This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
File:                     P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft (raw, json)
Hash identifier:          4PNb66A3KQyJwGaix+YJ8OM+JXtz/BzKYmPYZNT+jUc=
Subject key identifier:   BD:C8:B4:47:0B:01:73:31:F3:4E:38:D7:4E:9F:CB:70:82:2B:50:E1
Authority key identifier: 3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8
Certificate issuer:       /CN=3f8138fea066d6f504436001cc9d7f339db734c8
Certificate serial:       019C427D9603CF33BD0E8780A7A89F941903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
Manifest number:          0492
Signing time:             Mon 09 Feb 2026 13:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:52 +0000
Files and hashes:         1: 56OuJAFLxYLycHQelVfe38ZXJQ4.roa (hash: nQFqa95YTGbs99rbUDdgmLON/4oj050R+MJmxkQyzH8=)
                          2: P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl (hash: BeOheCRfR5t++VbfJrBGpDtsgqsFlPHvKiMtyhwcPk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:96:03:cf:33:bd:0e:87:80:a7:a8:9f:94:19:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8138fea066d6f504436001cc9d7f339db734c8
        Validity
            Not Before: Feb  9 13:00:52 2026 GMT
            Not After : Feb 10 13:00:52 2026 GMT
        Subject: CN=bdc8b4470b017331f34e38d74e9fcb70822b50e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:9e:7b:e5:91:49:94:34:12:68:0f:31:56:
                    89:e8:a5:58:bd:a7:ae:64:f4:14:fb:44:86:92:6d:
                    79:88:41:97:29:d7:a6:42:e7:a3:53:08:63:9b:fe:
                    a9:fd:66:6a:2d:ed:92:11:3d:52:e4:dd:57:f6:c7:
                    90:f1:c8:31:6b:e7:fa:be:36:0d:d8:96:8d:7c:69:
                    a2:e7:ea:d9:0d:4c:2f:5a:be:d6:f8:0f:75:3b:73:
                    44:3b:8d:48:2a:9a:38:4e:e5:68:7d:09:43:12:3f:
                    97:db:63:28:af:97:29:5f:cf:ec:2d:b8:2d:3c:d3:
                    3c:d0:47:3f:6c:9f:89:b4:12:aa:50:b6:a0:69:64:
                    07:45:3f:cb:6c:e5:d4:20:21:88:94:1d:6b:6c:cb:
                    a2:9a:3a:46:32:58:82:9d:dd:44:95:8f:b2:25:01:
                    f6:cb:82:b7:75:96:04:e1:9f:6d:a0:04:e6:49:f1:
                    62:21:34:64:57:ac:e6:89:d9:a7:ae:0a:b8:b2:33:
                    fd:19:54:fc:5e:11:39:25:36:b2:4f:12:96:23:26:
                    6f:f8:2a:0f:9f:ab:bc:4b:65:67:7b:97:3e:e4:ef:
                    81:90:e9:3a:2e:e2:db:c8:fb:a2:19:0e:13:1f:31:
                    d1:a6:98:63:ef:7c:85:93:29:39:a1:6d:90:25:ea:
                    05:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C8:B4:47:0B:01:73:31:F3:4E:38:D7:4E:9F:CB:70:82:2B:50:E1
            X509v3 Authority Key Identifier:
                keyid:3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:73:ff:57:4c:73:54:36:34:22:6c:46:5b:e6:05:1c:7c:1a:
         a0:2d:07:f0:80:e0:16:d2:b1:ba:17:a4:85:87:81:08:8d:dd:
         16:59:0e:d6:21:a9:3d:3f:29:b7:77:01:90:b1:6c:ac:87:ef:
         32:c9:45:a1:42:0d:f1:4f:c1:7a:9e:5d:35:56:a0:d0:53:2b:
         bc:d1:99:8d:53:c3:94:89:6b:23:34:15:ea:9c:5c:44:b7:3c:
         30:de:db:fa:74:2f:b0:4d:8e:33:c7:18:d3:3e:88:ee:c6:54:
         38:b7:68:66:7e:b2:7d:8e:d2:6f:6f:90:69:76:15:25:19:d4:
         41:1c:37:c2:fa:b9:ef:8d:c3:fd:5e:31:b4:00:ab:67:28:ba:
         29:c8:17:ce:5d:40:cb:5c:a6:92:be:c8:7d:15:1b:1e:9b:85:
         bb:a7:29:13:5f:ab:fa:7b:1c:e1:2c:0f:9f:28:c3:36:c0:9f:
         a4:9f:5e:bc:ba:d5:60:2a:bd:c4:07:fd:86:6d:56:d2:29:8f:
         64:f6:c2:ad:b1:ab:71:e3:36:e7:f5:9e:34:6a:bb:87:11:57:
         2c:20:a7:cb:6d:a3:1f:8b:32:90:dd:0d:93:af:66:d1:df:ee:
         19:49:1f:36:d0:f5:52:69:bf:f7:9d:88:79:ea:6b:61:72:b6:
         c7:09:9d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:53:10 2026 by rpki-client