This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
File:                     4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json)
Hash identifier:          n84oeJZshhuWo2FcKq3KJAqnn6ny3xwG2wkoAhsg7Og=
Subject key identifier:   39:92:4B:F5:B8:49:6E:F8:B5:42:02:F1:D9:A9:3E:22:CD:35:28:33
Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Certificate issuer:       /CN=e31c010e95015c2123641d33120a7e9c9008002d
Certificate serial:       019C42100E3BE2A648E20930B04BBF856EBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
Manifest number:          013B
Signing time:             Mon 09 Feb 2026 11:01:14 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:14 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:14 +0000
Files and hashes:         1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: L6pQVQmLNU5q5Q73CFDCMWhZYUJSvTYFWPhyNohMWNc=)
                          2: EVP8JZC4veSxdxX6T8tUKYQ-OAA.roa (hash: bYUAbwTN22M9GXhG7TnoyYrgAEb8pmrS9QwXIchXrAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:0e:3b:e2:a6:48:e2:09:30:b0:4b:bf:85:6e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d
        Validity
            Not Before: Feb  9 11:01:14 2026 GMT
            Not After : Feb 10 11:01:14 2026 GMT
        Subject: CN=39924bf5b8496ef8b54202f1d9a93e22cd352833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fe:f6:4c:0e:46:96:3f:81:dd:69:b8:d0:2c:
                    92:85:90:9d:97:6b:d3:eb:11:3e:f2:4c:b3:09:28:
                    fb:80:65:db:24:73:dc:de:03:92:78:09:9f:ff:a3:
                    2b:05:27:ae:ba:49:35:5e:b3:4e:a5:24:42:3b:91:
                    8f:b1:02:13:0e:d7:5a:68:2e:78:85:a0:11:2c:39:
                    f2:88:2c:4d:9a:6b:da:0f:09:0c:12:da:e0:d9:cf:
                    4c:b5:b6:c0:c8:7b:fd:ae:d6:f4:40:22:36:4c:a2:
                    71:de:ca:0e:ca:5b:56:18:f1:65:de:76:7c:e1:72:
                    17:83:80:21:79:6f:93:dd:37:35:9a:97:26:bf:fd:
                    8d:d5:e3:57:4d:43:44:43:ad:28:15:54:aa:73:5e:
                    df:0f:66:e3:ed:51:c6:9d:fa:f2:8c:61:ab:2b:e1:
                    c5:63:ae:47:e1:12:a8:8d:0e:72:10:4f:89:8d:80:
                    73:f1:9a:b2:4e:50:6b:f4:f2:c1:f1:39:bd:62:69:
                    1f:bd:0f:3a:ae:46:2f:82:de:88:71:fb:cc:8a:5f:
                    cd:83:c4:37:eb:cb:9d:91:58:d0:90:ba:a3:80:e2:
                    d6:bd:a9:58:e5:a4:10:32:5f:17:da:b1:62:54:2d:
                    56:ef:65:52:2e:c9:9b:e2:42:67:2b:19:4c:b6:2d:
                    a9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:92:4B:F5:B8:49:6E:F8:B5:42:02:F1:D9:A9:3E:22:CD:35:28:33
            X509v3 Authority Key Identifier:
                keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:83:56:c9:a5:d4:12:24:18:9c:21:9c:67:18:e5:05:9b:2d:
         ef:38:16:2b:bf:b0:bf:4b:af:98:81:4e:4d:c1:90:58:a9:0d:
         9f:5c:88:07:2b:1c:db:bf:7e:b5:32:cf:b7:d6:53:b6:d4:e1:
         00:ae:6a:7e:b1:72:65:4f:7d:80:1d:b5:42:b9:a9:3c:dd:91:
         34:c5:ae:6a:86:3b:8d:f5:d7:5b:18:95:d4:a6:18:75:b1:8a:
         ac:60:d1:48:45:85:7f:d2:ad:36:fe:77:16:95:6b:00:19:f3:
         7d:2c:9a:5c:ad:23:e2:a7:9d:e1:70:34:d7:14:a0:eb:ee:c0:
         3f:d1:23:34:40:23:c2:a4:3b:ac:9a:43:89:7b:c0:bc:49:17:
         ec:0d:21:a0:88:b5:ba:e3:c1:a7:42:8f:51:b8:24:87:b1:b0:
         4e:61:9b:2d:d4:4c:b8:c4:03:1c:df:2c:9d:dc:79:62:69:71:
         7a:9f:9d:3e:db:3a:2e:ce:d3:72:da:90:a2:19:14:b5:44:24:
         7d:aa:b5:bc:da:a2:c4:c0:03:cb:24:a7:70:47:7c:97:3f:3b:
         c4:22:1a:f0:ec:92:2c:2a:27:15:d4:0d:f2:f3:42:30:bf:49:
         20:85:18:b3:c0:60:44:d5:94:3b:75:b3:80:24:ca:3d:ee:fd:
         70:ef:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:40 2026 by rpki-client