This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File:                     4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier:          3/sHfugZPoPF+LVNt7q0qIj71sWbtoBpX7Kv0htWCb8=
Subject key identifier:   AC:5D:F8:65:29:55:DA:16:57:F2:24:25:36:AE:FB:3A:66:BF:C4:58
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer:       /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial:       019BF68840ADA892A010898E49C849F1D8D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number:          0785
Signing time:             Sun 25 Jan 2026 19:01:23 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:23 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:23 +0000
Files and hashes:         1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: /65R2BPCKT8ncUPyoB4lnHQGMmSCRJUx2ahqPVxVrXo=)
                          2: e8iBHRW1-cgbS8BVp39SAyWFIaQ.roa (hash: E5LC66hyjT+BDof0H0AqbFL6eWK7at8besZsrNd8iUs=)
                          3: uBIxs7ssxXDGyk8SQNxkeydPi80.roa (hash: EJE4RSVi+Vk5YmcZI9DMOpSqKh06AU4ky+hWC3DDJTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:88:40:ad:a8:92:a0:10:89:8e:49:c8:49:f1:d8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
        Validity
            Not Before: Jan 25 19:01:23 2026 GMT
            Not After : Jan 26 19:01:23 2026 GMT
        Subject: CN=ac5df8652955da1657f2242536aefb3a66bfc458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7c:76:7a:4f:74:13:f5:f5:ab:9d:d7:ce:63:
                    93:5f:25:ec:3c:dc:78:eb:47:67:10:ae:31:f8:58:
                    f0:60:7e:31:30:1d:35:ec:e5:f2:48:9f:b5:cf:b7:
                    32:e4:2f:65:37:79:ea:69:d2:0e:78:fc:2d:12:18:
                    02:6a:fb:0b:60:bb:47:8c:be:28:cf:d4:3f:db:24:
                    af:46:d1:ef:c2:a5:82:fb:3f:90:0e:41:38:d5:e9:
                    4d:07:4f:5b:5d:95:d7:0e:1b:10:7f:83:a7:85:af:
                    d8:d2:33:c1:c2:bf:41:ee:2c:f9:39:4d:a4:1a:45:
                    ad:77:64:7a:68:26:c5:92:96:43:d8:95:38:10:19:
                    8a:be:62:b9:f9:57:b2:4c:82:cf:24:c0:64:d3:a0:
                    a5:6d:48:ba:8d:f5:e1:84:fc:b3:dd:a0:05:35:19:
                    e5:4b:be:60:b7:5a:e2:67:df:f0:b4:fc:64:d0:f7:
                    12:83:ae:e7:a0:80:57:02:8c:27:08:9e:13:f0:a3:
                    3c:f8:8c:a7:83:ca:56:c5:c4:c7:28:20:0f:f5:9d:
                    e2:56:fd:cf:e7:b3:35:7a:88:0d:ad:41:83:8b:f8:
                    0c:3f:0a:94:e6:1e:ac:9e:6e:30:a9:d8:ba:d7:87:
                    22:2b:89:c6:0f:e4:98:f7:cb:6c:f5:3e:30:7d:51:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5D:F8:65:29:55:DA:16:57:F2:24:25:36:AE:FB:3A:66:BF:C4:58
            X509v3 Authority Key Identifier:
                keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d8:a3:e6:23:53:cc:48:15:46:e9:8b:fb:e9:6f:e8:fb:b0:
         b2:c6:9a:da:30:7e:3a:a4:12:2f:76:44:76:ee:a0:b1:58:0e:
         57:d0:95:ef:24:cb:c2:f1:92:9d:e5:a3:3b:f6:27:fd:05:27:
         76:13:31:1a:dc:84:c8:5b:5d:37:60:3a:cb:bb:93:8c:ba:63:
         f0:44:e1:fb:3e:fe:61:bf:49:1c:3a:e2:a8:e8:d3:16:a4:6b:
         aa:e9:c2:9d:28:c1:e3:30:44:df:e8:24:ac:b3:1f:db:d9:c2:
         09:37:0f:1b:16:ea:89:b7:21:db:a5:49:cc:42:cd:bf:34:be:
         6e:dd:58:03:3f:99:f2:d0:c8:fb:a5:38:f2:47:11:1a:8e:0d:
         67:20:d5:91:84:bb:d3:2f:76:be:9e:3d:01:ec:3f:51:c8:16:
         c6:77:92:b2:55:f1:dd:fa:35:61:1b:1c:89:3f:23:3f:ed:20:
         64:61:58:8b:b3:df:c6:c1:7f:47:55:35:3e:fd:56:cc:6a:b2:
         7a:2c:fc:b8:05:8a:ab:36:a8:f5:0f:cf:e8:c6:58:e4:0e:f6:
         bf:34:6a:81:48:82:cb:a1:81:9d:fb:6d:99:83:a9:1a:78:88:
         75:6d:ce:a9:77:3a:80:a4:fa:35:26:a7:34:a6:81:39:b6:04:
         fd:f0:a5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:45:47 2026 by rpki-client