This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File:                     lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier:          gPMBF6yoqjDb1gFTK9tb9nuaYon/8uHbHD0Q3S/mIaE=
Subject key identifier:   80:57:3F:0D:F6:44:CE:45:F7:07:84:33:0E:0B:36:22:35:EF:1F:30
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer:       /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial:       019C424625078BB0943CF928A2F4977D4E30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number:          069F
Signing time:             Mon 09 Feb 2026 12:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:19 +0000
Files and hashes:         1: UTPn7sDyIDaf0ipM77C87Kdh1RA.roa (hash: yJkUEolTOzyU/wbxz5ChhzuCMevnkgv8qFIuytCOr7E=)
                          2: Y86nHrN-bbG9H8afnIR7ras_Ma0.roa (hash: hrk5zm3StPI0sBpuzLM9Lwz+1Pf71xxcm0cAPnW+R0k=)
                          3: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: wk55Wxq1Z6VszSZH3TG7yPhhw+/ILVggRsH7VoqyM4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:25:07:8b:b0:94:3c:f9:28:a2:f4:97:7d:4e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
        Validity
            Not Before: Feb  9 12:00:19 2026 GMT
            Not After : Feb 10 12:00:19 2026 GMT
        Subject: CN=80573f0df644ce45f70784330e0b362235ef1f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:54:99:53:d4:14:cf:36:2a:d4:0e:77:ea:57:
                    4f:2a:3f:53:60:e3:48:48:29:42:2a:76:f9:67:7a:
                    2b:b9:d0:62:54:71:cd:37:5c:59:8f:fa:d5:8c:c5:
                    17:85:63:c3:48:52:21:af:f0:60:83:84:34:6c:d4:
                    9d:f3:1b:4d:ba:1d:0a:44:11:47:e8:8b:87:37:50:
                    ff:1b:69:ad:1c:99:0a:87:9b:4c:ee:13:82:2f:78:
                    29:39:19:ed:23:dd:29:b8:4e:ce:77:4c:c8:c7:99:
                    ec:ca:8a:e6:f3:95:04:54:95:37:28:99:45:39:fe:
                    55:8f:25:01:50:cf:2b:b5:10:fb:bf:f6:88:53:e7:
                    b6:5c:95:ec:67:c9:b7:4b:d4:09:05:97:a6:fc:d2:
                    a6:f7:7c:ff:2f:6b:95:26:bf:39:ae:d6:f3:ed:b1:
                    bf:c2:23:af:36:16:47:fc:06:c0:65:3e:84:69:58:
                    f8:68:d8:41:9f:6c:9a:11:40:ba:a2:92:fc:a1:61:
                    65:55:42:be:d9:0c:1a:1b:7b:c7:f7:96:3d:6c:d2:
                    d9:3e:cd:16:d0:8f:15:de:80:b0:e0:65:ae:75:c0:
                    ca:16:80:03:4f:97:d6:95:a5:d1:c1:cd:40:cb:5d:
                    15:a7:3b:41:b8:25:f6:d6:79:79:5c:c9:53:f3:4f:
                    49:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:57:3F:0D:F6:44:CE:45:F7:07:84:33:0E:0B:36:22:35:EF:1F:30
            X509v3 Authority Key Identifier:
                keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:97:90:e0:c0:f4:1c:19:1c:38:5f:62:cc:0c:8a:09:37:6e:
         45:67:df:79:db:73:21:ed:95:63:e3:00:b4:4a:ff:8a:36:7e:
         eb:00:bd:ea:2f:b1:d8:e9:4e:4d:0d:26:2e:0e:d0:6d:f7:52:
         3d:69:53:d2:3f:e2:f7:e9:a2:86:5e:09:a2:65:c2:41:08:a5:
         4c:4d:27:ea:cb:37:57:d6:fb:05:5b:6e:09:71:d7:3f:c3:18:
         c6:9c:6e:85:54:09:23:8c:d8:c7:a2:9b:55:f8:be:21:50:dc:
         cd:65:69:2b:85:d0:a2:19:ad:92:59:8c:13:e2:01:b6:6d:80:
         3a:3e:cb:d8:e5:8a:90:d3:24:45:68:82:c1:4f:ab:6d:92:83:
         42:84:3e:ea:50:61:20:c1:ea:72:5e:98:1b:a2:fa:58:87:12:
         1d:69:8f:b7:0e:21:7f:c9:5c:06:4f:19:70:ca:21:02:ca:0b:
         33:74:2f:cc:14:3e:00:7a:ad:df:97:de:80:5a:f2:bc:cc:83:
         4b:9f:37:99:23:ed:c1:85:ca:ed:f0:bf:23:50:08:66:b8:f6:
         7a:81:60:73:cf:6f:6f:74:fb:ec:80:e0:a9:c0:5f:73:a3:6a:
         e1:22:7b:39:87:66:48:85:d8:b6:50:3c:36:e9:12:43:a8:f5:
         14:1e:9e:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRiUHi7CUPPkoovSXfU4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0N2UzZTVmOWViODA4OWI1Y2E5NGYzOGU2NTE3Y2ZiYzVi
MjAwNjMwHhcNMjYwMjA5MTIwMDE5WhcNMjYwMjEwMTIwMDE5WjAzMTEwLwYDVQQD
Eyg4MDU3M2YwZGY2NDRjZTQ1ZjcwNzg0MzMwZTBiMzYyMjM1ZWYxZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VSZU9QUzzYq1A536ldPKj9TYONI
SClCKnb5Z3orudBiVHHNN1xZj/rVjMUXhWPDSFIhr/Bgg4Q0bNSd8xtNuh0KRBFH
6IuHN1D/G2mtHJkKh5tM7hOCL3gpORntI90puE7Od0zIx5nsyorm85UEVJU3KJlF
Of5VjyUBUM8rtRD7v/aIU+e2XJXsZ8m3S9QJBZem/NKm93z/L2uVJr85rtbz7bG/
wiOvNhZH/AbAZT6EaVj4aNhBn2yaEUC6opL8oWFlVUK+2QwaG3vH95Y9bNLZPs0W
0I8V3oCw4GWudcDKFoADT5fWlaXRwc1Ay10VpztBuCX21nl5XMlT809JTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBXPw32RM5F9weEMw4LNiI17x8wMB8GA1UdIwQY
MBaAFJR+Pl+euAibXKlPOOZRfPvFsgBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YzRjMjYtZTM0YS00MzM2LTkwYzgt
ZjkwYWU5OTY2NDI4LzEvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82YzRjMjYtZTM0YS00MzM2LTkwYzgtZjkwYWU5OTY2NDI4
LzEvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5eQ4MD0
HBkcOF9izAyKCTduRWffedtzIe2VY+MAtEr/ijZ+6wC96i+x2OlOTQ0mLg7QbfdS
PWlT0j/i9+mihl4JomXCQQilTE0n6ss3V9b7BVtuCXHXP8MYxpxuhVQJI4zYx6Kb
Vfi+IVDczWVpK4XQohmtklmME+IBtm2AOj7L2OWKkNMkRWiCwU+rbZKDQoQ+6lBh
IMHqcl6YG6L6WIcSHWmPtw4hf8lcBk8ZcMohAsoLM3QvzBQ+AHqt35fegFryvMyD
S583mSPtwYXK7fC/I1AIZrj2eoFgc89vb3T77IDgqcBfc6Nq4SJ7OYdmSIXYtlA8
NukSQ6j1FB6erQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:10 2026 by rpki-client