This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File:                     H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier:          qa5ut8O3MrmXjuXgxjhZUt7XmX+yEHG6YG8OgbvS7zA=
Subject key identifier:   67:0B:B2:CE:91:D1:37:93:A7:09:C8:D9:6F:2C:02:0F:EA:DE:5C:0C
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer:       /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial:       019C43FE8E9F5D3D098A67EC2FDD00B6B50F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number:          081F
Signing time:             Mon 09 Feb 2026 20:01:21 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:21 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:21 +0000
Files and hashes:         1: 8qURvhbURFqQhTipEQhvqic1Rjg.roa (hash: ApBgxUKn6ILqzgArNYuAOilqc1LglRrQeJhEVrK//8s=)
                          2: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: HmQkxqgXm1feFTEr+KndFTdqqzM8lWroiFxJIV8ETbg=)
                          3: Yc842nPawebZwJ_3vPInht2PhWc.roa (hash: pK4l4MkPAVEDkDlaUNSdspt7kS5pkyjEEEGIn1qkNvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:8e:9f:5d:3d:09:8a:67:ec:2f:dd:00:b6:b5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
        Validity
            Not Before: Feb  9 20:01:21 2026 GMT
            Not After : Feb 10 20:01:21 2026 GMT
        Subject: CN=670bb2ce91d13793a709c8d96f2c020feade5c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:e2:7e:49:ff:35:34:a1:a5:7e:b5:4c:0e:
                    00:f3:90:09:68:f1:8a:83:a1:d8:6b:fe:67:13:e0:
                    f7:8d:48:0a:32:42:47:94:06:da:3b:d0:b2:52:ee:
                    d1:0a:10:20:ac:6c:18:80:90:b9:96:6b:a6:9d:77:
                    01:68:5a:69:25:bc:cc:4b:12:92:75:f6:ae:3c:0b:
                    eb:5b:48:8f:46:6c:95:d6:43:b1:cb:50:5d:fb:c4:
                    ef:4f:d9:37:9f:7a:94:20:fb:7c:70:06:4a:90:e4:
                    b2:9d:31:8f:af:de:b1:84:a5:fe:6d:91:bf:3e:73:
                    ac:d2:57:aa:10:c5:7a:ff:1e:e6:54:9e:26:3c:10:
                    5b:57:b3:6a:58:df:ef:0f:4e:93:66:55:f9:2a:25:
                    22:6c:7d:f2:67:4c:27:00:94:9f:3b:d3:c5:2a:33:
                    39:0c:ca:af:d8:fb:af:4b:19:ec:ce:f0:1c:01:ec:
                    a1:c9:51:d7:9b:e8:88:28:ae:59:9f:be:94:d3:19:
                    f3:81:1d:69:1b:6b:e2:52:aa:4d:9e:a5:c2:20:e6:
                    76:22:ff:9e:41:08:2c:93:6a:31:55:e8:a6:0b:3c:
                    87:6e:92:f1:aa:b1:f4:7f:a1:bd:99:09:b0:f8:42:
                    84:67:a2:7e:9e:4a:bf:5d:33:6b:a4:d8:17:b8:77:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0B:B2:CE:91:D1:37:93:A7:09:C8:D9:6F:2C:02:0F:EA:DE:5C:0C
            X509v3 Authority Key Identifier:
                keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:81:dc:ef:15:fa:ca:57:92:6c:5b:c4:e5:f3:f5:41:0b:a5:
         da:ca:1d:9c:58:31:9b:c1:07:bd:7a:f9:11:91:24:d9:0c:8e:
         0d:1e:9f:9d:3f:1d:6c:7e:bd:85:95:86:e7:dc:f4:3f:5c:29:
         7e:5a:61:ee:6f:0c:26:68:77:4f:88:93:a8:bc:f1:76:71:e4:
         0c:ab:73:d4:f3:92:7a:59:2a:73:43:f1:9d:47:6a:a9:4b:cf:
         67:17:44:0c:9c:4c:6e:6d:9b:89:f9:cb:13:f7:57:85:39:18:
         db:48:10:fd:59:32:52:92:95:16:3d:35:71:61:9a:1c:10:a4:
         b6:99:6c:29:25:8b:36:19:0c:ca:d0:51:4c:94:45:19:4f:d9:
         e7:c8:c1:08:ae:ba:a8:29:63:9b:8f:17:9d:3a:b7:47:11:1e:
         2e:ba:74:d5:4a:a4:45:09:95:0a:a6:b5:94:1a:16:29:3f:ac:
         2b:ee:e4:8e:5b:ed:77:2f:56:72:86:7c:5a:3a:90:65:87:a6:
         1e:c8:11:df:a9:f8:48:51:74:16:e7:34:a3:a6:86:3b:6b:cd:
         b4:4b:bb:c6:73:6c:6f:fc:0a:a2:6b:db:79:9c:62:0d:16:a0:
         ab:de:ed:c1:15:84:c4:a8:9f:6d:ec:e2:94:aa:9d:7f:eb:f1:
         e2:a1:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:58 2026 by rpki-client