This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
File:                     RK4A_ueCEKsEi0QODLKn9AyduMw.mft (raw, json)
Hash identifier:          gK3mUs86eWHP+cW11HrBJz9//MqEeMUsDjlbOm2MQFA=
Subject key identifier:   16:FB:67:D7:C0:E4:21:31:9A:84:70:31:3F:C3:50:2A:B3:BF:B9:72
Authority key identifier: 44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC
Certificate issuer:       /CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
Certificate serial:       019C427D46E5B27ACD4C1C1561B4B265A5F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
Manifest number:          0C39
Signing time:             Mon 09 Feb 2026 13:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:32 +0000
Files and hashes:         1: RK4A_ueCEKsEi0QODLKn9AyduMw.crl (hash: z0Fnlq/wq54w0E7Oor8M2R+cs3dxVCPOcLT6p95bpUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:46:e5:b2:7a:cd:4c:1c:15:61:b4:b2:65:a5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
        Validity
            Not Before: Feb  9 13:00:32 2026 GMT
            Not After : Feb 10 13:00:32 2026 GMT
        Subject: CN=16fb67d7c0e421319a8470313fc3502ab3bfb972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:82:46:3e:60:11:94:c7:b1:2c:9d:e7:97:0b:
                    54:1f:35:ec:bb:0f:f8:35:47:8b:e1:a2:c1:ea:3f:
                    85:30:9a:38:68:07:18:75:fe:8d:4c:0a:a1:75:53:
                    d5:9d:91:38:03:24:63:cc:8b:11:1a:29:4c:c8:6f:
                    b3:ad:2d:ea:86:3d:4d:5d:ae:9c:07:36:68:a5:8a:
                    73:42:0a:50:20:10:12:a8:1e:91:a4:ff:f5:49:96:
                    b5:93:f5:c8:93:00:13:ef:d3:52:b9:fc:fb:6c:21:
                    ec:75:06:f8:00:9e:7e:79:e6:f8:f8:c0:7a:65:13:
                    a5:6b:6a:3c:df:91:61:38:f5:57:28:c9:bb:ec:f5:
                    5c:17:4f:53:ed:c9:09:c6:95:68:93:1e:17:d6:22:
                    dc:ae:34:5a:c4:73:c3:61:eb:80:91:ec:59:6b:4b:
                    e1:d4:7b:1a:66:54:59:50:cd:06:3c:7e:87:53:a7:
                    cc:55:f7:32:e2:2e:6b:be:75:15:60:90:67:46:75:
                    e4:b1:30:4a:b8:26:21:1b:d8:07:03:91:d5:0e:cf:
                    3b:53:65:a8:1d:ca:42:8b:76:88:89:4d:42:79:10:
                    e2:ef:9e:78:a3:2c:3e:45:31:1d:28:65:84:1c:52:
                    6e:5d:ca:c7:a4:36:70:d1:4e:97:42:d0:e0:9b:3c:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FB:67:D7:C0:E4:21:31:9A:84:70:31:3F:C3:50:2A:B3:BF:B9:72
            X509v3 Authority Key Identifier:
                keyid:44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3c:d5:8a:e8:61:fb:90:54:f2:15:37:69:a5:aa:ce:bd:5b:
         15:ce:9a:76:08:53:be:1d:e0:87:c8:ed:12:c7:10:4a:72:16:
         8f:aa:2f:11:02:27:a0:53:ff:93:36:cd:f3:03:40:e7:c8:12:
         60:7e:1d:4e:d1:cc:3f:37:c5:a7:d9:9e:d7:4c:33:a2:f4:75:
         e2:89:0a:ee:e8:04:29:b2:01:8a:d3:1e:b5:79:ba:5b:55:d5:
         3f:6c:aa:8a:6c:2a:8e:ef:ca:c0:e6:e7:b3:8a:e8:2c:45:69:
         99:4f:bf:12:a1:bb:b4:81:4c:0d:e2:18:2b:ec:fe:88:d0:fd:
         dc:02:23:fe:df:c1:01:75:4e:24:d5:1f:84:3c:60:3c:6c:ef:
         d8:c4:93:8e:63:85:99:dc:47:57:e3:b8:1b:58:7e:72:68:cb:
         4c:cc:ef:28:a3:9e:b9:bd:d3:5f:16:ad:f2:3a:ad:62:f9:0c:
         31:42:7b:d2:78:a8:e1:79:e3:71:7c:7c:df:2e:4a:db:ad:49:
         c3:c6:9e:8d:6b:7a:d5:b6:fc:66:c4:02:dc:fa:d3:18:af:d0:
         bf:19:1a:82:02:71:ea:8f:ef:c4:bb:89:5c:cd:50:e4:7f:f6:
         08:96:59:7c:45:6c:fb:b6:96:e1:cd:23:f1:65:65:01:24:bb:
         dc:65:fd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:41 2026 by rpki-client