This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
File:                     O4_iRlhDAxt3i7jYt701oJT8z0g.mft (raw, json)
Hash identifier:          ydmKZ1coGM6MAg3xI2XprtXiLiGQY2GP9Ql8R/Esyks=
Subject key identifier:   21:A6:E8:84:B7:D4:91:2D:2C:2E:0D:55:AD:7E:4C:A1:59:62:B5:91
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Certificate issuer:       /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial:       019C43FE187717E3B2C7FEE7055F097B67D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
Manifest number:          1278
Signing time:             Mon 09 Feb 2026 20:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:51 +0000
Files and hashes:         1: 6J5zq7acHeCorGt2Kz1SRI8TBxw.roa (hash: QUb/O/uGMs7lP+6gaahFi67OYlrRZUT6YWqd/feI1TU=)
                          2: O4_iRlhDAxt3i7jYt701oJT8z0g.crl (hash: syfY58gWFqyvZf9c9tmPX7O+VbcVhaziguiksVzYlHU=)
                          3: SAEHlpuu2VHfT1gYOBIDmp8YrI0.roa (hash: f+Ly+ugjS2e2LTdlARUIcZJrF9Q/kNyEBJzeeNxkntA=)
                          4: l8nJcuD4rGZxCdIYInml3vohntk.roa (hash: eU3RnT3IPn87hTAFydZwwQYkYydG1vHyM8wmqGF1vjs=)
                          5: n7VSYaUgna6BrvfvQJiTcoRPzQk.roa (hash: M0u1q9q0trXFDUH6vNkVVYgYyDRJLjrO4qxwE6RvEOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:18:77:17:e3:b2:c7:fe:e7:05:5f:09:7b:67:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
        Validity
            Not Before: Feb  9 20:00:51 2026 GMT
            Not After : Feb 10 20:00:51 2026 GMT
        Subject: CN=21a6e884b7d4912d2c2e0d55ad7e4ca15962b591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:25:79:a8:11:68:44:08:6f:03:89:46:5e:
                    49:a3:b1:79:66:41:bb:0b:d1:b3:d2:bf:96:9e:a1:
                    d0:c0:1c:4e:20:2f:c4:54:e5:00:9b:85:51:28:10:
                    5a:57:0c:a4:aa:36:61:74:7d:34:b2:ab:40:7c:b2:
                    a6:28:6a:44:cc:b1:44:df:0a:3d:e6:5e:9d:ef:f3:
                    a6:f4:8d:04:a3:9d:42:9e:46:ba:c1:88:b8:e3:23:
                    c7:a8:de:74:d4:a2:f0:36:20:4f:b2:23:b0:26:52:
                    03:ac:57:5b:f8:5c:92:7a:9a:f3:5a:72:43:d9:45:
                    84:81:9e:31:9d:0f:26:bc:ae:2d:de:2c:66:9a:bd:
                    5f:5d:10:b5:8d:ed:55:53:e0:0e:6b:8f:88:e3:fe:
                    67:92:25:66:27:06:14:d7:9c:f2:ac:19:bb:17:21:
                    b9:2d:af:7a:9e:25:92:26:1c:88:25:bd:16:cb:00:
                    40:9e:42:bd:ce:6e:f8:9b:4e:1f:38:9d:d5:9f:e3:
                    69:6a:b0:15:02:a9:e2:3d:31:a2:14:08:b5:59:a7:
                    52:45:ed:8f:8c:8e:d5:44:85:45:e0:0c:d7:00:8f:
                    25:d4:83:6c:1d:d6:6c:eb:16:a3:44:ec:89:00:1f:
                    ec:67:59:8d:16:ea:31:15:61:57:36:29:e3:60:a7:
                    af:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A6:E8:84:B7:D4:91:2D:2C:2E:0D:55:AD:7E:4C:A1:59:62:B5:91
            X509v3 Authority Key Identifier:
                keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9d:5e:d9:58:66:ec:67:46:37:eb:47:60:6f:b9:51:f4:35:
         a9:e2:e9:82:d4:7f:ca:07:77:79:ad:cc:07:63:e3:dd:20:a8:
         33:fc:c5:c7:bb:74:bf:13:cd:fa:84:71:d5:62:94:c4:8f:ea:
         26:47:8c:da:dc:67:65:54:ce:0f:4f:d4:b2:cb:d7:81:cc:37:
         89:c0:e0:f0:f9:00:b9:84:eb:cd:ef:df:02:eb:78:cf:f6:d7:
         4c:76:35:df:7c:01:5b:9f:34:e3:c2:19:a2:07:5f:af:3c:46:
         ee:52:4f:4e:20:8d:0a:8a:8e:fc:d8:8d:03:a1:2d:8b:a3:d1:
         42:ae:f0:1a:7b:b4:1e:39:fc:9d:f6:77:75:50:42:16:05:88:
         2f:a7:5a:5b:d2:53:a9:bb:af:02:27:f7:75:57:0d:e5:3a:a8:
         bb:22:cd:55:43:b1:4c:16:e0:fb:4b:83:17:98:48:a7:0c:b6:
         cf:5b:cb:5e:e8:ad:a9:32:4d:e6:28:c1:6d:cc:72:c9:c6:7c:
         1b:8e:3f:da:80:ef:59:c0:f8:5f:a8:4d:17:e5:5a:89:37:c4:
         6d:ff:d8:7e:5b:d6:df:96:c1:c5:e5:94:b4:b8:ec:6c:82:fd:
         3d:74:97:81:6c:8f:5d:9f:db:e0:0c:3a:76:3a:1a:42:d0:bf:
         6c:ad:cd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:15 2026 by rpki-client