This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File:                     4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier:          +X8o+cG7FPF/lbJmPkRfGy31b2wuzEuK2Jn9+w9xAM8=
Subject key identifier:   C2:4F:6E:D3:60:2F:2B:66:5A:92:AF:7C:0E:B3:08:5F:91:26:B3:91
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer:       /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial:       019C420F71C94E0D797C2A4EBB03A09E15C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 11:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:34 +0000
Files and hashes:         1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: E4Bw1iypMiSRzTAXskcCgY624DZKKjM3k8w4/XG9NIo=)
                          2: qBE40uvjM3KhFoCteBLo6azxKqs.roa (hash: C60d4ehA+DJZSNtWiIvd1yDVO2n8d2kan5kGi6wEoXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:71:c9:4e:0d:79:7c:2a:4e:bb:03:a0:9e:15:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
        Validity
            Not Before: Feb  9 11:00:34 2026 GMT
            Not After : Feb 10 11:00:34 2026 GMT
        Subject: CN=c24f6ed3602f2b665a92af7c0eb3085f9126b391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cc:69:b8:d8:73:4e:18:46:a5:a6:a3:9e:27:
                    69:c7:1a:f4:87:85:c0:12:47:52:6a:3f:fb:7f:28:
                    cf:92:a5:f5:92:a7:39:fb:8d:ce:6d:c5:28:f1:2e:
                    53:1a:e9:3f:a4:0b:ab:11:b3:ee:c7:94:27:15:b0:
                    42:48:e3:98:b5:da:7d:a6:a8:18:3d:db:8c:e2:c4:
                    38:cf:d0:68:32:ee:3a:a3:25:53:e4:fc:48:c0:63:
                    22:64:36:49:cd:72:25:3d:77:95:f7:6c:75:35:a6:
                    e1:39:ae:e4:1c:03:0e:af:cb:7f:69:73:bc:12:86:
                    09:31:bf:b1:6a:b5:c1:23:06:46:3c:c4:08:b1:20:
                    db:66:37:6a:c0:51:6f:c7:fd:e4:0e:f1:4f:ea:75:
                    1b:50:f6:9d:d2:d6:98:6b:97:23:9b:4d:3d:7a:b8:
                    c0:e8:8e:be:9e:e7:b6:e6:fc:37:19:a4:3d:51:4c:
                    15:80:8b:53:f1:1f:ad:37:b9:16:3f:b6:21:12:54:
                    b2:b7:0a:b4:0b:bf:c0:ca:b7:1c:0a:a7:e7:13:13:
                    33:42:9e:53:79:bb:64:0f:ae:95:28:8d:58:3d:d3:
                    8b:b5:52:61:70:1a:a6:ae:4c:79:63:1d:44:f1:23:
                    8f:f1:ec:ff:e7:b7:be:91:59:96:6d:db:18:bf:91:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4F:6E:D3:60:2F:2B:66:5A:92:AF:7C:0E:B3:08:5F:91:26:B3:91
            X509v3 Authority Key Identifier:
                keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b4:0c:7f:bc:03:c3:3d:16:a1:7f:5c:ae:d7:ab:41:98:c0:
         87:32:7f:85:11:c4:e2:63:3a:c2:c4:45:6b:23:00:9c:68:80:
         77:6a:df:f9:16:9b:ca:84:a2:64:72:f5:75:d2:95:60:d3:f3:
         8a:0e:dd:45:f5:75:12:86:49:9d:77:d0:a9:40:ce:5c:dc:13:
         f4:14:3b:80:d7:a7:fb:04:95:46:17:77:59:61:87:d7:b4:6f:
         79:d3:e0:67:24:d2:e4:92:ff:8c:6d:1c:a3:fa:19:b1:dc:4d:
         88:d5:02:98:5c:8d:76:57:34:2c:38:a5:2c:75:44:b7:0a:7f:
         64:1e:92:ab:3e:ae:ae:a4:ff:75:bc:ca:c8:22:26:fc:cc:d5:
         70:8f:96:03:0d:84:f7:38:56:0d:bf:aa:c9:03:68:8b:0b:07:
         16:5b:e1:4d:48:4c:12:f1:70:3d:f7:38:f5:9c:7d:57:51:84:
         8b:2c:5e:14:1a:df:ac:8c:f4:11:98:e3:0b:65:c8:e4:2f:97:
         21:89:60:f1:58:0d:34:62:f6:fb:02:6a:9c:1c:ab:50:eb:d1:
         85:37:dc:cd:df:6f:f8:76:1d:a3:c1:c0:ee:d2:62:17:35:93:
         35:66:e7:e0:1c:25:5f:13:51:f7:49:ce:10:5c:98:09:1a:97:
         ac:99:af:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:39 2026 by rpki-client