This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
File:                     SwzK47EZgtZx464payKbCvw1mwc.mft (raw, json)
Hash identifier:          C679I+/Ht/t+TEUennZZ6/IOP25PZ1otF5jrS/qnR9A=
Subject key identifier:   7C:6E:EC:B7:18:9C:B4:C9:6E:43:71:2C:56:A7:2E:E7:64:93:B0:CA
Authority key identifier: 4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07
Certificate issuer:       /CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
Certificate serial:       019C427D416988200A647E1144D0F512AA87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
Manifest number:          1208
Signing time:             Mon 09 Feb 2026 13:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:30 +0000
Files and hashes:         1: SwzK47EZgtZx464payKbCvw1mwc.crl (hash: g99zv5jTU2AJPvUvJqr1JUk9lk5uBjQeQtxJrvGr3AY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:41:69:88:20:0a:64:7e:11:44:d0:f5:12:aa:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
        Validity
            Not Before: Feb  9 13:00:30 2026 GMT
            Not After : Feb 10 13:00:30 2026 GMT
        Subject: CN=7c6eecb7189cb4c96e43712c56a72ee76493b0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:56:9a:56:f6:a2:c2:d0:a0:23:cf:5a:0e:17:
                    31:05:bf:dd:23:6f:6d:35:b4:6e:9a:f9:47:ed:e8:
                    80:fd:ed:bb:e0:50:ff:26:fe:91:41:47:b8:2c:39:
                    5d:b5:18:fd:fc:68:fb:97:09:3e:1b:09:83:2f:0f:
                    9f:cb:97:7d:0d:00:d7:bd:34:ea:73:fd:ac:78:40:
                    af:b7:8d:4c:15:11:7f:75:82:4d:28:a0:b0:ff:1d:
                    a3:4d:f1:ee:9a:9a:84:68:8f:3e:98:e9:91:bc:55:
                    ae:b3:6f:8d:35:d5:45:63:df:6f:2f:a9:ed:85:6a:
                    fb:b2:9b:7f:97:5b:cc:70:77:99:2a:8f:93:14:f5:
                    80:76:87:c9:bc:72:e2:0d:74:43:3b:6b:77:d9:89:
                    46:5b:d9:a8:21:8b:73:81:c9:5e:30:65:35:63:e7:
                    ec:72:91:68:0e:7c:c0:f4:7a:23:55:0b:3d:0e:7b:
                    95:28:44:a4:bf:6a:c5:1b:b5:02:7f:e6:34:a0:cb:
                    31:a4:8d:74:a9:57:59:2c:5c:aa:2a:82:da:56:20:
                    b8:7a:f4:fd:36:67:e9:90:4a:1b:9c:34:d2:9e:34:
                    48:65:a4:93:f1:84:cb:ec:20:3d:c3:73:96:b5:33:
                    36:c3:78:eb:39:80:ab:f8:b7:14:a1:3b:8f:43:ba:
                    5b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6E:EC:B7:18:9C:B4:C9:6E:43:71:2C:56:A7:2E:E7:64:93:B0:CA
            X509v3 Authority Key Identifier:
                keyid:4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e7:99:3b:ec:9a:e0:9d:8d:d6:f7:c3:48:52:37:dc:9e:be:
         4f:67:be:5e:97:5f:60:2c:80:d2:58:cc:13:f8:85:49:c9:6d:
         1d:16:f5:94:96:a1:dd:20:07:41:ca:bc:63:19:0d:49:34:ad:
         f0:21:56:21:58:2f:c2:4c:39:7a:e3:c2:b0:6a:aa:3b:63:16:
         b4:41:b8:23:bb:ee:48:ba:cf:03:b3:c6:23:65:28:e1:3a:8a:
         48:a6:27:9e:7b:9e:aa:bd:66:46:45:d7:2d:4d:70:18:80:f4:
         e1:b0:7c:3b:3a:4c:30:6b:79:ac:02:53:cd:c9:7e:3c:7b:46:
         56:b3:dc:fa:fc:f7:fb:28:4c:1a:b9:4d:57:7c:14:2d:cd:b1:
         7c:94:75:8e:54:7e:05:ca:df:e6:69:56:07:90:66:d6:69:2e:
         70:de:47:99:21:31:67:6f:f5:f2:7e:7a:66:94:69:97:68:b0:
         0a:b4:92:5e:1f:77:e2:4d:ef:ca:3e:b4:49:33:8f:60:54:92:
         d6:52:dd:36:94:1b:af:a2:6a:36:4c:68:ec:16:82:92:6b:7e:
         28:25:96:f1:11:26:f3:c7:c2:72:2b:3c:6b:5e:f0:1a:5e:05:
         a9:ea:93:71:20:77:46:b4:30:14:05:27:53:d0:d2:cc:65:e5:
         9d:ba:d4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:31 2026 by rpki-client