This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
File:                     4hEKzOM6yFARyowi0gAWZuRbk3c.mft (raw, json)
Hash identifier:          RUwvgZ/xFeZErGm1G3YBOtHfVCuzmZWnYL01tiPIVV8=
Subject key identifier:   F4:11:3E:EF:A8:EB:B1:F9:2F:5A:BB:C3:F5:72:46:BE:8D:54:CA:A7
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Certificate issuer:       /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial:       019BF876826E459E500D51E68F1B2288D361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
Manifest number:          17F7
Signing time:             Mon 26 Jan 2026 04:01:14 +0000
Manifest this update:     Mon 26 Jan 2026 04:01:14 +0000
Manifest next update:     Tue 27 Jan 2026 04:01:14 +0000
Files and hashes:         1: 05pxQUZ3O5g7XwtchpzgXkYXLrM.roa (hash: pSBaxXr7aIa0AV76Ml4OFVZIYb8NNW03JRmIFNcA92E=)
                          2: 4hEKzOM6yFARyowi0gAWZuRbk3c.crl (hash: hAzwr049nCA31w2heaOjIlEpFy7oVtzG0Dhf+Yh2jOA=)
                          3: 4zc0TbZEkLFIHswzFPhuNpSxjI4.roa (hash: YDxBwpVQ5ct0e9UMy7Eo6tKf/5X6TUwON0SibETkWO4=)
                          4: 8sE9vfnxVkhmpv_cPv6lSgophbw.roa (hash: pgSz+be35K3IsVHSxBC7rLqa8AF08GPc30TZx1/DC/o=)
                          5: QHPyg5iWbWbbW5gr34naY63NDvo.roa (hash: yEtOkw8pnNFWUem/+gYHXLql4MYn18HzTEqZKWbEw9U=)
                          6: bH0F2mV_dRL1r12H9Kv5329qGfI.roa (hash: zDXdXDEtcJePiYih7GNQU0Vm0lUa6Wpo3l7juYolzJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:76:82:6e:45:9e:50:0d:51:e6:8f:1b:22:88:d3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
        Validity
            Not Before: Jan 26 04:01:14 2026 GMT
            Not After : Jan 27 04:01:14 2026 GMT
        Subject: CN=f4113eefa8ebb1f92f5abbc3f57246be8d54caa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e5:39:61:e0:c2:27:c2:00:b6:03:a3:9b:96:
                    1e:09:85:81:86:fa:c9:47:ed:0e:8f:e5:f5:4b:d2:
                    a0:f6:95:c2:2e:a0:2d:6b:8d:ae:70:18:2e:99:22:
                    7a:15:79:02:c0:46:4c:05:7a:c8:07:5b:92:2a:69:
                    00:d4:50:8f:56:20:4a:4f:f6:4a:0d:ee:e1:c5:17:
                    48:55:90:39:97:73:76:da:07:12:71:7c:e7:f3:43:
                    f3:3b:16:69:ee:b9:73:01:e6:9e:03:5a:a0:fe:24:
                    03:13:36:78:d8:40:7c:98:31:79:e6:b1:eb:66:60:
                    45:ee:1a:4b:1f:63:2d:79:0a:d3:06:d6:f9:dc:29:
                    f3:f7:83:2e:74:f5:90:81:23:41:e6:96:07:22:36:
                    45:3c:a2:16:48:82:7a:f5:b3:22:9e:05:c0:0c:0e:
                    21:47:f8:56:7c:21:41:3d:c5:32:a7:e7:ac:f2:27:
                    72:c2:3c:25:b1:fe:e6:08:3c:e8:b5:67:e5:0a:2f:
                    fc:77:d9:0c:6e:79:aa:8d:e8:76:31:62:2a:7c:fe:
                    98:7a:f3:40:cb:01:d0:8f:9e:41:83:19:83:a3:ad:
                    4a:48:97:fb:ad:67:bc:ae:be:69:f6:96:06:cc:2b:
                    bf:45:1b:6e:a5:bd:7b:7c:3f:e2:ed:3f:b2:c0:34:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:11:3E:EF:A8:EB:B1:F9:2F:5A:BB:C3:F5:72:46:BE:8D:54:CA:A7
            X509v3 Authority Key Identifier:
                keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:db:61:57:43:7c:6e:d2:b0:74:0b:fd:29:d6:98:e1:9d:b0:
         f8:72:c0:b9:50:d4:ef:37:72:c4:20:78:7b:b5:a0:2d:e1:5b:
         1b:66:b3:a0:b8:00:4e:5a:b3:40:a6:2a:ac:0f:7d:25:33:2d:
         46:d9:c1:56:6a:b8:87:57:cb:88:cf:43:e2:75:5d:ef:05:70:
         f8:3d:78:64:3a:d0:ed:1f:d2:33:a0:32:71:cc:d9:0b:66:01:
         85:15:66:d7:df:d5:4a:ed:f5:68:0a:43:e9:05:47:09:96:7e:
         bf:c5:45:b4:fe:61:a0:bc:dc:45:bd:5e:ba:e7:ec:d4:7b:68:
         5c:74:16:a0:47:54:e2:9c:39:2e:43:ba:b2:f6:87:f2:45:d9:
         7d:3f:53:4a:10:82:c3:7f:c2:cc:21:c2:3d:39:e3:bc:78:dd:
         d2:10:ae:6d:85:87:88:ba:d4:25:cc:fe:44:84:7d:3d:fd:f3:
         cf:ad:46:46:2b:a9:45:00:d6:2f:74:aa:a8:6d:e2:37:93:2d:
         65:dc:2c:f3:97:c8:02:76:6c:b5:9a:b0:80:f0:44:4e:81:34:
         75:18:8e:a2:67:4c:4a:94:16:bb:98:da:09:d6:9a:c1:68:fa:
         0a:b0:2b:52:73:9d:c5:3e:0d:da:1e:b9:98:86:91:4a:21:ee:
         d3:0a:4a:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4doJuRZ5QDVHmjxsiiNNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMTEwYWNjZTMzYWM4NTAxMWNhOGMyMmQyMDAxNjY2ZTQ1
YjkzNzcwHhcNMjYwMTI2MDQwMTE0WhcNMjYwMTI3MDQwMTE0WjAzMTEwLwYDVQQD
EyhmNDExM2VlZmE4ZWJiMWY5MmY1YWJiYzNmNTcyNDZiZThkNTRjYWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OU5YeDCJ8IAtgOjm5YeCYWBhvrJ
R+0Oj+X1S9Kg9pXCLqAta42ucBgumSJ6FXkCwEZMBXrIB1uSKmkA1FCPViBKT/ZK
De7hxRdIVZA5l3N22gcScXzn80PzOxZp7rlzAeaeA1qg/iQDEzZ42EB8mDF55rHr
ZmBF7hpLH2MteQrTBtb53Cnz94MudPWQgSNB5pYHIjZFPKIWSIJ69bMingXADA4h
R/hWfCFBPcUyp+es8idywjwlsf7mCDzotWflCi/8d9kMbnmqjeh2MWIqfP6YevNA
ywHQj55BgxmDo61KSJf7rWe8rr5p9pYGzCu/RRtupb17fD/i7T+ywDQOLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQRPu+o67H5L1q7w/VyRr6NVMqnMB8GA1UdIwQY
MBaAFOIRCszjOshQEcqMItIAFmbkW5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEt
ZDMzZjA4ZjNhNDhkLzEvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEtZDMzZjA4ZjNhNDhk
LzEvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtthV0N8
btKwdAv9KdaY4Z2w+HLAuVDU7zdyxCB4e7WgLeFbG2azoLgATlqzQKYqrA99JTMt
RtnBVmq4h1fLiM9D4nVd7wVw+D14ZDrQ7R/SM6AycczZC2YBhRVm19/VSu31aApD
6QVHCZZ+v8VFtP5hoLzcRb1euufs1HtoXHQWoEdU4pw5LkO6svaH8kXZfT9TShCC
w3/CzCHCPTnjvHjd0hCubYWHiLrUJcz+RIR9Pf3zz61GRiupRQDWL3SqqG3iN5Mt
Zdws85fIAnZstZqwgPBEToE0dRiOomdMSpQWu5jaCdaawWj6CrArUnOdxT4N2h65
mIaRSiHu0wpKmQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:01:58 2026 by rpki-client