This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
File:                     4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json)
Hash identifier:          7Whr+hvdRECFSPnmZ3xZ7252IOB/3lgow9HmyQNPrCc=
Subject key identifier:   05:A9:43:10:81:4C:FE:43:C0:E5:1B:AF:8F:FA:B2:3D:82:B8:81:85
Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
Certificate issuer:       /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Certificate serial:       019C42EBC435F3D58D507857038E3DE3AAF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
Manifest number:          137E
Signing time:             Mon 09 Feb 2026 15:01:13 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:13 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:13 +0000
Files and hashes:         1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: +Vhe+Sook/Y9rjAc4Ys3W846oQ5Dw7ORqpWxyYKWQ5g=)
                          2: eE7il2_XdwS5_JtxMq2pvAz1LIU.roa (hash: wpN1KIlOzEFCJRu+ipfs4OChRIy+MI7uehA6+KAIz84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:c4:35:f3:d5:8d:50:78:57:03:8e:3d:e3:aa:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
        Validity
            Not Before: Feb  9 15:01:13 2026 GMT
            Not After : Feb 10 15:01:13 2026 GMT
        Subject: CN=05a94310814cfe43c0e51baf8ffab23d82b88185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:22:6a:82:f3:ba:90:ec:8e:8a:5a:c7:15:46:
                    23:bd:55:77:96:b7:8b:c7:94:39:09:cb:fc:23:72:
                    6b:98:70:00:c6:b7:98:d4:0e:c0:9c:50:5f:4f:af:
                    da:fe:38:df:8e:ac:c2:45:09:f4:f9:b5:29:c1:71:
                    0e:f0:a2:7d:58:ea:99:11:89:d2:e3:08:88:e1:83:
                    f0:bf:94:fd:2f:96:07:a5:4a:2b:c2:04:2f:37:e2:
                    2f:6d:a9:a0:d4:95:1e:5d:c6:db:00:a9:cc:0e:68:
                    97:49:8a:a2:c2:c4:dd:3d:af:27:0d:15:c1:20:62:
                    4b:db:66:0d:3f:f5:35:88:0b:e9:c4:55:df:e4:fb:
                    ef:07:9a:32:38:d0:2f:83:26:92:e2:c6:0c:d6:7b:
                    c0:70:ce:52:a5:f0:ab:19:9e:f7:7a:22:b4:69:4a:
                    fb:51:92:01:20:c8:1a:da:88:a2:3d:52:b1:7e:6f:
                    5f:c2:ae:05:9f:f5:95:05:17:c8:54:5e:bd:f8:63:
                    8a:d9:5e:4c:43:21:12:63:11:68:bf:30:00:7a:0d:
                    67:ee:a8:a5:6d:0f:b4:dc:b8:12:16:a8:13:d5:7e:
                    c3:d9:2b:06:d0:da:5f:37:a2:3b:bd:25:17:1f:ba:
                    56:f1:42:ae:6d:d3:91:f9:75:bb:8b:c6:b1:fe:7b:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A9:43:10:81:4C:FE:43:C0:E5:1B:AF:8F:FA:B2:3D:82:B8:81:85
            X509v3 Authority Key Identifier:
                keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:98:3a:a5:57:fb:eb:83:00:61:3e:80:9e:40:be:d1:d8:a6:
         bb:99:32:e2:85:8d:85:83:1e:90:51:d2:41:83:cb:d9:4f:ad:
         61:d6:84:9c:09:d8:91:10:89:16:d0:01:f6:90:43:b9:0d:01:
         54:21:a0:9f:31:5d:d2:ad:04:d7:77:da:09:f0:23:43:1e:60:
         1e:45:ac:e7:19:42:01:b6:c7:85:94:d5:fe:ec:0e:4f:a8:4e:
         aa:46:b1:e1:93:78:8a:9b:e1:73:f0:00:c0:ed:0f:49:a5:55:
         e3:bb:97:f8:94:db:3e:05:c2:65:ea:da:3c:79:eb:07:ea:92:
         0e:a7:41:63:66:05:2f:39:90:19:ab:38:e0:ea:15:61:fa:cd:
         7c:0f:57:bb:4f:51:43:a6:6e:48:d9:5a:01:4f:26:b3:b0:72:
         55:da:3d:f7:9e:f7:c7:b7:17:82:48:ce:fe:f4:1d:ec:9b:53:
         a4:ba:46:9c:93:3e:fd:d5:a9:3b:8f:7a:03:d7:99:6a:27:64:
         89:51:0e:c6:59:fa:b1:3a:46:9c:b0:bb:02:44:55:b5:2a:86:
         c4:c7:c2:b9:78:b8:5e:ea:f8:31:2e:29:2a:6f:3c:5e:99:55:
         51:82:84:01:4e:9a:e0:e5:c9:94:16:ac:4c:6d:a1:a5:6c:74:
         4a:28:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:00 2026 by rpki-client