This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
File:                     EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft (raw, json)
Hash identifier:          TK7TBFSf/5XOvvo7CU+SV6o429Lxy2I8srnWfPtnqOk=
Subject key identifier:   3B:B2:F9:41:14:4E:56:1A:DC:ED:88:96:75:C9:BB:F3:36:9E:EB:C2
Authority key identifier: 10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7
Certificate issuer:       /CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
Certificate serial:       019C41A183BEEF357B11A1DC8C18F0C79599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
Manifest number:          180B
Signing time:             Mon 09 Feb 2026 09:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:29 +0000
Files and hashes:         1: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl (hash: eycYu/A2c+YhuFyJAwafaVe396zh2pwM4F8TPDqNaPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:83:be:ef:35:7b:11:a1:dc:8c:18:f0:c7:95:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
        Validity
            Not Before: Feb  9 09:00:29 2026 GMT
            Not After : Feb 10 09:00:29 2026 GMT
        Subject: CN=3bb2f941144e561adced889675c9bbf3369eebc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:cb:16:da:1f:8a:ad:8e:a7:be:37:ca:e1:
                    67:cc:f4:17:6c:e3:af:17:0b:ac:26:11:e1:5f:67:
                    28:e4:ad:c8:24:72:e1:ef:e1:6f:6a:3c:64:f5:44:
                    2e:4a:d6:33:4e:b7:16:47:33:90:4e:a8:70:7b:20:
                    44:12:a5:b5:f1:95:5e:17:f9:cd:93:0e:2d:0c:26:
                    39:4c:04:72:b2:08:6c:cb:eb:fb:b3:78:b9:b5:77:
                    de:53:4a:ff:4d:42:34:6b:30:13:d1:34:60:a6:db:
                    22:12:38:9d:ba:5b:a1:0f:ca:4b:a9:d2:ea:7c:90:
                    50:fa:1a:09:8a:4d:32:81:08:af:bb:57:0a:22:84:
                    b2:4c:27:c3:74:8f:c9:3e:94:c8:a3:44:d0:09:91:
                    2f:6a:93:c9:01:20:5d:dd:a1:06:d1:e5:38:a5:71:
                    57:7c:60:02:39:56:d3:bd:13:15:9e:85:32:3b:c0:
                    13:37:d4:a2:c5:c8:ed:33:3f:16:e0:9f:78:8d:b2:
                    df:4c:26:8a:7c:67:8f:05:4f:08:e8:c7:dc:51:9d:
                    d2:00:95:d4:99:8b:48:94:34:0f:62:31:d2:b6:4b:
                    f9:65:6d:61:21:2e:ca:ac:1e:4f:49:d6:53:ae:fc:
                    6d:78:3a:b5:8b:8d:87:1c:39:44:bd:1f:6b:6d:7b:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B2:F9:41:14:4E:56:1A:DC:ED:88:96:75:C9:BB:F3:36:9E:EB:C2
            X509v3 Authority Key Identifier:
                keyid:10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:27:d6:83:be:0b:17:f1:d1:ce:ab:6e:73:c1:dc:2d:bc:ea:
         76:c1:58:2e:49:89:ed:97:eb:d3:08:64:d8:60:53:71:12:f0:
         69:ff:8e:4d:42:95:36:c6:5a:c0:08:c2:5a:66:f0:bb:47:71:
         2b:a9:cd:62:25:93:be:1f:88:e3:6e:7d:32:03:31:4f:83:97:
         88:de:d9:99:72:55:1d:2b:b6:c0:a1:68:a3:f9:cf:1a:ac:5b:
         dc:e4:4b:da:05:62:72:76:fd:bf:5f:fe:43:42:57:28:66:7e:
         43:92:d0:d3:e0:70:5a:76:96:b4:5e:b7:87:23:76:e8:7c:f8:
         38:4a:41:8b:e7:cc:5a:be:e4:13:2c:45:01:e4:09:54:71:c4:
         74:39:c9:ea:8c:c0:c2:08:f3:79:1d:ca:22:1e:4e:40:91:30:
         4e:b3:3a:a3:63:1d:01:15:da:b8:2a:81:9f:b8:3d:35:1e:bf:
         15:e2:bd:be:a9:68:09:98:52:d4:7b:88:cc:e8:c3:f8:a4:06:
         6d:81:3d:7a:b5:5e:5b:50:6c:a9:cb:fa:ca:4b:2a:e6:2e:4b:
         f6:cd:e1:1a:16:b2:50:3b:78:fe:cf:3c:c2:ef:4b:a5:42:77:
         57:9b:99:64:80:30:a0:b2:8b:5c:c7:12:2e:53:71:03:c3:a3:
         01:87:3a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:19 2026 by rpki-client