This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
File:                     N4G6usaSUnGxeYF1FeBuahCs9rQ.mft (raw, json)
Hash identifier:          yeKkRzsyEIfZtBZu+qIxQBjynNYv1OllgFMT7jpbgUo=
Subject key identifier:   E4:97:09:A5:B4:E8:2C:72:3D:0F:D0:F2:96:94:9F:5B:14:41:D2:26
Authority key identifier: 37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
Certificate issuer:       /CN=3781babac6925271b179817515e06e6a10acf6b4
Certificate serial:       019C42EB76AD82B897BA6C4C86235E0E2054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
Manifest number:          07B7
Signing time:             Mon 09 Feb 2026 15:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:53 +0000
Files and hashes:         1: N4G6usaSUnGxeYF1FeBuahCs9rQ.crl (hash: P/cusrZ+lCv0acHXzrn0bumDVwpaRS1rKql7pUlykrg=)
                          2: UMO1z7FNQUIj7rxCcZm51cdNS7c.roa (hash: aO85cpc/9+GkbgWZzDFbtHXWcwZ07v5DtjyrFyxdVlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:76:ad:82:b8:97:ba:6c:4c:86:23:5e:0e:20:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3781babac6925271b179817515e06e6a10acf6b4
        Validity
            Not Before: Feb  9 15:00:53 2026 GMT
            Not After : Feb 10 15:00:53 2026 GMT
        Subject: CN=e49709a5b4e82c723d0fd0f296949f5b1441d226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:1e:0d:83:ae:0a:11:46:e0:e1:3f:36:44:
                    2f:6e:88:22:ed:a6:96:d8:f8:65:7e:7d:ff:54:62:
                    16:08:6d:7e:7a:85:17:db:9e:ea:3b:e1:fe:6e:25:
                    2d:2b:31:63:fa:96:4e:b0:69:9b:cc:27:d4:b3:33:
                    ef:cf:a9:71:3b:e0:c2:ee:9c:77:03:71:6d:d4:e4:
                    f6:d1:bb:9c:71:5f:7f:89:89:df:49:97:38:1e:4d:
                    29:e9:e2:54:ee:3e:61:6c:db:6f:94:0c:be:65:cf:
                    ce:c0:5a:f0:2f:a3:c3:67:cb:80:35:5e:43:a9:60:
                    e1:e7:75:09:d9:db:57:8f:78:80:75:ed:aa:ba:3f:
                    65:81:15:75:1f:a8:d3:f2:9a:1f:97:89:1c:92:4c:
                    6d:52:ad:dc:85:7a:b0:ea:ba:2a:69:7d:d8:50:d3:
                    ea:05:4e:66:20:1a:27:ac:c2:be:d7:26:c3:45:0f:
                    e0:97:47:cb:e6:d6:12:cf:06:9e:c4:71:ae:9d:ac:
                    0e:5a:d8:70:b8:d9:72:40:15:3c:34:84:cc:16:a9:
                    bd:7b:ef:e6:11:a8:4b:7d:e5:dc:cd:89:6e:f9:af:
                    81:f0:fd:1d:81:63:82:14:aa:2f:4a:f0:3f:27:c9:
                    99:fd:18:42:22:0c:0b:b5:1a:d4:ea:89:49:13:85:
                    ba:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:97:09:A5:B4:E8:2C:72:3D:0F:D0:F2:96:94:9F:5B:14:41:D2:26
            X509v3 Authority Key Identifier:
                keyid:37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:92:5f:e3:04:4f:08:2e:32:b5:2c:b1:09:6c:ce:b7:1e:1c:
         6b:ad:ef:6a:87:db:bc:bf:84:e6:05:ba:7f:37:40:3a:e5:6d:
         f4:14:ce:4f:08:bd:75:4f:d9:83:0f:ef:84:48:d5:3e:b7:6d:
         84:1e:63:66:96:5a:e3:bd:e9:ea:f2:a2:3c:d0:df:9f:d9:24:
         d9:08:b5:d4:af:7a:a6:9b:06:da:67:6e:bf:17:77:87:b4:e0:
         bd:a9:e0:39:97:93:bf:b4:1b:29:b8:d7:d4:47:09:de:e8:2e:
         45:db:c4:ce:4a:69:7d:42:04:cf:0a:82:57:7a:c6:17:93:99:
         ac:60:22:be:07:64:e9:67:3e:5b:5d:83:9e:5a:c9:0e:12:c6:
         05:a7:2c:2d:02:66:b2:64:e1:97:d2:9c:bd:4c:cf:57:e0:5c:
         da:b1:71:bc:78:72:f3:7c:73:7f:c9:78:8e:50:b2:84:b9:b7:
         51:47:81:16:42:e2:b3:28:3f:a7:a9:da:18:35:8d:a8:6f:9d:
         42:06:d0:d0:bc:d8:48:f6:4d:00:91:b6:a2:6f:ba:de:a6:82:
         64:d2:c0:93:bf:a7:3e:03:58:d7:b4:c0:f1:e2:53:ce:ba:f3:
         b4:0a:99:45:02:e3:2e:b1:f2:60:1a:ff:11:ec:3c:35:0c:be:
         51:b0:a0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:59 2026 by rpki-client