This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
File:                     Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json)
Hash identifier:          DtPuIOEU4Z7yZjXQGiyV1Og6HLlumP13ToT8tB5gJCc=
Subject key identifier:   EC:5E:39:6E:C2:87:75:50:E2:87:B0:1D:00:49:46:08:DC:41:28:8D
Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
Certificate issuer:       /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Certificate serial:       019C41A182EEFDCF21E84DE9B76A8B0918E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 09:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:29 +0000
Files and hashes:         1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: YR6NgkzbkwLQJ1CYMifbTGEW3F921WrYJTvleeJIbkE=)
                          2: _CtWoZatOsYRtZxdTJ5TMLTNjw8.roa (hash: LYseNoTvnl/Pp/BBmHZ1FTB2FkR4cL5AND422CQVg9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:82:ee:fd:cf:21:e8:4d:e9:b7:6a:8b:09:18:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
        Validity
            Not Before: Feb  9 09:00:29 2026 GMT
            Not After : Feb 10 09:00:29 2026 GMT
        Subject: CN=ec5e396ec2877550e287b01d00494608dc41288d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:b2:e0:14:a4:ec:70:3e:b9:f7:f7:54:ac:
                    d3:17:49:86:89:3f:00:36:43:f8:a1:12:d3:b2:4b:
                    c3:63:92:27:26:fb:f7:8c:35:9a:51:33:cf:fe:f1:
                    2a:cd:5d:fa:bf:c5:e6:76:53:ee:87:40:c9:c7:b4:
                    37:81:b0:d3:6a:2f:47:93:8e:88:b1:71:64:58:b3:
                    d3:97:74:6b:a9:8d:68:3e:cd:20:41:ee:6e:95:b0:
                    84:1b:1c:e8:4f:c8:fa:50:e0:81:60:68:9a:26:00:
                    4b:80:7f:9b:79:80:4b:0d:e9:cc:09:f0:5e:b4:8d:
                    8c:46:ac:ce:f2:5a:94:a3:f3:89:58:c0:e8:80:f9:
                    28:92:4d:6d:00:6e:a3:8d:de:ac:f0:d5:92:a7:9e:
                    94:a8:64:ed:49:16:76:ae:d7:9c:39:1c:d4:f4:43:
                    bd:11:f7:0b:2f:ec:ce:c0:f1:82:7e:fa:ac:a3:03:
                    0d:90:19:43:9b:9f:ca:74:03:f9:e2:e8:e6:d7:00:
                    dd:d3:6d:a8:16:f7:db:cb:5e:37:c0:37:0e:ef:40:
                    22:bf:bf:16:56:62:c8:b1:92:a0:65:08:c2:73:9b:
                    6f:20:6d:7a:8e:14:78:14:13:7a:27:69:67:3b:c3:
                    bd:b2:53:3c:4f:2f:60:64:e3:71:91:f1:85:59:d8:
                    ca:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5E:39:6E:C2:87:75:50:E2:87:B0:1D:00:49:46:08:DC:41:28:8D
            X509v3 Authority Key Identifier:
                keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f7:0d:e8:2d:91:16:ca:39:c2:fb:2c:1d:2d:b0:d6:92:3a:
         49:5e:1c:88:e5:8e:a3:41:66:76:68:ea:cd:13:33:ed:cf:89:
         12:59:8d:4b:76:79:04:2f:d4:94:f5:75:b1:d7:7a:cf:00:bf:
         1e:a1:07:79:86:74:24:57:3f:84:cd:21:02:8c:0c:df:76:de:
         08:cf:48:3d:f9:58:2f:c7:db:a6:6c:90:29:9a:95:26:22:6b:
         6a:e1:07:20:69:9f:0a:24:25:11:c7:45:f3:7e:b7:a8:62:4c:
         91:ea:a4:cc:96:e3:43:58:b1:72:0e:4e:15:6e:1a:28:12:95:
         70:33:ca:b0:78:3b:ac:44:8a:33:e5:92:6b:2c:c6:6e:ee:55:
         7f:89:64:f3:6c:ca:c8:07:b6:9c:61:58:3a:0a:0e:49:43:81:
         9d:d3:c6:a5:fb:7c:1d:4c:3b:83:44:b8:05:2e:ab:11:59:9e:
         1a:af:7c:56:4c:4f:bd:70:95:a4:e0:b7:42:86:9f:d9:a2:f6:
         05:f7:d1:c3:2d:cc:33:97:86:a1:15:8a:8b:5d:4c:5a:2b:b3:
         f3:6e:64:f8:69:05:c6:11:04:a6:a1:19:46:df:df:4d:5b:98:
         84:cf:12:22:a5:3d:ce:c8:03:e4:e7:54:e1:66:33:13:b9:f0:
         68:31:7c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:42 2026 by rpki-client