This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
File:                     Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft (raw, json)
Hash identifier:          AzCW/2VVtD/6GkfibuvENU+oB/UhqyRUri2+aRK89aA=
Subject key identifier:   F4:3A:83:7B:E1:EC:D8:BB:F9:BE:84:00:80:5F:BD:5A:38:0E:F6:30
Authority key identifier: 4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC
Certificate issuer:       /CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
Certificate serial:       019C41D89A2FD87625FC392FDCF9A7F51000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 10:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:40 +0000
Files and hashes:         1: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl (hash: nbMHhuxJR2FEbKbwIOfffGFZcVn7QJIZfUzg3cHwNF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:9a:2f:d8:76:25:fc:39:2f:dc:f9:a7:f5:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
        Validity
            Not Before: Feb  9 10:00:40 2026 GMT
            Not After : Feb 10 10:00:40 2026 GMT
        Subject: CN=f43a837be1ecd8bbf9be8400805fbd5a380ef630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cf:86:2c:98:64:03:8c:84:0a:67:6e:a6:cc:
                    5e:c1:57:ff:87:19:5d:33:8a:a7:2e:97:4d:86:f4:
                    34:3b:33:ec:da:11:08:2b:84:18:bf:13:e9:d7:dd:
                    2d:e7:9f:a2:6b:02:3f:0b:17:90:64:a2:40:dd:68:
                    01:07:13:ab:68:1a:ff:ea:98:09:d9:92:58:3d:5d:
                    83:a6:a5:c4:d7:6c:fd:c2:d0:8f:84:07:8d:78:82:
                    91:85:91:f7:e5:b0:2a:bf:ad:c1:5c:59:0e:c6:ea:
                    da:8a:53:ec:ec:6d:07:ea:04:c1:55:71:4b:d4:85:
                    56:b6:29:61:97:76:fb:19:99:fc:09:ef:84:8a:38:
                    31:65:3c:21:b9:b6:a4:b8:3b:0a:0a:7b:d5:bb:12:
                    57:24:ed:38:f7:ab:2e:23:88:2e:a2:c8:cd:db:39:
                    2a:90:72:19:a0:3d:fd:3e:64:d6:23:aa:7d:60:8c:
                    c9:9b:cb:56:32:43:24:63:9a:19:c9:8c:7f:a6:93:
                    61:1c:5c:61:1c:50:fd:3e:46:b2:f8:78:0e:c0:53:
                    0e:95:54:f9:dc:4b:08:e3:18:6b:a3:f8:ba:a3:12:
                    10:68:5f:16:d4:a6:9e:50:d9:9b:7f:97:2f:b5:e5:
                    d3:48:2d:0e:a5:1d:ed:8a:db:49:bc:78:6f:57:5d:
                    fc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3A:83:7B:E1:EC:D8:BB:F9:BE:84:00:80:5F:BD:5A:38:0E:F6:30
            X509v3 Authority Key Identifier:
                keyid:4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6d:59:19:74:90:a5:e8:c9:df:c7:65:2d:32:c5:f9:e0:b0:
         d1:bd:3d:11:37:dd:65:33:66:12:8c:62:2c:3f:63:d8:4b:9d:
         35:11:5a:ef:4f:07:2e:b9:f4:69:ad:a5:38:aa:fa:98:f4:c9:
         00:16:ba:85:67:18:b4:cf:69:96:da:2c:f1:26:eb:da:5f:2d:
         5c:32:8c:bb:7b:79:ff:06:21:b8:45:7e:93:64:4c:c1:27:2f:
         4d:44:f3:c8:2d:80:f4:38:fa:65:de:4f:10:de:8a:66:a9:b4:
         c2:a1:84:34:4f:5e:a1:f8:bf:77:78:03:98:f5:d0:4d:b2:50:
         6b:19:48:d9:7b:e6:7c:7b:21:b5:93:b0:4e:8f:15:be:4d:3f:
         fc:2d:fb:b1:9b:d0:56:4e:2a:8b:15:4f:ef:bf:ef:ff:f9:90:
         73:e1:8c:f9:be:8f:7d:ea:53:97:9d:40:fc:22:20:06:3e:bd:
         f3:f9:c1:69:8e:a7:09:e1:ba:73:dc:26:89:39:71:5f:96:bf:
         8e:4a:d6:eb:be:ee:37:95:1f:65:d8:98:b0:79:a4:6a:c7:d8:
         f6:b8:df:90:a6:fb:24:85:8b:1a:e6:fd:fc:9f:9b:62:d3:14:
         d3:44:e3:29:4a:c1:b5:a3:0d:a0:36:fd:04:9e:62:99:eb:bc:
         78:a4:85:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:28 2026 by rpki-client