This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File:                     ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier:          O2okWAeUlZakDL48k8L7N993ECQfZW5eDnzm1tRJZjY=
Subject key identifier:   D9:31:15:E2:B7:09:D3:4A:DF:6C:30:1F:6B:72:97:8E:B4:7A:A4:02
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer:       /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial:       019C37C30DDA0A6324E68196919D1F9C664D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number:          180A
Signing time:             Sat 07 Feb 2026 11:00:55 +0000
Manifest this update:     Sat 07 Feb 2026 11:00:55 +0000
Manifest next update:     Sun 08 Feb 2026 11:00:55 +0000
Files and hashes:         1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: +uXmMvGISNfUMSO8YykAggBa7fq1M8cYMSr6vXT+JTE=)
                          2: viS2S0SzjAgJ_iBbCgPzp3yhg0U.roa (hash: s3YkexgQHQKpIdGn3lF6fcpbtFZIjdVlLhgi0JVjWGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 09:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:37:c3:0d:da:0a:63:24:e6:81:96:91:9d:1f:9c:66:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
        Validity
            Not Before: Feb  7 11:00:55 2026 GMT
            Not After : Feb  8 11:00:55 2026 GMT
        Subject: CN=d93115e2b709d34adf6c301f6b72978eb47aa402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e6:ba:a6:4f:06:25:12:2a:8b:92:ca:a8:83:
                    d1:94:e3:74:6a:4b:be:dc:c3:81:9e:f9:61:39:7b:
                    77:c2:ac:8c:55:4b:d5:71:34:73:e3:40:c8:3a:35:
                    a5:89:23:22:69:bc:fb:d1:4b:7f:d5:9f:11:55:db:
                    06:11:69:68:e7:b8:b9:56:58:2f:29:ec:d7:da:ea:
                    6d:47:02:74:1d:66:86:79:5b:44:9c:39:f0:7c:86:
                    42:2b:f5:d6:d2:2d:5b:09:3b:2f:ba:2a:5d:58:da:
                    22:b6:81:26:60:e5:41:9e:9b:03:63:0e:19:f0:38:
                    d4:6c:49:fc:b5:f3:38:c8:17:26:69:5d:f5:0c:ea:
                    e2:44:b0:c5:5b:2b:5a:29:08:30:72:99:2d:4f:70:
                    ac:c0:88:94:2b:43:b6:78:bf:90:36:ed:01:ce:d9:
                    73:5b:1b:44:fe:39:75:69:3d:02:68:73:ce:35:1f:
                    6f:af:7c:7c:f9:99:19:b6:40:21:20:36:73:b7:7a:
                    c5:95:10:38:36:ae:cf:e1:28:c2:7f:34:9a:74:4b:
                    82:8f:d4:26:c7:13:a6:84:72:de:e2:b0:da:cf:d4:
                    c4:3e:cd:ca:da:5a:27:28:3d:9d:0c:c5:23:2f:83:
                    7e:4f:a4:5e:86:d0:97:02:e5:12:df:20:4d:de:e7:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:31:15:E2:B7:09:D3:4A:DF:6C:30:1F:6B:72:97:8E:B4:7A:A4:02
            X509v3 Authority Key Identifier:
                keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b2:22:de:fb:69:c7:63:90:70:1f:39:8d:f4:31:67:d3:31:
         8e:fa:06:05:5c:67:c1:f2:d8:8d:22:41:b8:97:3f:eb:61:b8:
         4f:29:c3:db:05:ea:17:4a:63:c6:cf:36:e2:5a:65:ca:9a:f6:
         cf:05:d6:af:09:db:d9:2e:a0:2a:b3:3b:f7:b6:4b:2a:1d:3b:
         b3:64:32:91:45:47:2e:a3:5b:1f:d9:40:2c:e7:14:6b:c0:f4:
         ca:47:36:ea:ac:90:ed:7a:2a:ef:9b:d8:f7:f8:ba:40:9a:3b:
         43:0a:f0:11:42:1b:bf:cc:ab:2b:35:b7:9d:8c:e8:e8:9d:45:
         80:3e:40:ca:f0:d2:7c:1b:b4:7c:4f:33:4a:50:28:32:39:94:
         8d:a6:1e:82:75:77:04:0b:ec:e6:5b:1c:09:47:3c:62:cc:15:
         9e:55:e6:09:31:ac:bb:70:c8:1b:f0:25:10:53:c4:fc:3c:a2:
         4e:65:7a:00:a3:07:0c:5f:f1:23:93:6e:c1:79:7e:9c:0f:1e:
         34:bc:d8:4a:2f:03:72:dd:11:c1:fd:54:8c:d4:11:d6:5d:21:
         54:47:fa:f3:38:da:3f:77:b9:d8:b2:26:dc:91:f3:12:29:18:
         96:2a:a9:21:28:9f:ac:a4:9e:40:18:63:49:c0:ff:7a:20:31:
         ac:3d:b0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 17:58:56 2026 by rpki-client