This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
File:                     YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft (raw, json)
Hash identifier:          wwLuuyRRB60tgDkFPu8jD2MppYgp8PGqSHB1aLK/AMU=
Subject key identifier:   49:02:DF:17:2F:E0:94:36:7C:FE:6F:61:62:75:9F:49:0E:16:9E:2C
Authority key identifier: 60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
Certificate issuer:       /CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Certificate serial:       019C43C6B1715BD2BCDDAB9B9730B6EF6F41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 19:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:20 +0000
Files and hashes:         1: YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl (hash: t5oUYwvKE5g246rGrqB0/b4kekUMEgAcGFdqhyTmo+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:b1:71:5b:d2:bc:dd:ab:9b:97:30:b6:ef:6f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
        Validity
            Not Before: Feb  9 19:00:20 2026 GMT
            Not After : Feb 10 19:00:20 2026 GMT
        Subject: CN=4902df172fe094367cfe6f6162759f490e169e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:ad:eb:65:3d:8d:ef:e7:5a:f1:00:2c:b2:
                    fb:20:c2:e9:6b:42:b6:be:9d:c5:f4:3f:39:f0:b3:
                    d7:29:c6:7e:53:e3:77:90:d1:9c:f3:3e:5e:46:6d:
                    42:5d:bc:bd:bb:1f:f7:9f:34:c6:9d:27:75:7e:02:
                    65:b8:50:e9:76:f1:c4:1a:c1:81:b4:7b:90:e2:c1:
                    57:3b:28:b8:3c:03:5a:89:fd:fa:b4:9b:c7:b6:f6:
                    c2:0e:19:02:4c:05:8b:f3:72:51:b9:cb:79:7f:7f:
                    92:88:f4:5a:c3:52:d8:a1:74:89:5c:ef:ab:df:a3:
                    f5:b1:bc:4d:61:55:93:ef:af:f5:84:48:4b:e9:3d:
                    7e:99:01:49:0d:65:72:b9:1b:af:4e:80:56:9f:bd:
                    9e:92:19:3a:86:ad:89:4c:c4:ac:7d:4a:2e:5b:e9:
                    dd:5d:75:97:a9:5d:6c:d9:7e:28:58:5e:35:48:25:
                    2d:ca:12:77:e1:ab:1d:90:b9:f9:14:bc:52:16:ea:
                    87:c0:ed:d0:17:36:f3:3a:84:78:f3:d8:39:e2:eb:
                    65:a6:ee:c6:82:24:33:e6:01:57:49:d7:5d:de:74:
                    01:96:a2:5d:2c:a9:06:6b:c5:a2:c2:f9:0a:6a:d6:
                    9e:2d:d8:60:74:49:bf:65:de:8b:00:38:80:2b:2c:
                    8b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:02:DF:17:2F:E0:94:36:7C:FE:6F:61:62:75:9F:49:0E:16:9E:2C
            X509v3 Authority Key Identifier:
                keyid:60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5f:cb:01:56:85:60:30:33:ea:db:8e:19:eb:55:37:64:ab:
         ec:9b:ab:6e:75:65:9d:99:eb:36:59:1f:a1:85:b2:09:25:65:
         cb:7d:da:be:b1:b5:a6:d3:16:2f:73:47:01:57:45:d2:d1:25:
         13:ee:52:ec:49:83:2f:e2:f8:e0:df:f3:60:11:69:6a:7c:65:
         c8:e6:91:22:b6:ee:56:78:91:36:b0:f4:f9:fc:63:c6:5b:7d:
         a9:ad:04:20:8f:47:c1:41:a1:31:84:f4:77:d6:c4:21:d5:c0:
         46:8d:8b:b8:4a:59:c1:5f:98:99:f9:a6:e7:70:da:30:b9:fc:
         01:de:82:7a:73:ee:a9:c2:68:d2:8f:85:5f:70:9a:bd:a5:c8:
         b2:57:0d:4d:33:47:7f:de:c5:fb:96:1f:ee:e7:3e:59:57:be:
         0b:48:93:f1:be:80:fc:54:fb:4d:d4:0d:f2:10:86:c5:92:37:
         c0:44:10:18:68:5b:96:fc:f1:20:85:47:92:93:04:f8:3c:cf:
         58:10:b1:2a:70:07:84:a4:3c:8b:15:b4:d4:ef:7a:2e:6c:aa:
         56:b3:10:6b:3f:ae:78:fa:78:61:8b:e4:2b:cd:3b:40:3a:69:
         3c:b6:4b:71:c5:76:2c:b3:af:d3:50:db:49:c4:e2:91:04:1c:
         78:09:c6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:51 2026 by rpki-client