This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File:                     4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier:          EeGccPz6w5eSrICMx41eO7+ydoMOcuhxiysrLUo4Y7g=
Subject key identifier:   EE:A4:8A:AC:26:6B:90:09:41:4B:33:80:6E:77:60:22:7A:40:A0:FF
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer:       /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial:       019C42B40EAA48569384CCCF9B3109A06417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 14:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:22 +0000
Files and hashes:         1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: oZphWg1Xojo/A/rP83mCjFdRlw0yEB9q11jtzSQVJlc=)
                          2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
                          3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:0e:aa:48:56:93:84:cc:cf:9b:31:09:a0:64:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
        Validity
            Not Before: Feb  9 14:00:22 2026 GMT
            Not After : Feb 10 14:00:22 2026 GMT
        Subject: CN=eea48aac266b9009414b33806e7760227a40a0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:05:cf:29:d1:88:d5:d8:f5:9b:80:00:31:
                    90:be:0c:18:fa:0d:0d:da:30:de:f2:34:58:22:67:
                    2e:74:c9:26:73:f8:7f:6b:ac:8c:75:f7:49:2a:ae:
                    45:49:20:13:c8:bc:68:b1:24:30:32:17:b1:b1:7c:
                    db:5c:ca:f2:c0:d5:5a:6a:31:56:d6:1d:06:2a:cc:
                    c0:89:3f:45:32:fb:ef:fb:b2:fa:13:bc:05:76:db:
                    e3:30:b8:6d:e9:5b:fd:3d:d4:cf:66:c0:6c:8a:65:
                    ec:bb:be:89:59:27:af:23:b4:dc:49:08:3c:7f:ae:
                    a7:10:2d:15:87:09:b0:cc:9a:0d:70:32:82:08:77:
                    a7:bd:8d:04:69:1c:f4:10:ab:2c:a2:cc:37:cb:45:
                    15:df:8f:20:4f:dd:27:73:a1:7a:00:35:0e:46:51:
                    53:12:5c:5e:55:25:eb:49:27:6e:f1:8b:a9:c3:5a:
                    ab:fc:0d:cf:6e:3d:90:80:a3:76:5c:d2:9c:14:56:
                    d1:6a:ae:3e:ef:d6:d4:b8:87:f8:ec:90:4f:f4:6f:
                    1b:50:fe:81:4b:c0:67:7d:5d:58:58:6f:83:d9:4c:
                    6a:3e:76:1d:cb:56:87:28:25:c2:a4:90:4d:ea:cf:
                    1c:02:b8:78:e4:cd:f9:08:43:48:02:fe:05:38:ee:
                    09:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A4:8A:AC:26:6B:90:09:41:4B:33:80:6E:77:60:22:7A:40:A0:FF
            X509v3 Authority Key Identifier:
                keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:93:78:22:b1:54:e1:54:91:ab:83:d9:ae:44:4d:83:63:d5:
         b8:ff:8a:5d:9d:fd:fd:dd:6a:3a:ad:fd:ba:46:83:93:5f:1e:
         6a:1f:42:dd:fa:7e:8d:e9:0d:30:e5:6e:4d:27:22:f7:19:f4:
         2f:80:f9:2c:e4:90:41:55:4f:4c:ca:db:1a:5e:39:be:be:b0:
         71:11:eb:aa:db:3b:74:3f:73:d8:26:cd:e6:30:2e:9e:0e:6a:
         8e:e6:04:ee:90:dc:a0:f0:7f:88:9d:42:f8:0c:e2:a6:bf:5b:
         79:81:1c:e0:b0:f7:6a:7e:08:c8:c0:2a:a6:28:90:d0:bc:26:
         1b:a0:b0:71:ad:66:5d:cb:0c:00:77:25:5b:c2:14:86:20:16:
         06:2b:05:48:33:44:c3:f4:eb:64:ec:96:78:ce:7b:5c:f5:dd:
         0e:bc:47:0c:78:f3:0f:71:26:49:6f:da:75:85:09:07:3d:33:
         9b:e9:10:70:fb:80:ae:7f:85:17:b9:db:62:f3:ca:80:c4:ea:
         42:e0:46:bc:9c:80:3e:84:57:9f:ab:ed:c3:32:19:1d:92:bc:
         fa:96:39:9a:b0:2b:f9:58:a9:ee:09:83:8d:3a:0a:c8:2c:92:
         3d:d7:b2:5e:2c:71:26:99:c2:26:1c:42:7f:13:49:ae:23:55:
         26:da:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:09 2026 by rpki-client