This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File:                     4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier:          O20rPpeIbaiMGjEhDhxpcDeEY+5GM3vcPlx0LwQJxGM=
Subject key identifier:   49:15:19:59:B8:0E:B9:BD:73:D3:59:2E:BA:F5:C4:21:F2:F2:0A:AE
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer:       /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial:       019C42EB6A1E6498590523190F854869EFC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 15:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:50 +0000
Files and hashes:         1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: BDZb2reO+3BKczjDiP80503ALhurV3gROgNq1wiTGSA=)
                          2: EC4GBb1LJjJ7pV8_x0txKCEIXSg.roa (hash: 9oW73pfxOP8M7veC/PL5Kk4ZUA5njttoIdfA+gSwRO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:6a:1e:64:98:59:05:23:19:0f:85:48:69:ef:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
        Validity
            Not Before: Feb  9 15:00:50 2026 GMT
            Not After : Feb 10 15:00:50 2026 GMT
        Subject: CN=49151959b80eb9bd73d3592ebaf5c421f2f20aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:04:5d:d7:df:9f:ee:38:b4:9a:06:97:f8:
                    f0:8f:95:c1:27:45:0c:e7:24:64:de:35:13:6b:1c:
                    c2:4e:00:e4:00:95:7f:ec:38:00:f2:54:34:cc:b5:
                    20:5c:2c:19:8c:61:36:e3:41:c7:02:be:24:c0:41:
                    4e:f7:ca:6e:37:cb:4f:0a:7e:5b:59:62:dd:8f:a3:
                    72:40:6b:0d:02:79:ef:3b:4d:07:4f:c9:e9:54:7f:
                    84:d6:a7:1e:c8:50:bb:f0:9a:21:4a:d9:06:62:ba:
                    56:f5:a7:06:fc:be:d9:54:37:e8:49:33:dd:a5:90:
                    4c:c2:de:dc:05:33:64:43:9a:7f:85:af:c7:93:e8:
                    ab:a0:28:01:54:97:a7:ec:ab:cf:1d:fa:7f:a3:37:
                    97:e6:fe:e8:2b:0e:6f:fa:30:d7:19:22:78:a1:81:
                    e5:cd:1e:10:bf:a2:42:59:c2:c2:9d:89:82:a1:81:
                    6c:1b:54:92:eb:d3:42:e0:80:c1:ba:91:4d:5d:82:
                    a7:de:3c:cc:c8:95:aa:f8:ab:56:e2:23:22:9b:ba:
                    cb:1f:0a:06:e7:b2:38:04:fa:d1:c4:00:26:44:14:
                    56:f0:75:91:30:7c:88:69:de:5e:98:12:db:b2:09:
                    ce:5a:31:d7:d3:29:55:c9:bb:16:7d:fc:ad:4e:bb:
                    e6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:15:19:59:B8:0E:B9:BD:73:D3:59:2E:BA:F5:C4:21:F2:F2:0A:AE
            X509v3 Authority Key Identifier:
                keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:57:76:c1:c1:e7:ae:c2:12:d0:a6:0e:6d:0d:c7:83:a4:57:
         e7:6a:11:8c:e6:73:2c:ef:cb:c1:a7:21:bf:fe:0a:ae:7f:f7:
         8e:d4:8a:aa:16:b7:5a:54:e5:ca:03:2d:61:73:60:b7:15:c2:
         7f:d8:34:b3:04:ec:bf:c6:04:31:c1:0e:81:9d:ce:76:05:7e:
         80:7d:8f:c9:ce:6c:0b:2a:43:02:70:96:67:a9:c3:1e:65:47:
         ed:88:bd:64:01:e7:a5:fc:dc:e0:c0:24:65:12:3c:3e:61:de:
         b7:a8:c1:42:01:bd:2f:16:42:13:e8:4c:79:ac:29:aa:f7:85:
         0f:7a:f2:b9:38:f0:13:06:15:96:d4:fa:28:aa:41:e8:23:41:
         d5:42:e9:eb:0c:ca:4e:66:b0:c3:80:64:54:dc:da:b6:0b:17:
         9a:2b:08:a8:cb:7b:48:1c:ed:60:22:86:d7:ec:7d:e3:46:06:
         fe:71:7b:b4:01:0c:de:1e:c8:21:be:a2:96:b2:64:b3:1f:e2:
         b0:b7:d9:c6:ca:ad:b2:ff:4b:c8:bc:b9:8c:e3:67:4c:13:ee:
         95:63:19:ea:f5:8b:d5:6b:25:1f:49:f1:e1:e9:ff:51:21:06:
         94:b6:cc:77:03:d2:5e:26:62:7a:28:2e:58:4a:0e:6a:c5:97:
         de:80:ef:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC62oeZJhZBSMZD4VIae/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMDRlMWMyMDExNGQ3NzMxNjk0ZGRjNGYyNzdjNGRmMWJm
ZmM0ZjgwHhcNMjYwMjA5MTUwMDUwWhcNMjYwMjEwMTUwMDUwWjAzMTEwLwYDVQQD
Eyg0OTE1MTk1OWI4MGViOWJkNzNkMzU5MmViYWY1YzQyMWYyZjIwYWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriEEXdffn+44tJoGl/jwj5XBJ0UM
5yRk3jUTaxzCTgDkAJV/7DgA8lQ0zLUgXCwZjGE240HHAr4kwEFO98puN8tPCn5b
WWLdj6NyQGsNAnnvO00HT8npVH+E1qceyFC78JohStkGYrpW9acG/L7ZVDfoSTPd
pZBMwt7cBTNkQ5p/ha/Hk+iroCgBVJen7KvPHfp/ozeX5v7oKw5v+jDXGSJ4oYHl
zR4Qv6JCWcLCnYmCoYFsG1SS69NC4IDBupFNXYKn3jzMyJWq+KtW4iMim7rLHwoG
57I4BPrRxAAmRBRW8HWRMHyIad5emBLbsgnOWjHX0ylVybsWffytTrvm1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkVGVm4Drm9c9NZLrr1xCHy8gquMB8GA1UdIwQY
MBaAFOIE4cIBFNdzFpTdxPJ3xN8b/8T4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iOWRmNWEtYTQ1NC00ZTI3LTg2YWYt
MTNkMzgwNzE1Y2VmLzEvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9iOWRmNWEtYTQ1NC00ZTI3LTg2YWYtMTNkMzgwNzE1Y2Vm
LzEvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs1d2wcHn
rsIS0KYObQ3Hg6RX52oRjOZzLO/Lwachv/4Krn/3jtSKqha3WlTlygMtYXNgtxXC
f9g0swTsv8YEMcEOgZ3OdgV+gH2Pyc5sCypDAnCWZ6nDHmVH7Yi9ZAHnpfzc4MAk
ZRI8PmHet6jBQgG9LxZCE+hMeawpqveFD3ryuTjwEwYVltT6KKpB6CNB1ULp6wzK
Tmaww4BkVNzatgsXmisIqMt7SBztYCKG1+x940YG/nF7tAEM3h7IIb6ilrJksx/i
sLfZxsqtsv9LyLy5jONnTBPulWMZ6vWL1WslH0nx4en/USEGlLbMdwPSXiZieigu
WEoOasWX3oDvIg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:26 2026 by rpki-client