This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File:                     4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier:          I4sGNm2wZXTo2mWBzuo9a+MkKOS/wZoVBfcQO9Ty1LI=
Subject key identifier:   79:35:21:67:1A:48:66:71:D8:F6:A1:4D:3A:A0:5F:BD:0A:52:A0:65
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer:       /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial:       019C1D95549E42ACBBB5681D219D7DF7B3F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number:          06F0
Signing time:             Mon 02 Feb 2026 09:00:51 +0000
Manifest this update:     Mon 02 Feb 2026 09:00:51 +0000
Manifest next update:     Tue 03 Feb 2026 09:00:51 +0000
Files and hashes:         1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: rv1j99c26Ly956zIFiy5cwEShcR55yjKnXfzH6EF38c=)
                          2: kJBFWcdH75SmtIn8uA9jCwfUX4o.roa (hash: ysJ0LU5rMa1kB1xrN2ppHOMAzf664V0YwglsAj8KzHs=)
                          3: wqXxgKLtEKW7BSlepVMRDTpNWM0.asa (hash: hQjKffOZktpgqNZU9Z705S9+cY/2MAGq57iVWSoX52s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:95:54:9e:42:ac:bb:b5:68:1d:21:9d:7d:f7:b3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
        Validity
            Not Before: Feb  2 09:00:51 2026 GMT
            Not After : Feb  3 09:00:51 2026 GMT
        Subject: CN=793521671a486671d8f6a14d3aa05fbd0a52a065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:39:7a:db:42:56:76:05:70:94:de:75:24:
                    b4:68:02:8d:1e:88:52:d2:19:55:5b:74:13:e7:0b:
                    cd:9d:d3:e2:f7:88:4e:45:67:bc:c7:48:bc:bc:97:
                    ea:c6:98:8c:bf:9f:cf:30:b2:1b:5d:25:dd:e1:cf:
                    24:52:49:65:9b:cb:33:77:e6:73:0e:33:59:b2:6b:
                    aa:d3:f7:f4:45:c7:7c:ff:cd:d6:dc:fa:7d:89:bc:
                    a9:49:26:7a:03:f0:00:3a:10:db:95:75:91:06:52:
                    22:a6:d8:3a:0e:cb:b9:12:44:fd:2e:ee:ab:7c:5d:
                    a7:29:24:c1:c2:a0:1e:4f:5f:7a:a0:7d:0a:3f:e0:
                    fa:a5:80:69:b4:79:af:4f:25:bb:c8:57:62:53:de:
                    c1:9d:a9:50:ec:a5:b6:d3:33:72:b3:11:b0:50:59:
                    4a:c8:51:70:2b:c0:3c:3b:c3:11:58:22:44:66:4f:
                    c2:42:94:8b:59:71:b4:09:34:52:6f:ce:a8:0e:32:
                    27:7a:1d:4c:d0:3b:53:e0:04:79:d4:17:a1:86:ed:
                    f4:81:82:27:c2:9e:83:2e:f8:8e:9c:83:86:75:3e:
                    54:15:39:20:6d:b5:52:d3:43:0c:3e:5b:e0:0f:a4:
                    3f:bf:b2:c1:ee:fb:1d:34:a1:d3:8d:47:f6:35:02:
                    7b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:35:21:67:1A:48:66:71:D8:F6:A1:4D:3A:A0:5F:BD:0A:52:A0:65
            X509v3 Authority Key Identifier:
                keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:91:34:5a:5a:68:e6:ec:9b:c7:44:8c:db:08:9c:97:1a:aa:
         a8:ae:7a:d8:eb:b3:1d:fe:70:ae:0c:30:f2:2c:dd:e5:62:ac:
         10:d7:e4:e7:d0:da:c5:82:44:01:29:33:9a:b0:57:f0:69:d8:
         6f:01:06:1a:d2:8b:88:23:3d:f7:a1:42:62:54:3e:e8:c7:54:
         19:47:0e:a6:03:f7:8f:1e:4e:76:de:fe:d2:a0:b1:0a:b1:5c:
         6a:92:36:a3:86:97:41:8e:68:39:fb:59:7b:3f:83:f2:c9:b2:
         11:d4:73:70:5b:34:e7:0f:dd:8f:86:c8:17:ed:3f:52:55:d9:
         9e:68:80:2f:29:f0:97:46:b9:75:96:40:00:5b:6a:20:aa:01:
         80:ec:1e:c8:92:3a:92:b3:23:46:94:51:54:eb:1b:d0:06:33:
         90:ad:2f:43:30:11:40:7c:6d:31:d6:91:26:d5:f2:aa:5a:90:
         66:ce:6d:25:1d:6f:64:be:fe:1a:4f:8f:82:be:6d:de:11:c0:
         24:23:3b:6f:4b:02:04:05:61:24:6d:ec:2f:c5:61:03:9f:b8:
         32:f7:0b:64:28:69:70:10:b3:ad:e5:68:4a:e2:65:8e:e1:aa:
         8d:e0:ed:c3:dc:72:aa:25:e2:92:de:a3:ab:44:09:c4:8d:d6:
         17:27:a4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:46:01 2026 by rpki-client