This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
File:                     4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft (raw, json)
Hash identifier:          tGAk/dap6qMXmZOQKB1Phl0IV0g10WoOYbfDOPgYbPo=
Subject key identifier:   43:F8:F5:C1:F6:86:6D:31:AD:E7:33:E5:54:B1:6F:9B:AD:A9:AE:3C
Authority key identifier: E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
Certificate issuer:       /CN=e312f441382d5ba1d80df459bd46c0a31590e72f
Certificate serial:       019C416A8F52F50A67F7F1B63B045CA7A862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
Manifest number:          03AC
Signing time:             Mon 09 Feb 2026 08:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:28 +0000
Files and hashes:         1: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl (hash: 1i3QPT5arbAgywjgK7cSuj5quhCkqH7eBpWayEESK6w=)
                          2: FqEPqAF1w4Xbi11RnoaKy9R4Z40.roa (hash: GRwxJaIJLS4eVDlQIIx4t+X6+buzHRZw5GpMOZnwve4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:8f:52:f5:0a:67:f7:f1:b6:3b:04:5c:a7:a8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e312f441382d5ba1d80df459bd46c0a31590e72f
        Validity
            Not Before: Feb  9 08:00:28 2026 GMT
            Not After : Feb 10 08:00:28 2026 GMT
        Subject: CN=43f8f5c1f6866d31ade733e554b16f9bada9ae3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:02:61:a6:b9:fb:bc:c9:09:39:16:2d:3a:93:
                    b2:6e:91:5f:78:d6:49:c9:b0:32:33:5c:da:87:20:
                    ff:bb:f2:d5:9d:87:36:37:9b:f4:86:47:5d:d3:7e:
                    de:fb:29:e7:4f:88:5a:2e:70:9b:ff:f1:e3:57:c8:
                    19:06:63:ba:0c:74:08:68:d2:c9:da:e7:ab:86:94:
                    ef:d7:70:6f:3a:1d:19:0d:05:5c:5e:fa:28:2f:7f:
                    9d:b7:5c:6e:de:07:c8:b7:f2:a4:69:55:b9:83:c8:
                    8b:39:8d:29:8b:a2:f0:19:76:d9:a4:61:e1:1e:b0:
                    81:a1:89:e8:af:5f:68:0d:a5:0f:c7:44:12:87:3d:
                    ad:a0:ce:9e:0c:a1:3b:81:59:f3:e7:6f:8b:c3:49:
                    ed:c7:df:50:97:ad:a7:c8:0e:10:ec:76:cc:70:38:
                    f4:8a:8c:95:28:06:69:21:ed:f3:84:af:91:eb:40:
                    89:4b:aa:85:d1:cd:23:73:5d:76:9b:a0:88:df:d2:
                    37:17:8d:36:c7:f1:82:2c:04:ac:12:4b:9d:4a:c3:
                    5d:74:de:dd:9f:dd:70:9c:f0:f5:4a:db:d2:54:93:
                    ea:14:32:88:cf:99:3f:6e:3c:ca:1c:77:9e:73:5d:
                    dc:fa:97:23:ba:e7:ab:e7:a3:af:6f:b9:66:28:a2:
                    d5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F8:F5:C1:F6:86:6D:31:AD:E7:33:E5:54:B1:6F:9B:AD:A9:AE:3C
            X509v3 Authority Key Identifier:
                keyid:E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:31:e1:98:8c:c9:1e:71:82:ed:1a:2b:4a:60:72:0e:a9:ab:
         5a:34:ec:4f:78:f8:4e:4b:1d:a4:57:c5:d3:d3:37:81:b2:cb:
         fa:b7:92:82:99:b0:c3:98:d2:93:84:c5:73:9d:72:12:98:c1:
         7d:5b:e1:5b:7d:41:00:e1:cf:e1:81:79:37:2e:16:c9:9b:2e:
         3f:db:e6:89:5a:33:e0:a9:29:67:f9:bc:24:e0:12:11:30:74:
         35:e9:a0:07:3c:d4:7c:a4:7e:47:8a:6d:01:ee:8d:16:eb:d3:
         41:97:04:7f:3c:67:f0:b6:a4:ae:ce:e2:66:2f:47:2c:73:ec:
         ae:03:7d:5d:02:19:de:f4:fe:0a:00:aa:1f:0d:ef:36:72:e1:
         42:40:d3:61:0e:72:08:6c:0c:90:61:6b:6f:a4:c8:37:b9:3b:
         1b:92:ca:21:08:d4:5d:c4:75:0b:47:03:91:6c:8e:b8:12:8c:
         40:5c:95:59:7d:66:cd:11:ba:e7:93:53:59:6c:c2:f9:05:b0:
         41:8e:e9:6a:e2:d9:7e:4b:87:36:e0:8e:49:42:13:3a:ac:2b:
         cd:74:a9:11:b8:7f:14:3e:19:f9:0f:92:a9:92:ca:37:c8:02:
         cf:e3:34:2f:83:74:cf:e9:75:2a:a2:1c:71:52:a0:54:bc:4e:
         49:f4:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:34 2026 by rpki-client