This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File:                     4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier:          oxjkLBVLE6oOCcaQIZbl623Gn5J6q7k5RVV34S60kPA=
Subject key identifier:   99:AF:F4:79:41:04:AA:61:FF:83:8A:52:CE:9E:55:E5:40:BE:A4:15
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer:       /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial:       019C438FB4E241383F5EABC0B87395BFE125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number:          0639
Signing time:             Mon 09 Feb 2026 18:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:17 +0000
Files and hashes:         1: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: fx0gIm5cSWGsGILuKbOO1Lr075tAZcmhuz3+5mMSkZ8=)
                          2: QzeP51koEMjHeE88RWvwCqM_qGQ.roa (hash: nwOrnYkRQHY2ElWIiV63spIPWkoVMJum1Nxinn4biHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:b4:e2:41:38:3f:5e:ab:c0:b8:73:95:bf:e1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
        Validity
            Not Before: Feb  9 18:00:17 2026 GMT
            Not After : Feb 10 18:00:17 2026 GMT
        Subject: CN=99aff4794104aa61ff838a52ce9e55e540bea415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:08:57:bb:9b:7f:b8:36:81:30:7e:1f:ea:
                    1b:43:cb:1e:2f:37:29:e1:6b:83:43:1f:e1:f2:1e:
                    9c:0c:7c:b3:c8:14:b3:3e:37:f9:6e:bd:da:56:c3:
                    63:4a:1b:e3:8d:fe:8d:ea:e4:50:33:d8:d5:e3:d1:
                    c6:41:f0:1b:28:36:68:32:59:63:7e:59:5e:22:55:
                    61:3d:fa:cc:d0:35:c7:2b:05:1a:35:85:e1:bc:45:
                    d7:5f:f3:fe:f0:36:d8:7e:55:aa:fc:23:19:d3:88:
                    91:57:b6:34:83:79:65:24:a1:7c:a7:19:7c:f3:90:
                    d4:de:da:9e:af:d7:ea:3f:30:cf:f4:54:0f:f7:30:
                    c2:c8:a9:22:03:11:6e:52:89:d6:7f:d5:cd:e2:12:
                    64:cb:eb:9c:8d:b0:b6:15:e3:27:cc:63:17:3b:3c:
                    a8:73:0d:25:34:8a:db:b6:e1:54:b0:b7:42:17:5a:
                    e5:82:f2:b6:6a:5b:e9:48:0f:f9:35:88:3a:f5:5f:
                    51:36:00:0f:10:12:1a:74:98:22:24:bf:67:68:94:
                    f7:d8:b6:77:94:d5:b3:78:cd:d7:83:fe:1d:03:ec:
                    ba:6c:98:01:c1:44:b1:1b:10:5a:9f:c3:5c:89:5f:
                    b0:b0:7f:2d:85:1b:00:30:8e:a3:3e:d1:1e:b5:ee:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AF:F4:79:41:04:AA:61:FF:83:8A:52:CE:9E:55:E5:40:BE:A4:15
            X509v3 Authority Key Identifier:
                keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e3:6a:2e:0c:ba:e7:81:1a:c5:ae:ce:ed:18:29:81:f2:b6:
         dd:7d:4c:c1:f7:a7:81:b6:4b:e6:47:7a:a4:6d:8a:2c:88:09:
         8b:dd:4c:25:af:9d:a7:c6:73:e9:86:e4:63:29:d8:ea:93:ed:
         18:12:0c:83:81:b6:6e:76:18:07:a9:a0:7a:95:8d:15:c1:34:
         63:7c:f5:81:25:99:b4:fe:e5:9d:f2:a2:ec:95:c1:e1:17:48:
         2c:7a:d1:70:e2:43:b7:af:46:1d:80:c7:c4:33:e2:0f:8e:b8:
         62:d5:b8:39:58:72:06:44:34:f3:7f:99:ca:01:fd:b4:02:b0:
         2c:6a:c5:14:22:c5:f2:1e:5d:dc:f1:e7:7a:23:0e:d6:b0:25:
         af:e6:d0:03:3e:30:3f:7f:88:8b:02:51:90:d9:22:2a:19:78:
         fd:55:8e:ee:05:15:95:5a:44:ed:a9:08:f3:ec:42:d7:6b:48:
         d9:70:8a:4d:99:16:86:78:ff:0e:b4:c8:d5:bc:0a:88:0a:e6:
         30:49:70:6b:c6:fd:26:21:15:74:26:ce:ab:c9:ca:3b:be:4c:
         28:3f:d9:56:59:86:6e:0c:33:f6:d8:24:01:49:a1:f3:ff:26:
         a4:dd:23:8f:7d:22:54:19:18:c3:15:80:b7:fa:ec:e6:64:13:
         38:57:de:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:49 2026 by rpki-client