This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File:                     4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier:          D8Pd+3V0uAYwsJYGFexI3tMI/GDjdk5uoqP5siQXJ+k=
Subject key identifier:   21:28:C3:4F:E0:CC:49:0F:81:20:1D:27:7D:B1:85:81:BE:66:2C:B2
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer:       /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial:       019C41347A713C00FA761B57932DD0CDAB4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 07:01:24 +0000
Manifest this update:     Mon 09 Feb 2026 07:01:24 +0000
Manifest next update:     Tue 10 Feb 2026 07:01:24 +0000
Files and hashes:         1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: PPUQjuzdridob7/Jj5gqi983sAtayoD/mE0nHlKs1to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:7a:71:3c:00:fa:76:1b:57:93:2d:d0:cd:ab:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
        Validity
            Not Before: Feb  9 07:01:24 2026 GMT
            Not After : Feb 10 07:01:24 2026 GMT
        Subject: CN=2128c34fe0cc490f81201d277db18581be662cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:ad:94:3f:c6:79:a3:7b:6b:78:4b:73:a2:
                    01:af:2b:c1:3d:bc:9b:76:f1:34:ea:b2:31:f7:d1:
                    41:a5:5a:7e:4c:ca:cb:3f:bb:16:c8:2d:7a:6e:ce:
                    04:bc:f8:d6:7f:56:44:12:21:58:eb:16:35:7a:08:
                    1a:ac:3a:96:99:70:7d:c9:97:b8:03:69:cb:ce:c2:
                    e0:c2:70:b0:ad:f3:e5:c7:47:ce:71:c3:14:2e:84:
                    e1:d2:b4:7d:96:86:dc:d5:24:5e:8b:b7:89:2f:8a:
                    b5:a0:e7:43:81:ab:71:de:49:1a:37:91:b3:e2:0a:
                    ae:4c:bf:a8:95:de:99:a0:a4:05:2e:13:20:eb:d4:
                    35:0c:59:08:b2:9b:28:fc:ea:98:c1:8a:90:91:e6:
                    0a:82:22:8a:24:ca:81:9b:fc:5a:2e:5a:8f:47:f0:
                    87:67:e6:70:12:b9:9a:4f:5d:4c:91:76:8d:ee:31:
                    21:08:dd:6e:83:e8:c5:05:19:eb:13:37:3d:bb:cc:
                    ee:6f:0d:81:d4:9a:81:8d:19:a3:29:f1:f2:f6:ce:
                    17:4c:7e:57:4a:9a:6c:6a:f3:d5:cb:73:92:8a:75:
                    60:82:44:e8:aa:a9:d7:16:45:cd:3d:c4:32:ef:cd:
                    e3:d6:5a:f7:08:a4:dc:cf:a2:a2:f2:e9:a6:31:87:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:28:C3:4F:E0:CC:49:0F:81:20:1D:27:7D:B1:85:81:BE:66:2C:B2
            X509v3 Authority Key Identifier:
                keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:41:63:0b:d8:76:74:e1:7c:a9:df:89:83:e7:a1:21:b0:b9:
         73:5a:e5:46:b3:07:54:87:59:6b:de:cd:ac:0b:48:99:60:66:
         04:c0:b8:80:fa:cf:86:b5:a8:c3:39:ef:13:10:7e:81:b2:33:
         01:6b:38:03:1c:05:06:fc:ce:a6:a8:1d:9a:ad:6b:c2:9b:08:
         dd:9d:4b:98:14:22:df:3a:b9:f1:7e:63:78:81:45:11:f4:63:
         ea:04:c1:5d:96:b1:be:06:40:68:29:d8:37:92:0c:2f:c6:21:
         cf:c0:03:e7:8b:d6:14:24:20:c3:64:81:ec:20:99:28:c4:c8:
         98:ce:6e:e9:c1:47:70:04:35:38:6a:ea:af:d0:19:9c:c6:56:
         d2:40:a4:92:a5:7f:c3:85:d5:93:b2:9d:c9:e9:35:3f:9f:63:
         de:eb:63:09:ef:62:09:40:6c:f9:3d:17:cd:9e:12:53:30:9a:
         57:dd:a1:65:76:b7:06:7a:0b:51:c2:31:7e:e8:7b:2b:03:02:
         d6:5a:6d:38:c3:55:3f:c5:ab:28:cb:1d:c2:11:54:05:7f:d0:
         91:3c:17:6d:48:57:19:c0:a5:e0:cb:ad:6a:fb:2c:ae:83:a7:
         26:df:0b:0f:6b:37:d6:c5:9f:b1:46:0a:50:29:00:79:68:5c:
         1c:58:73:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:29 2026 by rpki-client