This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File:                     4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier:          kTRQSnhbGOnCxs2k8zQhHAOfuSrREsBeM+yKAmjKCb0=
Subject key identifier:   70:99:A7:3C:FB:98:6A:B7:85:95:54:37:AD:D9:C8:6A:9E:A1:AA:51
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer:       /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial:       019C42B3F310DA37BB529887138AD268EC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number:          1819
Signing time:             Mon 09 Feb 2026 14:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:15 +0000
Files and hashes:         1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: Faf5vMgfqgoC4AvVp1gUa/B1QBtZ6WD22rHfI6oxo/E=)
                          2: HMpkFnFRNLrRrrjLr9m-Ha2OMAk.roa (hash: MvD+kW64gasfrmfOU4x0HNuN58jbkr9LphVnvyCI/70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:f3:10:da:37:bb:52:98:87:13:8a:d2:68:ec:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
        Validity
            Not Before: Feb  9 14:00:15 2026 GMT
            Not After : Feb 10 14:00:15 2026 GMT
        Subject: CN=7099a73cfb986ab785955437add9c86a9ea1aa51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:16:cc:35:06:50:72:eb:a1:fb:9c:53:bc:
                    97:cd:19:1f:04:e9:34:fd:cd:7d:e7:e5:f4:c2:9b:
                    8b:4f:cb:d0:44:35:3d:0d:04:6a:36:02:7f:83:09:
                    fa:55:6c:15:30:8a:05:6c:60:de:8e:69:ea:9a:5f:
                    cd:9e:78:cf:2d:cb:76:5e:40:ae:60:f7:60:23:aa:
                    de:01:a8:a7:a8:24:83:79:ee:88:30:15:43:02:66:
                    3f:2b:81:10:4e:03:44:67:ec:a0:45:0a:41:08:65:
                    47:84:36:56:b3:f6:5b:15:c4:0b:a8:21:17:98:07:
                    7f:f2:49:e2:5b:17:62:4e:e8:e8:70:74:4c:9b:54:
                    34:4c:28:32:28:05:0d:44:3c:2a:9a:dd:ba:9d:fd:
                    90:b8:cb:fe:ef:4b:db:28:b9:e2:8b:bc:f4:8e:46:
                    a8:1d:f4:09:f0:df:43:42:11:23:61:74:12:96:bc:
                    b5:55:8f:f7:61:f8:29:1f:5f:ff:27:0b:ee:f7:45:
                    0c:61:6e:a9:df:34:53:47:f4:5a:7e:c9:70:0b:d3:
                    84:4f:7a:7f:5d:db:77:09:e5:32:c1:af:4e:6b:d4:
                    22:5e:ed:65:80:19:5d:cd:04:4d:81:f5:4e:16:78:
                    fd:56:e7:55:bf:09:86:89:e3:e7:12:e2:b5:6f:37:
                    a8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:99:A7:3C:FB:98:6A:B7:85:95:54:37:AD:D9:C8:6A:9E:A1:AA:51
            X509v3 Authority Key Identifier:
                keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:0f:a8:85:d5:72:1a:ea:3d:31:fd:c7:60:bc:16:04:b9:97:
         f8:b4:df:da:b9:28:a5:ac:b1:fe:2a:f1:31:24:f3:48:5a:d7:
         d2:c4:39:e1:ad:c2:98:68:eb:00:14:2f:ca:44:47:e1:67:96:
         dd:df:24:3f:98:a1:e2:5e:d3:e3:9e:97:c8:d9:74:23:84:e6:
         37:ad:87:0b:d3:ec:84:e9:ae:75:10:47:b4:f9:a9:42:0a:e2:
         31:d4:b1:40:18:70:ac:f8:86:b8:49:82:64:42:d6:21:57:4e:
         4c:50:96:4a:67:c4:13:53:b3:a6:b1:fc:c4:52:69:c8:d2:23:
         12:5f:2f:ca:bb:10:cc:94:89:bc:fe:53:1d:c6:c1:37:e4:69:
         59:6f:bc:e1:f1:3f:ed:43:05:49:34:7c:da:76:94:2b:04:48:
         82:4b:b8:37:5d:ea:8a:c6:f5:61:7e:55:d2:bd:d0:d1:ef:a0:
         8e:22:ec:80:71:af:82:1a:29:0a:cb:79:a5:6a:a6:18:d8:0c:
         67:80:a2:1c:60:62:05:52:1f:c9:e7:85:d1:7e:96:75:6c:3f:
         24:d5:c5:c1:dc:7e:dc:b2:9d:fd:90:62:d2:7c:4f:e5:7e:9d:
         91:02:cf:85:aa:28:cb:ec:6f:3e:7f:0b:15:01:b9:63:06:47:
         33:e8:e9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:34 2026 by rpki-client