This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File:                     E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier:          Wrz4fKMZT0ewitZhpixCrKOU3waZatx0fDH7RrxSrDs=
Subject key identifier:   4B:04:BD:3B:7F:3E:E4:71:02:79:43:6F:8B:F9:2A:7D:DA:0F:A6:E4
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer:       /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial:       019C438FE3426168C38E7117861E23168459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 18:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:28 +0000
Files and hashes:         1: 4H7cLZ6KiTbPw85TsPK0UjZTTGk.roa (hash: tVH6e7cYLN0f9K/raOQzGrbNIWG9CoxnIdfOseQ+WE0=)
                          2: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: tqBLkQchYs3mBtmLaHC8v8uIjX6KB/jJCAuoDiceugI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:e3:42:61:68:c3:8e:71:17:86:1e:23:16:84:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
        Validity
            Not Before: Feb  9 18:00:28 2026 GMT
            Not After : Feb 10 18:00:28 2026 GMT
        Subject: CN=4b04bd3b7f3ee4710279436f8bf92a7dda0fa6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:47:5f:c8:1b:bc:5f:00:5d:25:b2:7f:55:
                    7b:85:89:f1:78:83:1e:32:88:19:42:5f:5c:51:d1:
                    ff:23:6e:92:9c:39:28:4b:c7:7e:8f:bc:4d:76:fb:
                    2a:23:c9:44:e4:c0:b0:26:c7:ad:99:68:f3:80:10:
                    98:39:18:95:71:24:11:2c:3e:72:9b:76:5d:c7:72:
                    15:61:7a:5c:28:e0:60:dc:d5:a8:48:c0:49:8e:33:
                    16:7c:8e:42:f9:8c:99:51:5e:2f:51:9a:11:97:47:
                    e0:bf:fa:0a:93:c9:5c:e5:a0:f9:f7:a3:21:2d:5d:
                    15:11:27:bb:56:c7:13:18:0e:6c:a1:cb:aa:ee:9d:
                    d3:31:d4:de:65:7b:f3:af:f8:a4:c4:35:2f:3d:30:
                    6d:f5:aa:8b:f5:ae:7f:b6:fc:0b:33:c3:31:21:0f:
                    ed:25:e7:70:2c:4f:54:a8:8d:19:87:24:67:e7:5f:
                    30:d2:ad:cf:47:12:de:b3:58:dc:99:c3:bb:a1:ad:
                    4e:be:66:46:fb:f9:14:9b:62:0f:13:c9:90:a8:f2:
                    3a:d9:d0:81:14:84:2a:6b:30:8f:4a:a2:4c:0c:e1:
                    4a:c7:13:1c:28:42:69:e2:77:1f:8a:af:42:4a:b3:
                    3d:08:c2:5b:df:a6:4f:e6:60:a7:4d:7f:57:36:20:
                    64:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:04:BD:3B:7F:3E:E4:71:02:79:43:6F:8B:F9:2A:7D:DA:0F:A6:E4
            X509v3 Authority Key Identifier:
                keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:16:11:25:bd:5a:61:22:8a:be:56:38:f3:da:06:e0:c4:b8:
         2d:e5:c4:95:c3:98:b8:dc:f5:e6:48:da:d8:c9:81:31:53:44:
         6e:c4:47:8d:47:0c:fd:85:c3:13:a3:ac:72:51:6c:ad:a9:ca:
         0c:3e:be:e6:5b:0c:57:e6:15:47:ef:e4:85:bd:50:f9:fa:f6:
         8c:cd:13:0d:1f:01:ca:3a:03:d3:c9:90:d3:7b:3b:37:09:15:
         12:2b:43:f3:cd:37:92:17:1b:e6:92:ae:1b:91:41:fe:a0:40:
         e5:71:4c:a5:ae:78:8c:6b:48:35:7b:1d:05:ad:08:86:cc:84:
         f7:a3:49:12:35:bc:f4:e2:0b:24:bf:81:bf:0c:b7:5c:1f:d0:
         50:f2:1e:38:77:1f:98:f6:97:77:31:ec:d0:91:1f:47:14:51:
         0e:b2:73:34:07:e4:d4:0b:8c:a5:e2:d3:9f:02:8b:b6:95:d8:
         66:2c:54:87:4a:fa:38:a6:1d:a1:46:c7:5e:c8:64:f8:14:82:
         9f:ae:76:3b:a3:dd:59:a3:00:0c:8a:69:4f:6c:e6:1f:09:58:
         ab:6f:bc:00:a1:eb:b0:70:b0:11:33:ba:30:22:52:13:89:5d:
         e0:87:1a:4a:5a:5b:85:fd:09:5e:16:12:cb:6a:c9:b6:b5:fe:
         9b:a3:4c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:40 2026 by rpki-client