This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File:                     04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier:          zmSJkGqw2MWsAXLOAX+7eo2MIeS1oKr8Baw4pickyCU=
Subject key identifier:   BA:C5:25:CE:DB:2C:68:EE:07:16:0D:0C:B7:EE:57:3E:3D:1B:6D:B7
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer:       /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial:       019C42B4885360AF198AD6AF2FF951358E73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number:          0C72
Signing time:             Mon 09 Feb 2026 14:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:53 +0000
Files and hashes:         1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: xKm8vSoUXeegH6LOtU6BezyRPxtpf5BWMk+MKux9tq8=)
                          2: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (hash: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs=)
                          3: yXPaoSIGSfrOjU9hs5k0MekE_Nc.roa (hash: TYKrJM1uJp6GOMTl+6yQvyOUGQk4r4N2rI8aiTzZmcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:88:53:60:af:19:8a:d6:af:2f:f9:51:35:8e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
        Validity
            Not Before: Feb  9 14:00:53 2026 GMT
            Not After : Feb 10 14:00:53 2026 GMT
        Subject: CN=bac525cedb2c68ee07160d0cb7ee573e3d1b6db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:d1:bc:75:d8:f0:dd:d6:99:ce:f8:c2:6f:
                    c8:33:df:17:63:4f:68:68:5b:11:1b:ee:8a:50:37:
                    57:77:ea:d5:87:c7:ef:4a:79:f8:26:ae:98:64:b4:
                    65:76:8f:6e:3d:7a:a0:a8:70:87:88:c5:72:55:8e:
                    ba:dd:d3:17:d5:c6:b0:b4:80:f0:8f:cc:4e:66:3b:
                    78:8e:0e:72:2c:89:34:a1:02:62:44:1c:3b:59:90:
                    8e:cd:5b:9b:23:85:46:bb:04:63:2b:2e:30:fa:f1:
                    c9:39:51:61:73:81:5d:48:82:94:dc:49:81:61:e3:
                    5a:6f:68:8f:e1:98:22:a7:72:02:36:35:d1:18:a2:
                    bb:f7:4e:2d:4d:a7:90:55:c0:c7:f7:15:bd:74:2b:
                    f5:66:1b:c1:06:4a:08:48:f6:1d:0d:d3:3c:20:3b:
                    79:90:01:0b:d1:a1:b6:b1:53:cd:5a:06:df:2c:40:
                    1b:ca:2b:de:53:1e:37:16:8b:7b:43:2c:0c:3b:b4:
                    f7:06:13:f3:c2:56:3a:96:29:9c:31:bc:58:b8:ee:
                    99:36:78:fa:0f:cf:cd:77:02:0d:f8:b7:29:cf:a6:
                    04:05:20:a6:e9:38:25:62:0c:77:a2:6a:b7:47:13:
                    c1:17:bf:81:69:5d:76:25:30:af:0f:d7:12:13:c3:
                    de:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C5:25:CE:DB:2C:68:EE:07:16:0D:0C:B7:EE:57:3E:3D:1B:6D:B7
            X509v3 Authority Key Identifier:
                keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a2:ed:c6:86:84:b4:d1:23:14:67:95:f7:ef:b0:e3:db:b1:
         d3:df:f5:bd:89:ff:65:90:51:c4:cc:a2:87:74:28:ac:39:e5:
         a8:6a:a3:6e:f9:6a:9c:ff:d6:c3:71:9a:5d:fe:d0:2d:4d:b7:
         85:4e:e5:99:47:51:cb:d4:d9:3e:7d:bd:ec:90:4a:12:74:5a:
         21:b3:d4:41:f8:d3:a8:e3:83:b3:13:b5:29:11:7f:da:f3:e4:
         5b:41:c1:62:14:46:51:d7:4b:d8:27:47:b2:d4:9e:d1:11:c1:
         8e:80:38:89:1e:e3:56:5b:0b:f4:8c:7c:07:b4:a2:1d:19:62:
         86:68:e7:22:3b:e4:54:20:2e:1b:47:06:70:e8:8b:1b:02:82:
         b0:a5:d5:d6:17:50:63:23:d0:fa:48:44:02:dd:8e:fc:a9:27:
         5b:3e:eb:ca:3a:92:b9:86:bc:96:b4:75:6c:85:4e:27:71:f2:
         71:ad:8b:70:99:38:2d:04:f7:20:43:93:a0:bc:6b:b0:b8:e5:
         7f:6b:78:bf:83:1a:0d:95:1b:68:d8:30:34:56:69:00:ec:03:
         78:df:e6:9a:ea:41:a4:b6:4a:62:72:79:10:5c:43:2b:0c:b9:
         6e:33:6f:db:58:4f:7c:d7:a1:36:e7:6a:d0:14:cc:dc:5a:cb:
         02:4d:88:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:57 2026 by rpki-client