3iWNLN4mPSZ+8Qry5vFUxWTrcHxnEdxYA3P
bWQG6JsxA9jSU6H3MLIt/Va8KSo7YrGg9Y1noN0jpEdZuCUfl5mBoFYuc/ooHEqV
4IpAdmoDmhw2+ktThPHFNCbch38fi5Apo8+MHX4kiTqJy9NqNwxs/5sZPPhr6q69
BnXr6G884Ds9OudD8LqHYH9xCDqrbymI3f/Vex5gcZrD5QMtljZDBGTl6f3IePyX
o20jqHRWdL2P/KSw7glgWKAxLN4MM+cjP300tzowl7O4GCyCoH/PDnsgYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMvh13rHaHiIM2nWVXq5dRgadSGMB8GA1UdIwQY
MBaAFOM0LFhjcdRlvPNfeeFmDhHggFFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYt
ZDk1YTM4ZjBjMDZlLzEvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYtZDk1YTM4ZjBjMDZl
LzEvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFbv9bkO
avoX7+ZMPAV4qIz73/Wrut4hnoFBnd2xw7VaYbv2fRdii1/HjJV/ihUr5XvSSx29
ezD6+E9yYdKwKZbFS1hpEV+M3LapimPWK3lk623f63r+LNEj1MI5YzH754lD+4Ax
1JWoafU6jgRdCqvfGTvaH+VWKiPTNFTk+Fm8ueS2HQG6OHfa14KUGrs6L53b/OmJ
nv7v3PVP8m91myX0k3lywBPM7HEbqeWTV7IY7ZjoZEBytxErOV8uShQLSf4iX1Pp
8ITjo3DeYwVTMdVvKFhB8IXpHbgYnK09rstDkvpI5ufoI3QhqpxSEsTbcp5gPcBk
4RNbmK7GDGhX/g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:15 2026 by rpki-client