This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File:                     4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier:          pqsGTUPlsoB7aSVq99MAcr25zMAi4dHTbcDGrT8WUQw=
Subject key identifier:   A3:2A:FF:32:22:FE:73:4F:81:0C:BF:AD:3F:16:A5:69:53:2B:4A:52
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer:       /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial:       019C4358E78290C0AE84CBB5EF19CB55E9BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 17:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:25 +0000
Files and hashes:         1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: s6who0KDshBaI0IrYXEJBMhOYzl7Fbe8bR8jgo/3ReM=)
                          2: WIclx685icB5o3UOREAKLFzzP34.roa (hash: uDpM1rHiGL2CuGW9o80RIXGPENrx4ls410ovEwWq5XE=)
                          3: hCTpwVd8i1hPStdoLxWMzM8N_TE.roa (hash: ihYHu1XwJ3avyhb/XoPHgm87ZbqnGY5kgmNHjUUXafY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:e7:82:90:c0:ae:84:cb:b5:ef:19:cb:55:e9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
        Validity
            Not Before: Feb  9 17:00:25 2026 GMT
            Not After : Feb 10 17:00:25 2026 GMT
        Subject: CN=a32aff3222fe734f810cbfad3f16a569532b4a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:b5:c0:1e:14:da:b5:cc:df:80:2a:b5:15:
                    cf:10:0f:2d:09:72:43:75:c4:94:7b:ae:f1:92:b6:
                    41:01:ed:72:60:14:c0:80:9b:be:95:70:c9:85:65:
                    8b:03:97:00:cd:ca:12:3b:a5:ff:93:39:c9:ef:d3:
                    4a:e7:a8:05:52:ca:3a:bb:f0:4b:63:2e:1b:25:44:
                    8b:a1:3d:16:93:59:b1:36:63:6c:ab:6c:39:f9:ba:
                    d8:47:ee:2e:b6:a7:c5:21:4b:ae:a9:58:19:02:cc:
                    59:bd:9e:7e:1f:a7:61:f9:63:45:2d:7e:2b:cc:ea:
                    b6:ef:1f:b3:b7:bd:15:0a:9a:43:ec:f2:9d:8b:47:
                    a3:43:51:38:e9:28:b5:3e:c1:ae:ed:01:1f:b5:e9:
                    bc:e4:c6:1f:ee:6d:21:4a:e3:d4:78:31:2a:7f:d4:
                    4b:d2:04:4e:45:70:6e:81:fd:72:4e:0b:02:cb:fd:
                    ce:d8:cc:ba:09:31:5b:e7:08:77:3f:3e:b3:be:a1:
                    6a:22:a6:4b:0b:37:12:2e:43:dc:c2:e3:b5:ce:dd:
                    b9:df:fb:57:38:42:d3:9d:18:75:21:fd:92:19:45:
                    d6:a7:3e:bb:04:dc:d9:bc:36:3d:3f:d7:59:84:3a:
                    3c:75:38:94:1b:61:58:cc:a4:f6:8b:b8:58:10:4f:
                    dd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2A:FF:32:22:FE:73:4F:81:0C:BF:AD:3F:16:A5:69:53:2B:4A:52
            X509v3 Authority Key Identifier:
                keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:27:ff:a1:8d:83:49:9a:ff:c4:0f:34:d6:24:99:a4:6c:bf:
         ee:0c:84:00:45:53:ab:e6:52:bb:a4:f7:f4:4c:da:88:00:ac:
         ab:06:33:91:5e:da:b8:05:03:a0:56:55:71:68:ff:e1:cd:86:
         9b:85:77:f9:07:e4:e4:78:83:fe:79:8b:e3:cf:fc:5d:41:b4:
         43:f1:cd:71:dd:dd:c4:c2:19:92:e9:c2:0d:09:b7:01:34:7c:
         e4:6e:64:ea:e0:58:9d:19:0d:fb:87:fd:f0:4a:a7:9b:17:36:
         c5:96:1b:84:c0:5a:17:84:6e:31:36:a1:fd:84:f1:80:8b:19:
         a8:c5:7b:f5:3c:0e:4b:a3:1d:8a:74:d7:c7:16:ca:fd:81:dd:
         10:36:7c:46:86:5f:29:25:e8:2f:54:a1:10:65:37:9e:fc:4e:
         1d:d3:e2:eb:9c:de:f4:a4:39:ae:ea:4e:26:91:78:6f:b6:d7:
         12:de:ed:4b:73:94:8f:22:f3:91:54:d7:44:90:4b:cf:d2:41:
         df:60:5e:e4:0a:9e:d0:b5:50:c6:05:7f:e7:3a:40:74:63:3c:
         32:26:f9:f6:0b:44:50:69:0a:14:92:f7:e4:22:42:5a:30:3f:
         d4:25:5d:39:3b:51:34:5a:93:00:42:27:8f:d8:0f:5f:a8:f7:
         6a:dc:c8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:31 2026 by rpki-client