This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File:                     R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier:          9SLIWzrLeSSd2CtXwmE+5WupTG4Y8FZvQuNsZv+OHz4=
Subject key identifier:   2C:97:A5:A8:AC:FC:01:D3:99:06:58:8C:C6:B0:FC:28:72:0A:09:EC
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer:       /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial:       019C4358BBD578E6A1515F3EF638310B8FEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number:          09BD
Signing time:             Mon 09 Feb 2026 17:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:14 +0000
Files and hashes:         1: OBJUqWKdq6kiQbp0gg2le_lxwc8.roa (hash: Q6TNVRFJT35RFtqmG8IVN0WlQLvaNhPi6XH41fNOOas=)
                          2: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: kneT+9xTA+sxmPrAbOBvpeSS9foPT6pryWa1trx7zhY=)
                          3: pDXgmFSEjeXu5kTO9JnxKOTny04.roa (hash: zBFnWy98uBKGBRB8AClKYux+jyTzJfSF7W9SKPlT+0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:bb:d5:78:e6:a1:51:5f:3e:f6:38:31:0b:8f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
        Validity
            Not Before: Feb  9 17:00:14 2026 GMT
            Not After : Feb 10 17:00:14 2026 GMT
        Subject: CN=2c97a5a8acfc01d39906588cc6b0fc28720a09ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:01:98:c3:f6:a7:d2:1f:ac:27:11:24:5e:db:
                    21:b2:ba:0c:37:5f:0f:b9:43:d1:61:0c:c2:09:44:
                    2d:91:bd:01:c7:c1:af:95:ba:f6:82:47:f5:86:0d:
                    f5:d3:97:7c:33:ad:93:37:4b:cd:46:f3:2a:45:8d:
                    41:bc:6c:c3:ca:c9:4e:b8:fa:9a:aa:5f:62:63:46:
                    25:18:eb:6a:11:8c:32:4d:3b:ff:2c:ff:a1:cc:a9:
                    e8:49:d9:07:4b:5b:0f:e0:28:99:f6:4e:8b:f3:5e:
                    08:f4:c9:f2:2a:b9:a6:6e:99:99:f4:54:83:72:ff:
                    09:0f:99:ae:9c:9a:39:c5:f9:be:94:e4:52:ba:12:
                    7a:5e:93:bd:4d:09:0b:d3:ef:5f:a5:8d:0f:02:54:
                    dc:37:e8:a1:46:e6:ec:ea:91:0a:ca:a5:41:22:ff:
                    07:67:06:d1:e4:c3:36:f7:7d:7c:d9:bf:fe:0d:b1:
                    1f:20:b6:a6:94:83:7c:73:18:04:0e:a3:33:30:2e:
                    c6:01:4d:a9:69:34:aa:7c:a9:e1:c4:72:cb:92:3c:
                    8a:e5:50:6e:48:38:1a:35:35:f4:2f:5c:f4:26:63:
                    f4:27:b7:59:ec:e6:43:5f:c2:57:bf:c0:e7:62:ea:
                    66:b4:af:9f:87:67:6e:39:7f:4a:a6:5e:ca:54:9b:
                    45:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:97:A5:A8:AC:FC:01:D3:99:06:58:8C:C6:B0:FC:28:72:0A:09:EC
            X509v3 Authority Key Identifier:
                keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9c:ad:33:e1:2f:a2:36:44:8e:2e:79:09:ab:67:c1:b5:d2:
         69:6b:27:d0:c9:28:25:08:6f:84:6d:ef:e7:28:fd:1f:3c:02:
         ef:da:5d:79:f9:ca:d3:f0:8c:3e:f2:96:e5:b5:34:91:3a:01:
         19:15:13:6e:8c:c0:5d:ff:71:e3:fe:dd:ed:fd:cc:7e:2d:62:
         53:aa:4f:e2:a8:f6:43:68:9d:8b:c4:9c:25:05:44:7d:10:24:
         f3:f0:0d:e8:8f:ab:5d:31:78:88:58:e1:18:8e:b1:3f:d0:e8:
         5e:6b:5a:0a:1f:fb:b7:a4:81:f8:56:86:d5:b3:0b:c9:9b:a8:
         87:2f:df:06:07:4f:31:0e:cf:54:36:c9:7f:ec:3b:86:d1:f3:
         9d:97:df:64:23:3b:17:2e:00:59:7a:b7:8f:e7:66:25:da:60:
         40:94:27:ff:7f:ca:56:2c:7c:7c:7e:f8:65:a2:9e:53:8d:cd:
         21:3f:b0:af:30:c9:bc:4a:cc:9d:eb:9b:e1:76:32:57:53:57:
         29:24:d3:84:f7:8b:5f:00:3a:c6:2b:ef:15:c2:63:44:25:de:
         36:27:60:72:f0:40:16:1a:75:76:c1:79:d9:63:20:d4:3b:1d:
         76:c7:b6:92:ed:43:82:04:a3:3c:8a:55:ac:e0:86:a9:a6:5e:
         5e:cf:a3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:38 2026 by rpki-client