This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File:                     4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier:          5IKwo04bEjtCxH64z7rfxna1GIjVWuvqxkQADm5okGg=
Subject key identifier:   EE:94:49:38:72:96:13:AD:1D:6C:B2:7A:98:85:93:83:CF:33:FC:08
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer:       /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial:       019C4246153CDDEDCF02EA9900C9700A3304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 12:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:15 +0000
Files and hashes:         1: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: alwSAbPXtCRERjeWqNAjFAzKEyuVXuMvNCsdCmsBdEA=)
                          2: K1FdA87T8eFrwlS20DD-axC_KRg.roa (hash: UelE8kISfcUjG8bRU19xRhDTFmmSIXEMYIXQuI26se4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:15:3c:dd:ed:cf:02:ea:99:00:c9:70:0a:33:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
        Validity
            Not Before: Feb  9 12:00:15 2026 GMT
            Not After : Feb 10 12:00:15 2026 GMT
        Subject: CN=ee944938729613ad1d6cb27a98859383cf33fc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:c1:bb:a0:de:4b:d2:c9:ab:81:83:8f:f0:
                    c0:70:ab:ac:2a:0b:11:6d:4f:86:fb:78:1f:23:18:
                    c5:f3:e5:e1:86:7e:6d:3f:12:f7:4d:56:ae:dc:ac:
                    36:46:12:de:4d:bf:bc:05:bf:49:f5:2a:91:0d:95:
                    8e:8a:8f:ca:0f:92:00:90:c5:9d:34:26:03:4b:4e:
                    51:09:6e:87:3c:a5:e1:08:72:c4:e5:ed:5a:d7:9d:
                    c1:58:35:48:94:cc:1e:09:f1:a5:50:8e:d3:7d:75:
                    b7:cc:8d:09:2f:e7:0b:e6:52:27:36:7d:86:b8:8d:
                    10:30:55:0b:c0:9b:13:ae:03:04:01:db:89:4a:9c:
                    2f:f5:6c:28:23:70:5e:8d:81:e5:4a:0d:27:dc:9e:
                    80:ab:49:fe:d5:8f:f1:dc:eb:2a:c3:c3:4b:b3:e1:
                    d2:28:fb:3b:6c:44:79:78:37:a6:04:7b:09:74:14:
                    a6:2d:41:18:0c:a6:86:e2:67:6b:18:fa:35:38:77:
                    de:f9:d4:f9:fd:94:e2:bf:80:fa:d8:62:07:43:1b:
                    47:0c:51:9e:97:29:cb:63:e3:79:b1:60:7c:4b:18:
                    a7:74:cb:ac:23:93:f9:d7:31:fb:dd:94:76:3f:6a:
                    ac:a4:31:ea:10:c8:90:17:12:21:ba:6a:1c:48:bb:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:94:49:38:72:96:13:AD:1D:6C:B2:7A:98:85:93:83:CF:33:FC:08
            X509v3 Authority Key Identifier:
                keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:6c:df:39:68:cd:8d:df:02:bf:14:62:4d:de:e6:35:6a:27:
         8b:b7:2c:b1:46:75:c7:75:7e:0e:ab:bc:72:ce:8c:0b:79:1d:
         c2:e5:55:a3:a2:de:50:eb:9f:ca:a4:88:b3:2d:dc:6e:b0:a5:
         bd:b9:0b:57:3a:24:b3:95:de:ab:ca:67:2c:b9:2f:de:d7:4b:
         e5:90:6d:27:e9:2e:ab:b5:f2:98:6d:87:56:ac:be:9b:be:50:
         87:8d:3e:e2:e7:c4:6d:01:25:46:74:55:a7:ec:d3:5f:09:c8:
         b7:77:9f:43:30:5b:6a:9a:f6:7c:8f:44:c7:b1:6f:ea:97:73:
         1f:68:4e:dd:36:69:9f:49:33:4e:c4:40:b0:d5:b9:c6:80:3b:
         ee:c9:6a:c3:d6:5e:49:d7:33:7e:44:c0:55:78:c3:23:d1:be:
         a8:d1:31:8a:bc:d3:9d:3e:de:7a:cf:59:93:87:b3:15:d1:0f:
         3d:eb:49:9c:71:c8:96:c7:b0:b1:a4:3f:6f:85:3e:82:4e:e4:
         22:12:94:41:65:10:19:bd:15:f3:40:61:c0:d6:f2:c3:70:b1:
         f2:91:38:77:bc:87:a4:6b:d4:ff:27:8f:97:cb:f2:a8:61:59:
         4f:17:44:c1:48:47:a7:d0:8e:24:09:fa:31:16:1d:b7:78:bd:
         33:7b:34:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:14 2026 by rpki-client