This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
File:                     4koyJ4zntMsgXfzK14YBSjsK4yM.mft (raw, json)
Hash identifier:          BhGHBC5cZUgoH0RrOCCZUnLc0wdpSZrpxv0erIDUKJo=
Subject key identifier:   27:CA:C7:F1:9B:A6:EB:3D:51:79:8F:15:AD:22:5E:6B:96:37:87:4F
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Certificate issuer:       /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial:       019C43591F20ACAE172A49F3D9125798D974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
Manifest number:          0FA9
Signing time:             Mon 09 Feb 2026 17:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:39 +0000
Files and hashes:         1: 4koyJ4zntMsgXfzK14YBSjsK4yM.crl (hash: NxpUPaSW10I8dzsWqV6sG4+D8Nxm18YjF+BTCSFkUnE=)
                          2: QZoElNh2G2nwMP88BsRDda3tDUQ.roa (hash: Z+CRbrBSzZz6HmMemjR2fLmNJfImRQn2RnMbj7m1gdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:1f:20:ac:ae:17:2a:49:f3:d9:12:57:98:d9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
        Validity
            Not Before: Feb  9 17:00:39 2026 GMT
            Not After : Feb 10 17:00:39 2026 GMT
        Subject: CN=27cac7f19ba6eb3d51798f15ad225e6b9637874f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:58:ac:57:9b:1d:5e:19:3e:a5:dc:a3:95:
                    2e:1e:f8:0b:cc:1e:65:7b:3c:18:6c:56:7e:82:5e:
                    15:37:7d:6a:bc:bb:fe:a8:87:d0:72:1e:af:1b:cf:
                    be:06:ac:e5:1e:cc:3f:e4:a7:81:1a:ce:a9:32:21:
                    64:15:7b:dd:8c:4f:54:47:ae:c6:c5:04:86:f9:a4:
                    6b:1e:42:68:44:bb:df:bc:73:33:46:6f:72:4b:bc:
                    78:e9:95:6c:23:84:66:fc:8d:92:7e:82:21:05:a0:
                    8d:1b:ee:bd:a0:87:65:21:96:fa:04:3d:59:83:80:
                    be:1f:f0:5a:48:1f:14:ce:c9:a5:e0:69:1f:d9:97:
                    ae:2a:7d:8c:ab:4d:ac:02:4d:5d:af:cb:b4:c9:a7:
                    21:c9:44:db:75:a5:01:13:61:3e:9e:16:f5:ab:58:
                    cf:c8:b4:e6:93:8b:03:ab:d8:2c:9d:1e:c3:79:49:
                    bc:61:93:e0:10:9b:7d:94:f5:eb:ed:66:f1:be:34:
                    3d:3e:3e:b2:61:ae:79:35:d3:d2:b7:87:fc:49:ad:
                    86:85:4b:bb:d5:9f:75:20:41:35:c1:73:f9:d9:cd:
                    92:5d:2f:b6:a4:84:60:1f:60:3e:1c:37:b5:b1:bc:
                    88:7e:22:69:f1:f3:ee:9d:87:bb:b2:89:c1:15:45:
                    94:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CA:C7:F1:9B:A6:EB:3D:51:79:8F:15:AD:22:5E:6B:96:37:87:4F
            X509v3 Authority Key Identifier:
                keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e0:c9:9d:ab:b0:ca:dc:70:7d:b3:45:ee:04:b0:1c:24:43:
         68:4f:1f:4f:ca:5a:72:3f:27:8e:4b:91:47:5d:e8:85:68:a6:
         67:eb:63:42:54:27:76:b1:c0:58:ad:12:b0:c7:d6:e6:2c:e4:
         b1:09:73:5f:eb:c7:44:35:b7:77:cd:a1:7b:f1:b0:15:bd:e4:
         2f:87:d9:f1:6c:df:d5:0d:62:00:78:e8:f6:96:e8:33:bf:25:
         35:82:57:b5:1d:4e:0a:a6:42:ac:11:67:8b:cd:1e:ea:d1:71:
         3b:f4:76:9e:40:0d:4d:4a:a0:7f:35:d9:0d:d7:f4:98:00:b4:
         0c:76:17:8e:95:ba:91:58:ed:ec:6f:aa:29:23:3c:07:8a:d4:
         16:8a:92:d5:07:50:42:7f:58:35:d4:06:72:2a:02:7d:8b:4a:
         80:04:0c:b6:f7:a2:94:1f:cb:b7:43:a6:2b:0d:b8:7b:f1:17:
         5c:0c:8c:98:0e:2b:9a:5f:33:0d:3f:64:86:9c:24:17:a8:f0:
         d3:0c:4b:26:d3:d0:69:f8:eb:5d:c4:09:ad:7b:6b:e9:57:24:
         47:8e:24:39:3f:18:95:b3:b7:59:e7:d3:87:7a:e9:cf:50:c0:
         b7:1d:a6:f1:a5:9d:32:a1:91:fa:ab:22:10:10:c2:ca:60:0b:
         aa:85:ac:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:14 2026 by rpki-client