This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
File:                     4PL1Rd2yNOOD02uKjWtWo43XL4k.mft (raw, json)
Hash identifier:          yETVKNR0K8GUdQbP5LAnK3Zn5hhYlx4QwuNOS0Sz5zM=
Subject key identifier:   20:4B:0D:38:FC:53:73:E9:FA:4B:3A:42:4C:8D:19:D1:FB:55:E7:7D
Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
Certificate issuer:       /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Certificate serial:       019C1C4BA28C3E38B9EAC2183541279615EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
Manifest number:          0A0F
Signing time:             Mon 02 Feb 2026 03:00:44 +0000
Manifest this update:     Mon 02 Feb 2026 03:00:44 +0000
Manifest next update:     Tue 03 Feb 2026 03:00:44 +0000
Files and hashes:         1: 4PL1Rd2yNOOD02uKjWtWo43XL4k.crl (hash: KLcfRHAZAknn6WNiqCZv6FAOmS4AZYF0Y+m7JgcNVEk=)
                          2: AyCa3M8xYrOj2yQfMci0ZY7Yf1Y.asa (hash: 4cT0D7+3fI+x0G0JXb/zfB6aX1I04T5jruNKcFtFaD0=)
                          3: ODt7PHiuGg1x7ZK4rw_s4kN0mRA.roa (hash: XptWkOCtZXQLc7ip95cgT3GyOmfhUjdofdkZeE4pykc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:4b:a2:8c:3e:38:b9:ea:c2:18:35:41:27:96:15:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
        Validity
            Not Before: Feb  2 03:00:44 2026 GMT
            Not After : Feb  3 03:00:44 2026 GMT
        Subject: CN=204b0d38fc5373e9fa4b3a424c8d19d1fb55e77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:cf:83:b7:4e:fb:d4:39:c3:d3:d9:12:1d:
                    96:a5:9f:09:63:5e:92:3f:66:94:92:3f:c7:8e:13:
                    68:6a:51:da:03:24:29:6a:d5:4d:4d:42:31:4d:f0:
                    eb:40:db:b8:0c:08:f3:c1:ca:1e:3d:e0:48:9d:1f:
                    ba:86:ff:08:fa:33:72:8a:f4:ad:99:9b:74:7c:78:
                    32:18:47:93:f4:8c:ed:09:48:81:88:34:43:4a:6d:
                    ca:71:5e:17:a9:f8:1c:a7:89:ae:fb:16:d3:1b:f6:
                    d9:1a:f2:7f:96:86:75:8c:02:ec:12:b5:19:06:2a:
                    33:48:08:c5:d6:b5:9b:6e:83:6a:6d:49:1c:38:a1:
                    56:b7:b9:39:af:4a:30:af:9f:a7:b9:93:93:e9:49:
                    6e:24:bc:7f:12:d9:4a:4d:37:0a:7c:9a:68:2a:90:
                    0f:cd:88:42:0e:04:b4:2a:81:8d:bb:a3:38:52:5c:
                    df:19:f6:cc:4a:4b:9d:bf:4d:5c:68:34:6e:f2:07:
                    1c:07:2c:03:75:45:ed:8d:57:03:e8:a8:54:68:20:
                    e6:81:5c:f7:9e:81:63:6b:e6:c2:8d:5e:fb:9b:59:
                    2d:30:35:eb:e8:41:8e:1c:66:b5:3f:90:e5:80:3c:
                    9a:7b:84:6a:f7:5d:eb:9f:06:67:bd:d2:de:4d:1b:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4B:0D:38:FC:53:73:E9:FA:4B:3A:42:4C:8D:19:D1:FB:55:E7:7D
            X509v3 Authority Key Identifier:
                keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fc:76:4e:09:77:2e:ae:e8:32:1b:27:66:65:2b:51:7b:b0:
         1f:21:93:f3:17:fd:23:30:2d:62:59:89:24:95:7e:79:ee:65:
         96:4f:77:66:6a:58:77:8d:a6:c3:c1:08:d1:76:9f:4c:3c:9b:
         ee:5f:3f:0b:2f:a1:dd:da:94:81:26:b7:a4:43:27:46:ad:db:
         f0:7a:59:b3:30:a1:a0:4f:77:93:13:4a:6b:ef:b0:e3:3d:dc:
         48:70:7d:3c:18:84:07:4c:88:1d:89:ba:b2:6b:51:58:a8:51:
         04:79:cf:c7:9a:7b:24:9a:2b:0a:64:48:6a:1a:8f:5a:ef:28:
         18:18:54:ed:c0:78:62:cb:7e:1b:3d:b4:51:29:2b:d4:1f:7b:
         69:71:50:e0:39:4a:39:d6:79:99:e2:35:67:82:0c:9c:0d:1f:
         be:b3:e5:d4:56:32:cd:94:bb:e5:69:22:13:98:04:5b:9a:a8:
         6f:3b:1c:e0:5a:68:d2:44:62:bb:60:9e:74:fa:0e:11:e3:db:
         9e:15:44:31:73:6a:00:77:d5:07:e3:90:a6:5a:fd:59:b6:b2:
         fd:c8:1f:4f:f4:3d:33:67:07:65:4d:fb:46:c5:a9:5c:fc:b5:
         a0:93:b7:c0:06:ec:82:c1:66:28:5b:52:2e:5b:5f:5b:ad:80:
         b8:5d:f8:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwcS6KMPji56sIYNUEnlhXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZjJmNTQ1ZGRiMjM0ZTM4M2QzNmI4YThkNmI1NmEzOGRk
NzJmODkwHhcNMjYwMjAyMDMwMDQ0WhcNMjYwMjAzMDMwMDQ0WjAzMTEwLwYDVQQD
EygyMDRiMGQzOGZjNTM3M2U5ZmE0YjNhNDI0YzhkMTlkMWZiNTVlNzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGDPg7dO+9Q5w9PZEh2WpZ8JY16S
P2aUkj/HjhNoalHaAyQpatVNTUIxTfDrQNu4DAjzwcoePeBInR+6hv8I+jNyivSt
mZt0fHgyGEeT9IztCUiBiDRDSm3KcV4Xqfgcp4mu+xbTG/bZGvJ/loZ1jALsErUZ
BiozSAjF1rWbboNqbUkcOKFWt7k5r0owr5+nuZOT6UluJLx/EtlKTTcKfJpoKpAP
zYhCDgS0KoGNu6M4UlzfGfbMSkudv01caDRu8gccBywDdUXtjVcD6KhUaCDmgVz3
noFja+bCjV77m1ktMDXr6EGOHGa1P5DlgDyae4Rq913rnwZnvdLeTRvRRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBLDTj8U3Pp+ks6QkyNGdH7Ved9MB8GA1UdIwQY
MBaAFODy9UXdsjTjg9Nrio1rVqON1y+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYt
OGNhNmMzM2QxNGJiLzEvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYtOGNhNmMzM2QxNGJi
LzEvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvx2Tgl3
Lq7oMhsnZmUrUXuwHyGT8xf9IzAtYlmJJJV+ee5llk93ZmpYd42mw8EI0XafTDyb
7l8/Cy+h3dqUgSa3pEMnRq3b8HpZszChoE93kxNKa++w4z3cSHB9PBiEB0yIHYm6
smtRWKhRBHnPx5p7JJorCmRIahqPWu8oGBhU7cB4Yst+Gz20USkr1B97aXFQ4DlK
OdZ5meI1Z4IMnA0fvrPl1FYyzZS75WkiE5gEW5qobzsc4Fpo0kRiu2CedPoOEePb
nhVEMXNqAHfVB+OQplr9Wbay/cgfT/Q9M2cHZU37RsWpXPy1oJO3wAbsgsFmKFtS
LltfW62AuF34mg==
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:18 2026 by rpki-client