This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File:                     4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier:          GA7QbsbdioxADDQNn7A8/RtG7eT25GrVZCib7B4TkO0=
Subject key identifier:   02:88:20:AF:22:C0:06:12:20:14:33:AA:66:EF:E1:9F:CB:89:16:F3
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer:       /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial:       019C43FE31F1EEE1CA32A2F88BB0E3A17763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number:          07E8
Signing time:             Mon 09 Feb 2026 20:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:58 +0000
Files and hashes:         1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: rQ2VkFKI+/VXd4G8nhMWkNv2JV5OYYI3xdjn6aBNNeA=)
                          2: xsczLZy6vYyowOb8czcl6wqwt9w.roa (hash: Mvlo5cxvh4qQACxtbdlZhswtrG2sScu72g8Sl/rtq7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:31:f1:ee:e1:ca:32:a2:f8:8b:b0:e3:a1:77:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
        Validity
            Not Before: Feb  9 20:00:58 2026 GMT
            Not After : Feb 10 20:00:58 2026 GMT
        Subject: CN=028820af22c00612201433aa66efe19fcb8916f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:1c:96:4f:73:69:08:b8:20:43:dd:05:f6:
                    09:63:69:ed:47:0d:66:c1:3a:2a:e9:af:ea:f0:82:
                    51:74:9d:21:97:69:52:7b:d9:60:41:b0:66:d4:3b:
                    cf:99:77:bf:b7:56:96:ed:b7:76:96:2d:b6:44:4c:
                    bf:9b:7c:e0:ca:4b:09:70:06:98:50:00:67:72:a3:
                    63:0e:b2:a3:05:34:4e:ca:0a:e0:74:1e:0f:f2:36:
                    13:21:b8:c0:23:81:74:e3:22:6d:9e:e5:2f:a2:de:
                    e5:b3:6d:09:0a:78:84:10:29:6f:95:d6:9f:97:c1:
                    c1:25:9a:3d:6d:e5:a5:5f:06:4d:24:ce:52:ce:34:
                    93:22:91:ff:28:02:2f:75:02:3e:b9:94:c9:71:7c:
                    a2:b1:6a:85:0d:79:71:8e:80:bb:6a:9c:54:95:75:
                    6a:d1:67:e9:18:81:88:89:0f:d9:7b:ac:a1:3d:0f:
                    6a:50:9d:89:c4:51:34:0a:cc:c6:94:0f:e6:6a:17:
                    df:5f:4c:69:a6:13:29:8b:f8:da:16:b1:15:14:ce:
                    e4:09:f4:b7:00:94:c8:ff:d1:a0:3c:fc:b2:bb:13:
                    6b:5c:59:5d:93:d1:14:8c:68:9b:46:c0:bc:a6:69:
                    9b:f2:a8:40:f4:a5:2b:e0:59:e9:a3:f4:94:57:00:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:88:20:AF:22:C0:06:12:20:14:33:AA:66:EF:E1:9F:CB:89:16:F3
            X509v3 Authority Key Identifier:
                keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:cd:ff:3c:db:e4:98:e7:ce:c6:5a:26:68:cb:31:6c:dd:c0:
         a0:44:5c:43:39:7c:2e:80:e2:77:71:38:29:08:db:90:f4:c2:
         bd:d1:5d:76:3f:96:c4:80:88:13:e7:ae:42:b8:26:8f:9c:d0:
         ee:a9:52:b7:0e:cf:f0:fa:2c:0f:de:a3:64:fa:60:15:4f:0a:
         3c:da:f2:93:c7:0a:ed:0d:dd:29:7f:c9:c5:43:b4:a5:c0:43:
         51:3f:60:a2:27:29:6f:42:3c:39:45:77:93:49:60:28:84:71:
         5e:78:fe:22:5f:93:ab:19:5f:df:b9:7a:fd:e5:b1:d0:65:04:
         11:eb:e8:c1:0b:aa:1a:f2:ff:f5:d1:db:c8:29:83:db:89:8a:
         dd:d6:0a:86:a7:11:e8:99:43:e6:b2:c6:de:5c:50:5a:a9:8e:
         0a:0e:0d:7c:ae:a9:88:76:05:55:48:29:dd:50:6d:61:3c:e7:
         4c:6b:ab:4d:ef:5f:71:e6:57:8b:46:38:0a:eb:9a:fc:6b:2f:
         89:e6:15:68:cd:a9:76:2a:31:cb:12:d0:be:c0:ea:8e:6c:41:
         2e:b9:0e:89:3c:66:f8:ef:5e:fc:10:ba:d5:0c:3d:2e:37:83:
         79:db:5b:c5:c4:c2:a9:c3:27:18:20:6d:66:ff:d6:74:f6:4c:
         d1:71:7e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:37 2026 by rpki-client