This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File:                     4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier:          PXiNM1XqzJ4H+XP8RRG8IMSMA0ClOcrbl6obtJsfLRk=
Subject key identifier:   34:00:EA:B8:79:AD:AB:FA:67:D8:5E:93:9C:20:AA:0A:80:7A:26:49
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer:       /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial:       019C4246AC8D9BCF583D4CB40FCA05AF5B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number:          0A77
Signing time:             Mon 09 Feb 2026 12:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:53 +0000
Files and hashes:         1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: KzCPUcvr/tIxQAz26/TWY32qydeHu7LtLBRoH2mDj/k=)
                          2: JHxvjWc19A1tU7KyYGlgqUyLkL8.roa (hash: 9C5Ys0C3mf/K+bjsErUIoK6hkq5Fu1f77/hUUvfMpdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:ac:8d:9b:cf:58:3d:4c:b4:0f:ca:05:af:5b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
        Validity
            Not Before: Feb  9 12:00:53 2026 GMT
            Not After : Feb 10 12:00:53 2026 GMT
        Subject: CN=3400eab879adabfa67d85e939c20aa0a807a2649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5c:13:e8:a6:4a:58:0f:df:1a:d2:70:57:61:
                    b7:bf:cd:03:7c:7a:11:5d:37:1b:63:bc:79:4b:f3:
                    e5:e3:32:10:7d:11:f4:02:bb:09:c7:67:93:a4:ad:
                    a5:e7:3e:5f:a6:63:79:d2:64:04:17:59:1e:f0:3d:
                    55:3a:0b:6d:cb:7d:18:40:ca:c6:ef:4c:dd:c8:b8:
                    25:35:07:19:91:0d:90:db:33:ea:3e:9c:ff:e1:6a:
                    08:e5:f1:07:5e:e8:58:bb:75:1d:e3:07:6a:ee:d7:
                    f1:ef:ef:f8:c0:15:b9:9a:50:85:21:f9:2e:e6:d0:
                    25:d2:10:12:c4:d0:8c:dc:40:aa:84:11:f3:14:59:
                    14:88:45:e0:1c:77:ac:a3:60:b4:c9:29:09:fa:b5:
                    f2:70:10:35:26:14:06:1d:fe:8b:e4:16:d7:44:0a:
                    9e:57:81:93:62:17:d5:09:db:e8:25:ae:82:3c:55:
                    8e:66:7a:15:40:29:2e:2f:a6:3b:18:72:ec:48:04:
                    4a:ca:eb:e6:b3:f6:46:61:36:8a:6b:0d:f3:e9:62:
                    fd:d9:d9:d4:7c:0e:19:56:6d:f1:46:4d:8d:76:af:
                    3c:5a:40:94:00:23:33:f9:cd:9c:92:ef:af:de:b3:
                    da:e8:66:cf:9b:b1:7f:ee:6d:55:88:f8:9c:1d:90:
                    b7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:00:EA:B8:79:AD:AB:FA:67:D8:5E:93:9C:20:AA:0A:80:7A:26:49
            X509v3 Authority Key Identifier:
                keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:0f:20:d0:e2:87:8c:b2:aa:11:ed:d3:67:9f:c5:f4:13:50:
         ef:71:6b:ed:2c:76:ac:98:56:73:ce:e3:aa:37:66:0a:b6:4d:
         35:6c:d9:e6:d2:34:e8:4b:6d:0d:a0:d4:d7:3c:b6:39:17:32:
         12:b7:6b:72:b2:05:e8:3d:49:58:1e:e4:65:e3:e6:cc:b5:4c:
         fd:27:77:c4:a8:fb:5d:cd:f9:da:5b:0b:fc:dc:16:33:d4:35:
         21:da:7e:84:4d:d1:44:53:4d:6c:12:5d:d9:93:c8:26:aa:9f:
         9b:6b:2d:e2:fc:70:33:e7:7c:cb:f9:dc:a3:12:4e:88:9c:df:
         c0:bc:bb:43:f2:94:ae:e5:cc:f6:3b:81:04:8d:a3:29:46:d4:
         c6:49:ac:68:db:e3:45:6f:ac:52:36:3c:4b:3c:c8:ce:a0:51:
         ea:41:23:91:fe:60:b2:a6:a9:d6:d3:35:f3:c6:da:49:47:8f:
         8a:fa:81:6e:57:7c:12:af:4b:79:36:62:76:4d:79:18:62:ca:
         9b:2b:cd:a3:ac:14:bd:48:a5:51:72:68:27:16:b9:d3:a3:86:
         af:a3:5b:a8:13:b5:8f:60:08:bb:bf:10:a6:78:4c:54:8f:95:
         7d:c6:77:9f:52:49:ab:d2:20:6e:27:65:0e:03:0e:c1:a7:09:
         62:06:4b:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRqyNm89YPUy0D8oFr1s7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxN2ExYTYyMjQ4ZGY4NzkxMzNjMDczYWQ1NjJhZDAzYTJi
OTJmZGMwHhcNMjYwMjA5MTIwMDUzWhcNMjYwMjEwMTIwMDUzWjAzMTEwLwYDVQQD
EygzNDAwZWFiODc5YWRhYmZhNjdkODVlOTM5YzIwYWEwYTgwN2EyNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlwT6KZKWA/fGtJwV2G3v80DfHoR
XTcbY7x5S/Pl4zIQfRH0ArsJx2eTpK2l5z5fpmN50mQEF1ke8D1VOgtty30YQMrG
70zdyLglNQcZkQ2Q2zPqPpz/4WoI5fEHXuhYu3Ud4wdq7tfx7+/4wBW5mlCFIfku
5tAl0hASxNCM3ECqhBHzFFkUiEXgHHeso2C0ySkJ+rXycBA1JhQGHf6L5BbXRAqe
V4GTYhfVCdvoJa6CPFWOZnoVQCkuL6Y7GHLsSARKyuvms/ZGYTaKaw3z6WL92dnU
fA4ZVm3xRk2Ndq88WkCUACMz+c2cku+v3rPa6GbPm7F/7m1ViPicHZC3vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQA6rh5rav6Z9hek5wgqgqAeiZJMB8GA1UdIwQY
MBaAFOF6GmIkjfh5EzwHOtVirQOiuS/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFhvYVlpU04tSGtUUEFjNjFXS3RBNks1TDl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xMzBmZmYtOTdlMy00YWMwLWJkY2Qt
NWZkYzg3ZTZkMmEwLzEvNFhvYVlpU04tSGtUUEFjNjFXS3RBNks1TDl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xMzBmZmYtOTdlMy00YWMwLWJkY2QtNWZkYzg3ZTZkMmEw
LzEvNFhvYVlpU04tSGtUUEFjNjFXS3RBNks1TDl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARg8g0OKH
jLKqEe3TZ5/F9BNQ73Fr7Sx2rJhWc87jqjdmCrZNNWzZ5tI06EttDaDU1zy2ORcy
ErdrcrIF6D1JWB7kZePmzLVM/Sd3xKj7Xc352lsL/NwWM9Q1Idp+hE3RRFNNbBJd
2ZPIJqqfm2st4vxwM+d8y/ncoxJOiJzfwLy7Q/KUruXM9juBBI2jKUbUxkmsaNvj
RW+sUjY8SzzIzqBR6kEjkf5gsqap1tM188baSUePivqBbld8Eq9LeTZidk15GGLK
myvNo6wUvUilUXJoJxa506OGr6NbqBO1j2AIu78QpnhMVI+VfcZ3n1JJq9Igbidl
DgMOwacJYgZLGg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:46 2026 by rpki-client