This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File:                     4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier:          His2oEFQzakMxMfA7SGHm6IJ7rK1/3BbfMcja9jLvkA=
Subject key identifier:   97:B9:05:A9:A3:78:D0:94:3A:D1:96:60:1D:D1:20:28:FE:28:99:BA
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer:       /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial:       019C42B42EE8C3954B538375F280F20B8DD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number:          1343
Signing time:             Mon 09 Feb 2026 14:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:30 +0000
Files and hashes:         1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: i3lZX6cQhRi/9XS2moPyhe7mTdgEnPOYaWyM7h1rz+U=)
                          2: NdV1685pUzzupc5kE5-ldMdSDxg.roa (hash: ueorjyehMNjdQkD1BLlElPr49sGyaBsEZXRjheGpYAA=)
                          3: ObqCC5ItaIb9zSaMr1gSLuQWW7g.roa (hash: z8qeiKJfszyHlpziW66XElBOILDVztPeTixCMaYCXnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:2e:e8:c3:95:4b:53:83:75:f2:80:f2:0b:8d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
        Validity
            Not Before: Feb  9 14:00:30 2026 GMT
            Not After : Feb 10 14:00:30 2026 GMT
        Subject: CN=97b905a9a378d0943ad196601dd12028fe2899ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b4:50:26:33:96:9b:85:01:b5:25:bd:27:20:
                    2c:5a:20:9d:58:eb:a8:ce:b8:d7:f6:13:4d:ea:25:
                    a6:8a:39:42:d1:6d:43:1d:3a:85:c4:93:bf:b5:1b:
                    4e:25:f5:ee:47:e4:66:13:f3:71:2f:22:da:ca:a1:
                    22:68:61:df:27:c1:03:3b:77:e9:07:fb:f3:b0:91:
                    a7:a6:6a:94:39:e8:ee:80:ad:b0:69:84:3f:2b:44:
                    03:24:a5:2d:3c:bc:ba:5f:f7:e8:e1:e8:6e:e1:d0:
                    d3:38:c1:8f:b7:a6:9d:f9:74:6a:7c:fd:e7:59:87:
                    6c:92:25:bf:0c:99:b8:3d:0d:f5:8f:b0:c6:3f:88:
                    9d:65:b9:69:d6:ef:fd:95:9b:f0:8e:b4:01:ed:88:
                    c1:fa:6d:ad:8b:5c:9b:e1:e8:dc:65:94:2d:d8:22:
                    a7:ca:8d:32:ad:82:76:90:7e:09:f8:2f:3a:b3:2e:
                    ee:1f:7c:54:0d:3e:5a:2a:a6:6f:5b:cc:93:7f:58:
                    f0:14:a1:cc:44:cb:d3:55:6a:5b:ba:d3:b5:fe:3f:
                    9e:74:d4:e3:98:95:3a:cb:48:40:90:b8:6f:21:53:
                    9b:c9:01:8f:0e:77:52:df:38:28:45:8b:67:98:6c:
                    cd:b1:ba:7f:43:f0:d8:53:03:77:31:5e:bd:b3:97:
                    36:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B9:05:A9:A3:78:D0:94:3A:D1:96:60:1D:D1:20:28:FE:28:99:BA
            X509v3 Authority Key Identifier:
                keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e9:e4:53:b0:71:ad:2f:38:f3:e8:3f:c4:10:c3:61:3a:50:
         57:48:35:3c:81:b8:0a:e5:70:c7:d0:94:30:62:c7:81:c7:d7:
         54:ee:62:c8:3a:91:6a:82:c5:63:e9:5e:fe:86:77:fb:ed:f2:
         96:0e:20:25:2f:6c:7f:2e:50:19:49:6e:b0:51:2b:d5:6e:31:
         7f:1a:3a:04:cf:ec:ae:47:82:37:c7:a6:89:e9:62:8d:e7:75:
         d1:eb:d2:42:a1:75:40:f1:1a:ca:9f:fd:00:a9:cd:6f:9a:5f:
         d3:ad:18:15:05:59:03:12:d0:4e:d3:23:03:82:9a:8b:dc:5d:
         db:bb:c8:34:d1:aa:2f:89:8b:97:e6:9b:84:08:63:15:47:c2:
         ad:af:67:5c:46:9d:22:3c:3c:ec:a6:92:27:65:cd:6d:83:aa:
         94:60:ad:22:cd:af:97:80:1a:b0:84:1a:fd:d1:1f:ea:30:2f:
         40:a3:88:ef:e4:65:32:46:36:2b:6b:0f:bb:b7:ff:4b:40:45:
         86:97:10:6d:9d:00:2a:ca:1d:c6:b7:52:48:ab:62:c1:72:fa:
         42:17:f9:ba:80:db:e7:20:cb:9d:19:4a:2e:09:2f:b8:a8:e6:
         88:46:ca:dc:f0:e0:af:ba:51:b4:c8:57:db:05:c5:a5:87:e3:
         94:83:90:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:38 2026 by rpki-client