This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
File:                     t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json)
Hash identifier:          hPU2yU0YB2rE2IjWkp1FXA7NQ3rB3wkZkedVBMuu3pE=
Subject key identifier:   1B:BF:22:4C:34:28:E3:13:FC:6E:1E:04:D9:0C:D5:BE:7D:4A:DB:76
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Certificate issuer:       /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial:       019C45471A301728ABF2F167A8F65C21716B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
Manifest number:          0791
Signing time:             Tue 10 Feb 2026 02:00:13 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:13 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:13 +0000
Files and hashes:         1: 4avV52VadcXyjmFmkPiOZqd4aEo.roa (hash: rACIPz05aOD1m23fMqk7AR2NAoediVEN3H+EA6u4xuE=)
                          2: m9o4a-Sp907mkuh7yKVYLJl1LEA.roa (hash: 6qxzfM0ywaM1roIqQKQwRjB4scmKgnfULeAbobju2pc=)
                          3: p99sKQd64TY87IGdtOWr6iPqp8Y.roa (hash: TOjdieep1rBeaY3tAvDOKKLMjGOfaC+22A+UcO2sOVg=)
                          4: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: tReDY7NruiFtQ0M8loCXv/jK1gZ4h5Siu5rASu/3eaY=)
                          5: uxXZ_hKsmnhQRsfJ1EfmQad0ATE.roa (hash: GZswREwDe56hmbMlhE5Azz0F2ZeFdeK1GV3fvvLTRak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:1a:30:17:28:ab:f2:f1:67:a8:f6:5c:21:71:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
        Validity
            Not Before: Feb 10 02:00:13 2026 GMT
            Not After : Feb 11 02:00:13 2026 GMT
        Subject: CN=1bbf224c3428e313fc6e1e04d90cd5be7d4adb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:43:c2:2f:3c:ac:e7:73:79:ea:7d:03:f2:
                    0d:91:81:0a:d8:ef:5d:75:f5:f1:0a:fa:08:16:e1:
                    8a:60:05:f2:1e:66:54:71:8d:4b:23:82:ac:0f:86:
                    69:46:d8:aa:b9:6c:f4:de:3b:b6:d9:5a:28:84:fc:
                    ed:ce:53:40:89:61:42:b7:a1:cd:bb:23:aa:65:31:
                    d9:7a:bf:40:f1:03:54:5d:ef:2f:d9:1c:e7:08:37:
                    15:b9:49:33:65:78:7c:fc:cc:5c:be:5b:c0:57:d8:
                    05:2d:fa:0c:c5:c3:3e:18:dc:2d:7e:6a:65:3c:3d:
                    7e:6a:d2:69:f1:fa:a3:7a:2d:6d:01:63:bc:b2:29:
                    4f:8d:e1:d4:1f:f0:d3:6d:c3:99:95:0d:31:c4:12:
                    c5:d6:25:ec:44:d4:21:21:f6:b5:81:cc:97:12:71:
                    60:13:ec:7c:9b:06:86:f1:b3:53:e3:0b:91:c0:8d:
                    d6:32:ba:10:69:4d:f0:67:81:45:30:47:d9:64:bf:
                    f6:cc:a4:be:7b:91:ad:7a:38:a0:11:22:ed:ff:82:
                    4d:72:06:21:54:3a:ea:b5:1c:bc:8a:ea:61:66:88:
                    6b:21:ff:ad:8b:2b:38:cf:a8:e6:80:fe:b1:87:0b:
                    da:5a:d5:fb:82:f4:df:70:26:34:b1:02:af:b2:3f:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BF:22:4C:34:28:E3:13:FC:6E:1E:04:D9:0C:D5:BE:7D:4A:DB:76
            X509v3 Authority Key Identifier:
                keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:4f:6d:db:c1:73:ca:49:41:41:42:ac:39:18:1b:82:0a:44:
         bd:6f:09:7d:81:e7:64:02:c2:da:4a:57:7e:53:0e:05:ad:68:
         3a:26:c1:99:42:11:46:91:ec:1c:c9:8f:fc:24:5f:58:93:bd:
         f0:85:1c:29:53:eb:f8:b3:c1:c6:ba:99:98:eb:12:e4:11:00:
         e7:1d:3d:ef:3a:1d:06:21:5f:69:9d:bd:14:c3:c9:7f:ab:8b:
         d0:ee:57:e0:5c:b6:e2:a2:89:a3:26:b9:ce:a4:36:b4:ca:db:
         47:b6:c4:1b:3b:14:50:a2:3e:aa:82:39:9a:a7:8f:49:2c:f8:
         90:96:30:98:80:8e:35:29:5c:21:43:f6:75:dd:a7:1e:9a:66:
         fe:3b:db:d1:c9:49:e6:60:e1:e6:64:35:44:1f:f4:20:13:fa:
         95:b8:b5:7f:5f:c9:57:7b:ff:b4:90:ce:af:b9:95:37:ed:2a:
         9b:ce:7f:db:e4:85:c9:2b:a6:ca:92:b5:a5:66:bb:ac:f1:e4:
         a3:e3:36:08:d2:2c:41:bb:8c:28:fe:7e:92:b5:f9:dd:3b:b8:
         68:5c:b2:99:98:4b:01:52:7a:19:6f:86:6c:82:2a:6d:6e:f0:
         df:6b:bc:1c:e6:df:65:31:40:be:e2:1b:f2:86:cb:10:5b:9e:
         35:4d:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:18:53 2026 by rpki-client