This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File:                     b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier:          baOumFT80Ko1BMiCZkLzuO414/Vg60KXWFtqkOTOL5k=
Subject key identifier:   C4:01:57:A6:C0:AB:DC:77:FF:76:B0:CF:E6:EE:83:B4:1A:59:CF:AE
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer:       /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial:       019C41A243B5424AE60DE5F66FA35AF1DB7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number:          180B
Signing time:             Mon 09 Feb 2026 09:01:19 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:19 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:19 +0000
Files and hashes:         1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: Uowpc2uFDU/qD0BrniXvtcfL5R/KXvKdtHxnM7coT2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:43:b5:42:4a:e6:0d:e5:f6:6f:a3:5a:f1:db:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
        Validity
            Not Before: Feb  9 09:01:19 2026 GMT
            Not After : Feb 10 09:01:19 2026 GMT
        Subject: CN=c40157a6c0abdc77ff76b0cfe6ee83b41a59cfae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:62:5e:71:78:a3:ce:17:03:ab:1e:7e:c6:2e:
                    de:86:17:54:da:9f:04:a5:1c:9e:d3:b1:04:6a:bb:
                    4c:74:59:8b:31:65:02:cb:bc:24:74:cf:66:af:a4:
                    83:88:40:72:2d:79:07:4d:01:86:e8:39:6c:ff:58:
                    43:9b:82:af:80:a5:89:0b:6e:d3:76:8d:86:b0:1d:
                    a5:b8:5a:28:83:92:a6:0e:7f:42:3e:f6:27:4d:13:
                    08:2d:38:2a:7f:06:4d:95:d1:5d:b1:a4:3a:ea:92:
                    92:84:1e:31:ed:d5:ec:71:2e:02:9d:e6:7a:f6:db:
                    c7:47:c0:59:e1:69:6b:2a:b5:2b:e8:02:e0:15:fc:
                    12:f3:cb:c0:c5:c7:4c:1d:fd:76:72:21:4a:c7:34:
                    e6:0d:a1:e2:ef:58:08:15:48:67:15:a3:af:12:48:
                    37:e9:9a:09:bf:13:13:4c:87:71:c9:bf:e3:92:43:
                    47:e9:7b:d3:ce:84:0c:87:e4:21:da:52:1c:cb:78:
                    b0:93:f9:10:ab:dd:e3:b5:6d:1a:6e:c3:c9:e4:00:
                    b8:16:a6:ca:9b:de:94:e3:5a:91:a6:d8:fb:58:64:
                    f9:c1:09:5e:80:ea:3c:58:a3:d4:8d:43:45:9a:4e:
                    9d:c9:1b:be:28:9a:00:9f:6a:65:0f:f2:55:ac:34:
                    b3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:01:57:A6:C0:AB:DC:77:FF:76:B0:CF:E6:EE:83:B4:1A:59:CF:AE
            X509v3 Authority Key Identifier:
                keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:6d:0a:ac:b0:72:fd:0e:2a:20:36:1d:7e:ad:42:d8:68:62:
         35:2b:37:1a:d9:df:41:21:a3:41:af:47:4e:0a:03:6f:3a:c9:
         e5:48:30:8d:30:a6:be:eb:7d:c3:56:5a:d2:2c:0b:e3:2e:2b:
         fb:52:79:eb:e4:f4:12:fc:3e:97:17:97:72:e6:6c:8f:e8:27:
         15:25:c1:e2:94:13:3a:5b:84:92:da:3e:98:cb:80:d6:3e:fb:
         ce:37:c8:8b:32:ea:0b:86:b5:d0:dd:2a:97:61:3a:67:db:7d:
         df:2c:d6:9f:89:d9:3f:76:78:c7:95:43:ca:21:b1:7a:53:e2:
         63:02:6d:aa:fd:3f:69:ec:1a:bf:35:d3:76:05:18:6b:e9:7c:
         42:e4:49:00:73:02:4e:24:94:ab:ee:ca:14:04:dc:2a:b1:fc:
         eb:60:dd:f2:05:b8:83:99:23:62:10:4c:43:08:06:82:c0:9a:
         67:b1:a3:1d:20:2a:23:a0:6f:f1:c4:21:0d:49:45:99:da:0b:
         1d:06:b0:fe:ef:9c:67:28:36:e2:89:51:28:67:a9:4c:7f:3a:
         a9:f1:52:10:27:4d:54:f0:a1:12:27:87:05:6a:46:7e:b6:db:
         95:36:c4:d0:b9:aa:12:9f:ee:db:20:67:f7:c0:fd:b7:2b:c6:
         6a:1b:2d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:27 2026 by rpki-client