This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
File:                     pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft (raw, json)
Hash identifier:          WNya3NNyGZN0lG6SmOWWdkCyUn4pr4JyFRo8vzYKtIE=
Subject key identifier:   17:18:6C:F1:E2:AD:73:C8:3E:DF:EF:3A:24:88:3B:9D:A7:18:3C:9D
Authority key identifier: A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
Certificate issuer:       /CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Certificate serial:       019C432279B198032FCB5692A8D3201BD57D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 16:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:58 +0000
Files and hashes:         1: pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl (hash: dm0eE+AfSAaeS3xpWMLk/LItAkZ6HH5NpwwVozMXiT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:79:b1:98:03:2f:cb:56:92:a8:d3:20:1b:d5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
        Validity
            Not Before: Feb  9 16:00:58 2026 GMT
            Not After : Feb 10 16:00:58 2026 GMT
        Subject: CN=17186cf1e2ad73c83edfef3a24883b9da7183c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:88:26:dd:10:2b:0a:83:47:cb:d9:5b:4c:
                    d4:80:00:f0:6d:86:e2:fc:98:78:9f:32:ef:ca:0c:
                    75:c3:2a:a0:fb:be:3a:d9:48:01:66:4c:fb:c3:cc:
                    e9:6f:3e:59:e1:b5:3d:a5:1c:e7:1e:60:ff:1b:83:
                    37:94:9b:04:b4:be:75:e8:07:ce:92:8a:e7:e2:66:
                    99:b5:de:57:ac:0d:46:65:b9:35:7b:5a:5d:5a:d7:
                    6a:92:ab:9b:98:28:c4:fb:8c:f0:2a:5e:dc:66:02:
                    43:b6:6d:f4:4c:d9:30:e8:d6:33:21:47:d9:54:92:
                    3d:84:30:58:7d:2e:61:38:7c:50:ae:56:bf:52:c2:
                    03:b2:da:98:68:28:e3:2f:1f:ad:61:30:63:a3:0d:
                    47:36:e5:aa:3f:77:c8:b4:39:b9:20:1c:c2:4a:00:
                    ff:81:12:bf:88:b4:1a:3b:42:75:cf:4f:8e:22:ee:
                    35:d8:e9:93:b5:b7:7e:17:90:27:73:15:1d:55:58:
                    b6:a5:ae:63:6d:e8:c7:ae:7b:7e:39:1c:5f:bd:c0:
                    b9:b5:a8:a0:f1:b1:cd:3e:be:61:2c:71:e4:9e:22:
                    c9:0f:de:c4:af:1e:bb:2e:68:d7:35:4c:4f:b3:97:
                    ed:d6:c1:75:c8:dd:0f:09:a3:0a:b5:32:56:73:d9:
                    7f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:18:6C:F1:E2:AD:73:C8:3E:DF:EF:3A:24:88:3B:9D:A7:18:3C:9D
            X509v3 Authority Key Identifier:
                keyid:A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:87:b2:14:04:ec:3f:fb:e6:f5:a8:8f:f2:8a:01:29:62:0c:
         78:48:6f:6c:49:b5:61:11:b9:d9:99:9e:16:27:87:e0:ec:82:
         7e:ac:56:28:13:26:30:11:08:b5:bd:9f:59:64:ac:c7:e1:ac:
         db:db:84:76:6e:30:4f:36:30:89:d3:79:b0:90:5f:7f:5c:c3:
         e9:8a:0f:67:f7:bd:47:77:e7:87:b4:c0:75:36:cf:5f:f5:32:
         d1:9e:bf:d5:91:0d:17:f5:ee:33:00:18:33:4b:77:59:46:cb:
         36:e9:e9:57:c7:3b:99:c0:b8:8e:0d:c6:dc:4b:d4:8f:60:5a:
         ce:c8:5a:98:00:ed:46:11:32:64:dd:4a:ee:a3:31:63:d1:16:
         1a:9a:e8:f4:87:4b:29:04:38:37:8c:37:64:cb:c0:5d:91:a8:
         e6:f4:c5:d0:2c:99:09:b9:6b:7c:3d:a8:1f:d1:58:36:42:dd:
         f4:13:d7:d7:b4:3f:6e:58:e4:52:c9:a9:4c:e1:14:89:e1:60:
         6c:09:a1:52:be:42:04:41:de:72:5f:e2:78:36:03:e0:c2:09:
         11:2f:2a:d9:e2:f8:c7:0f:f5:7b:8f:8b:85:d4:2b:ec:17:7c:
         69:f6:5b:85:5e:07:2c:b5:b9:a9:99:95:9e:0a:68:da:a4:c5:
         ac:29:d1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:41 2026 by rpki-client