This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File:                     4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier:          c89l+cjG4CjZr6GoIaKIqfAJe/XIkTMRMLzaYTAE9xE=
Subject key identifier:   2E:AF:2A:68:79:4D:89:13:6F:05:19:E4:74:A6:60:09:8B:62:61:91
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer:       /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial:       019C43FE7ACBCE0F33E28B3C2BF15DAA31CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number:          0A96
Signing time:             Mon 09 Feb 2026 20:01:16 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:16 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:16 +0000
Files and hashes:         1: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: R/Vi8ggx79JojpKSJRIUD/h8h6mLWSVhTUrzatNrL+E=)
                          2: 5F_Lv04RXNd_Y46Aej2XB7OXRCs.roa (hash: OFOrOgL1BwCDJs6vNTJlxJXJgyRTHA3y/UE7TO8d/LM=)
                          3: oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa (hash: sJuR4lvRXMBU3fcQ7PumT3oOEz1g58/Vsv/QWac8Orc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:7a:cb:ce:0f:33:e2:8b:3c:2b:f1:5d:aa:31:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
        Validity
            Not Before: Feb  9 20:01:16 2026 GMT
            Not After : Feb 10 20:01:16 2026 GMT
        Subject: CN=2eaf2a68794d89136f0519e474a660098b626191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:f5:6e:cb:c1:cf:2d:24:76:ef:b4:80:82:
                    68:2b:6d:7f:33:f4:5b:46:70:25:61:5d:2e:2e:56:
                    a6:a2:a5:da:eb:09:69:63:2d:69:40:cc:21:7b:ec:
                    34:b0:24:d1:7b:a9:0d:ec:9d:23:f7:80:22:8d:8a:
                    30:92:f9:d8:c8:55:84:05:11:4f:95:3f:9b:9a:2e:
                    18:54:fa:a9:7b:db:be:88:3a:b2:4f:d1:57:97:ee:
                    ad:d4:5d:c4:96:05:93:c3:83:c3:b7:7b:e2:12:59:
                    4f:55:14:3b:12:48:0a:66:0b:69:b4:b1:27:45:48:
                    2d:34:e5:36:c1:c2:e3:e3:1d:4f:b1:d3:cb:83:53:
                    cb:df:c9:8f:62:e9:b9:17:15:3b:ed:fc:06:f4:cc:
                    3e:b3:ae:84:37:73:8e:c9:a6:89:1b:6a:de:81:20:
                    72:e0:b8:c6:9f:40:5c:b7:30:f0:cb:e1:94:67:4b:
                    ae:aa:df:05:8c:6c:c3:ee:f2:b5:4c:5e:28:eb:ea:
                    4c:05:bd:16:67:66:de:c0:b7:81:44:b2:c5:6b:23:
                    51:43:d4:7e:fc:38:09:43:12:b0:6a:c3:bd:9e:ee:
                    63:a5:eb:c8:b3:b4:59:18:69:99:dc:0f:c1:5b:c8:
                    a9:5d:4d:2b:f4:ff:80:d3:41:33:19:14:19:a9:b7:
                    98:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AF:2A:68:79:4D:89:13:6F:05:19:E4:74:A6:60:09:8B:62:61:91
            X509v3 Authority Key Identifier:
                keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fd:7f:ea:aa:3b:85:8e:cf:9d:4b:5f:3b:45:1b:96:aa:5f:
         9e:97:71:5d:8d:cd:cd:eb:40:42:33:cd:88:3d:85:13:93:46:
         97:80:cf:b9:23:93:ee:a0:1a:b8:ec:c7:ee:36:fc:dd:ce:f3:
         3c:f4:01:d5:2e:68:62:29:17:1d:9f:ec:7e:4c:c5:43:de:f3:
         29:ed:33:ef:14:7a:87:0e:a4:fc:58:74:e3:f6:aa:b8:bc:77:
         df:b6:57:17:03:d6:3f:90:08:61:a6:97:d0:dd:b1:e4:e5:53:
         d3:9e:46:ab:09:c8:0e:01:b5:e2:fe:16:a2:75:aa:52:83:9c:
         3e:e1:79:64:cc:6d:54:45:18:01:74:a8:24:f1:42:0f:21:fb:
         d9:67:3c:f1:df:f1:bd:fb:b5:33:5a:1e:47:3d:d0:60:c9:5e:
         6d:7a:32:f6:cb:ce:56:a9:61:0b:17:14:f8:1e:21:2c:2d:25:
         d2:6c:fd:94:4c:16:98:1c:b3:94:56:5f:8a:e1:58:d1:52:a9:
         3a:0b:32:b3:84:8e:69:89:f6:94:13:5d:fa:98:8d:04:8b:d0:
         5b:65:2d:51:c4:23:7f:5a:06:da:f3:2e:26:5c:94:9d:5d:c6:
         60:71:7b:af:01:37:42:96:b4:57:02:9f:56:ed:88:bb:19:f8:
         6d:6f:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:35 2026 by rpki-client