This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File:                     4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier:          I5KCKR3Wq6a18L79LVN7J3Gu4Ryd8TEU57Ers+EWtio=
Subject key identifier:   6D:63:3B:AD:EF:5B:6F:EB:BE:C0:8B:FD:45:21:BC:98:94:8D:6A:27
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer:       /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial:       019C420F6929CAFE3311B5EED7E77D2DB516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number:          174E
Signing time:             Mon 09 Feb 2026 11:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:31 +0000
Files and hashes:         1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: +tzmfJcYnBFnWAdnwUS2o1tRDCejHTGpGhIYvwaBzeY=)
                          2: pZ2DG9liFeCKNbzetKHvN52UJO0.roa (hash: ngpoJdoTiDK1ogZAlMttmztrBQw9vwYksg/OwsA6X2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:69:29:ca:fe:33:11:b5:ee:d7:e7:7d:2d:b5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
        Validity
            Not Before: Feb  9 11:00:31 2026 GMT
            Not After : Feb 10 11:00:31 2026 GMT
        Subject: CN=6d633badef5b6febbec08bfd4521bc98948d6a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f4:05:ce:55:9e:c6:0c:7d:67:77:64:80:2d:
                    8e:0c:21:4a:8e:d3:a9:7b:6b:72:4f:11:47:36:c9:
                    bf:ed:72:6e:78:f3:be:61:8b:07:e2:d4:45:d0:84:
                    a0:fc:c9:51:a0:76:e6:ba:f3:e2:81:e7:18:c7:87:
                    f3:8e:75:89:f0:d1:f5:3a:cf:24:b1:27:3d:7d:1f:
                    2f:ce:9f:9c:59:01:02:e7:15:d0:ff:bc:db:10:22:
                    4e:4f:ce:15:a5:75:51:42:ec:3e:f3:65:5d:b4:09:
                    02:dd:59:7b:a6:87:fe:c3:1d:ae:21:fc:9d:a6:f6:
                    fb:07:e5:a7:68:22:be:0f:3a:0d:cd:d6:a6:8b:54:
                    1c:8e:84:27:a7:19:e5:e8:52:11:19:e5:b4:e4:48:
                    e0:52:64:c0:b6:38:c7:10:81:a9:86:79:d4:05:88:
                    17:8a:81:a4:76:9b:6f:46:a0:8d:56:74:a3:9d:a5:
                    aa:23:be:d7:cf:63:64:6c:89:0e:5f:fa:d5:78:e7:
                    f7:9c:5f:32:14:92:5a:6e:81:f7:46:d6:45:41:0f:
                    c8:72:31:56:09:d1:14:13:23:50:d1:a2:72:f3:e4:
                    56:6f:ec:9c:9e:17:bf:42:eb:23:51:9f:d3:18:57:
                    b3:56:96:13:3e:42:ea:e8:cb:bf:79:44:55:9f:be:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:63:3B:AD:EF:5B:6F:EB:BE:C0:8B:FD:45:21:BC:98:94:8D:6A:27
            X509v3 Authority Key Identifier:
                keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:70:c2:38:d5:de:f9:65:d1:9f:9f:cf:6c:b2:98:15:3e:25:
         1b:2b:91:7f:fb:d0:ce:67:37:13:56:d1:50:d0:48:cd:69:19:
         4b:40:4d:67:0f:e1:fa:9b:11:c3:26:37:32:c8:70:f3:06:a5:
         30:ed:2c:a9:d3:8a:8b:fa:fb:fc:f4:b3:e4:c5:ef:fb:b6:15:
         5d:42:b1:cc:93:b4:ad:bf:15:36:1d:76:81:34:37:f6:3d:14:
         2e:05:b0:ae:70:bd:e5:20:fe:ef:39:91:ef:dd:80:6c:83:44:
         ce:d4:2d:77:65:25:47:a5:67:c0:27:3a:18:17:42:4a:aa:8f:
         33:05:03:b6:1b:93:a6:06:cc:93:4a:76:bf:69:d1:b8:39:35:
         1e:53:86:6e:4b:c5:71:9b:4e:42:43:df:f6:69:4d:fd:f6:91:
         d1:bc:3f:69:d6:c9:86:8f:7c:d6:12:bd:e7:98:05:eb:e1:5d:
         2e:be:4d:be:d9:9a:90:a2:42:61:40:f9:34:3d:00:46:4f:de:
         ef:0e:a4:74:ef:c9:86:44:0d:ca:ae:28:87:82:d1:21:32:91:
         69:d3:3b:cd:b1:85:c3:08:5a:86:b2:81:a9:7d:f1:6e:16:c6:
         5f:4d:02:d9:9f:d4:b9:22:46:2e:4d:4f:24:02:5b:0a:5c:ed:
         f5:60:11:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:09 2026 by rpki-client