This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File:                     4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier:          HtAsCcAcT9nnA5yDRCrVqh4YJfF85tqO8V85+V2G1gk=
Subject key identifier:   4B:74:9E:E4:9D:79:F8:90:33:C9:BC:13:C4:B1:16:7B:66:C0:FD:1D
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer:       /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial:       019C41A1C76C36C750FDE51AE75843E15591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number:          180B
Signing time:             Mon 09 Feb 2026 09:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:46 +0000
Files and hashes:         1: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: NmeLtR+iemKV7XtexA/kwpprljysuiH5mGdkvAcj6wE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:c7:6c:36:c7:50:fd:e5:1a:e7:58:43:e1:55:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
        Validity
            Not Before: Feb  9 09:00:46 2026 GMT
            Not After : Feb 10 09:00:46 2026 GMT
        Subject: CN=4b749ee49d79f89033c9bc13c4b1167b66c0fd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:fd:bd:80:17:61:14:7c:42:6e:6f:8c:ac:
                    b2:1a:17:c5:25:ba:d2:1c:b0:86:b1:96:d1:32:d6:
                    bd:c4:6c:61:df:f9:91:12:c7:83:ce:65:81:61:41:
                    a6:e9:ec:b1:60:7c:07:db:71:0f:34:37:21:8e:ca:
                    7e:86:14:d7:9d:b1:46:1f:38:60:9a:ae:bc:08:ff:
                    d0:30:31:a6:cb:4d:74:42:c7:51:b7:23:75:98:82:
                    7c:f9:21:92:eb:de:35:b4:5a:8e:5b:48:ef:4f:2e:
                    fd:eb:dc:4b:fa:91:0d:64:59:8d:0d:2e:6a:7b:23:
                    40:4b:72:fa:0c:cb:6c:56:fa:79:98:ac:20:db:fe:
                    c0:6f:ac:fd:ed:14:b2:7b:52:f4:64:d8:ad:c6:04:
                    25:33:f9:f3:27:bf:c8:91:d0:3e:49:d9:a9:c2:82:
                    f6:87:45:f9:c2:1e:84:5e:5c:d2:e2:fc:c5:4d:78:
                    03:9f:b3:cb:f3:ff:9c:5f:53:98:b1:04:09:38:ce:
                    d1:f8:5c:6e:d4:03:3d:2e:f4:6d:06:59:dc:56:9b:
                    a4:59:48:8c:19:dd:d0:4e:47:78:87:c6:cc:c8:75:
                    ce:62:a9:8c:c9:f0:53:c7:e9:03:ce:fc:64:7d:09:
                    66:a4:31:af:5b:9c:a7:cf:02:63:da:8b:af:f8:9a:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:74:9E:E4:9D:79:F8:90:33:C9:BC:13:C4:B1:16:7B:66:C0:FD:1D
            X509v3 Authority Key Identifier:
                keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e8:1f:da:a7:b0:a8:0e:eb:46:a5:7f:c8:a3:b1:98:ce:91:
         f5:e1:9a:40:bf:75:b5:d0:20:0b:d9:0b:d9:c6:b7:1d:e6:75:
         ba:bf:90:ca:33:96:ba:7e:87:b3:b4:1e:29:84:d1:13:7e:77:
         a5:1c:de:58:a3:c6:1e:9e:60:15:1a:42:13:ad:c8:af:1b:65:
         4b:67:f4:2e:87:a9:b6:b1:a6:73:ac:8c:e6:a4:57:50:6b:07:
         0e:43:7d:cf:24:f4:7e:40:19:08:06:01:d6:c1:1e:24:f0:ab:
         3e:d4:2f:7e:8f:28:2d:c6:1d:5c:da:26:a0:bc:3c:97:7d:ab:
         69:dd:89:6a:8b:8a:b2:b9:5b:de:d8:17:c0:a0:6c:3b:43:fc:
         46:8e:f2:09:ae:33:82:0b:c3:b3:33:15:2b:66:bb:bb:13:7b:
         84:dd:a4:f6:5b:64:2f:2d:48:6a:e3:f6:c0:58:27:0c:77:97:
         2a:2a:2b:6d:fb:32:5e:62:88:d4:e7:4f:6e:44:23:97:4d:32:
         e2:9b:30:5f:b9:40:c4:10:2a:9f:07:d7:02:a1:ab:86:9b:71:
         b4:90:90:e9:55:d9:20:6e:92:61:63:23:7a:c0:32:cd:de:78:
         ac:aa:5e:e8:03:8f:f6:22:73:dd:0a:76:d2:62:3b:11:88:81:
         9b:47:31:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:35 2026 by rpki-client