This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
File:                     yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json)
Hash identifier:          o3/IOr1twr3QKo98jXEz7jbkhZCND8oIQ2mC2pypE/U=
Subject key identifier:   E4:92:1A:37:1A:FB:A9:3F:C2:5B:38:91:35:EA:15:FA:A4:0D:9E:02
Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
Certificate issuer:       /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Certificate serial:       019C4322C4E08787FF8EEDE1C4B01A8F1E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 16:01:17 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:17 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:17 +0000
Files and hashes:         1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: JG+Q/X+5wFVSxRsSYWCOEodwYN+KiuiLObh8nJyR0Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:c4:e0:87:87:ff:8e:ed:e1:c4:b0:1a:8f:1e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
        Validity
            Not Before: Feb  9 16:01:17 2026 GMT
            Not After : Feb 10 16:01:17 2026 GMT
        Subject: CN=e4921a371afba93fc25b389135ea15faa40d9e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:79:e2:5f:e3:57:64:fc:c9:4f:74:c2:00:
                    70:40:cf:1d:50:99:51:ba:25:fa:2a:7b:33:50:5d:
                    b2:cc:20:3d:11:82:57:fc:ed:3a:cd:98:d9:0a:ed:
                    8a:b5:ee:63:e7:3a:77:f9:5e:44:14:45:4e:a7:2f:
                    0e:a6:4e:6b:8c:0f:eb:8a:d1:88:c5:55:aa:0b:81:
                    2c:42:80:c5:b4:32:9a:da:db:01:dd:85:8f:38:ce:
                    c9:c4:d8:52:d3:de:99:e8:78:58:ae:cd:e0:1b:5b:
                    16:08:29:a0:2b:5e:9f:d3:1f:e7:36:bc:f0:3d:37:
                    6f:36:c6:29:1b:da:ba:21:38:03:64:ba:81:dc:83:
                    8f:d9:f2:ff:73:ec:ba:e9:61:22:d0:34:de:a0:2a:
                    a5:56:bb:5b:6d:e9:37:88:cb:1a:de:76:61:aa:be:
                    89:01:80:93:45:65:f9:f2:4e:d4:80:28:41:c2:74:
                    34:44:14:e7:4d:56:76:73:d9:44:c5:fa:3b:55:87:
                    59:a3:37:81:8e:1c:20:a3:25:18:f5:9e:49:87:0f:
                    01:63:55:3b:64:bb:7b:0b:91:ec:9d:99:b9:b9:4b:
                    b9:89:28:fa:35:34:cb:ca:90:e6:04:fb:73:a4:d8:
                    7b:81:68:42:26:ed:b4:1e:cc:99:25:2b:a1:9f:28:
                    66:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:92:1A:37:1A:FB:A9:3F:C2:5B:38:91:35:EA:15:FA:A4:0D:9E:02
            X509v3 Authority Key Identifier:
                keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:51:84:e5:91:d8:29:91:4b:d9:3e:96:21:a0:c6:2e:6b:ad:
         61:37:cf:cd:ce:8c:d6:6d:86:1d:ec:1b:13:1f:dc:8f:9d:a3:
         0c:8a:ae:2c:57:b1:7d:33:b0:25:d9:37:51:cb:a6:c3:db:55:
         da:bd:28:5e:13:ee:09:92:d6:20:50:c2:9f:ba:84:74:a5:50:
         76:9a:ef:55:4b:05:45:a0:f8:29:b1:7e:c4:f7:9d:e8:f0:b5:
         f7:c0:8e:2b:e1:24:fe:9a:7c:00:ee:a9:7d:61:fb:dc:b7:24:
         1e:77:09:08:7b:9d:fd:2f:3e:9a:b6:32:38:c9:fc:eb:33:60:
         55:33:39:13:e2:b3:f1:b3:e7:91:80:cd:da:58:e2:0f:ce:b8:
         a3:ab:33:54:57:44:5b:1d:23:95:4b:b4:4a:6d:d4:b2:64:f3:
         dc:9a:6a:10:ac:79:11:27:c3:1b:d0:d6:75:68:49:66:34:4b:
         3b:fa:97:8a:2e:cc:69:6c:76:21:51:f9:16:ad:26:9c:43:b3:
         af:6d:76:11:bd:3e:49:36:6d:65:9c:a9:99:fc:68:88:73:c0:
         2b:e6:7e:72:5f:0a:4d:c5:79:fd:4f:27:56:e2:2a:6f:73:09:
         07:cf:bc:eb:51:11:27:82:ff:86:39:21:22:4c:c9:ec:eb:e1:
         39:57:86:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:15 2026 by rpki-client