This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
File:                     4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json)
Hash identifier:          onjrOOHPR01BETPQrspMXCcTNt6EEC86Z2Ob6fFVUBo=
Subject key identifier:   18:28:DE:47:69:70:12:3C:E8:16:64:77:6D:AE:77:FB:B4:17:58:74
Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
Certificate issuer:       /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Certificate serial:       019C438FC60F54AFCFD0E8C04617236BBE76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 18:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:21 +0000
Files and hashes:         1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: OwpsD7AeOOgPCjdzHZ9CTvlrSoi4BE1yAp0nqc2/MLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:c6:0f:54:af:cf:d0:e8:c0:46:17:23:6b:be:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
        Validity
            Not Before: Feb  9 18:00:21 2026 GMT
            Not After : Feb 10 18:00:21 2026 GMT
        Subject: CN=1828de476970123ce81664776dae77fbb4175874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6b:bc:72:69:50:a9:8d:d6:26:12:4a:db:4d:
                    c2:9c:1b:e7:66:e1:02:22:17:cf:09:72:99:7c:87:
                    3f:90:27:5d:d8:2e:1a:0c:b6:aa:43:60:41:cd:5f:
                    fa:df:31:ed:7c:07:ef:5a:95:ac:3d:1c:dc:70:f9:
                    5e:4c:a4:cf:b1:1d:d3:28:f4:7d:00:2a:d7:16:1d:
                    9c:ae:5c:4d:3e:ce:23:9d:6f:e1:26:8e:44:a8:62:
                    1c:4b:2c:57:60:2c:da:d4:d6:fa:62:84:46:d6:f7:
                    aa:2b:51:60:e6:b4:8d:3d:f3:59:d7:dc:ab:55:05:
                    3e:c8:5c:fc:cd:54:b2:a1:20:1a:3e:13:70:8c:86:
                    a9:2e:2e:3a:08:ea:91:38:2a:27:2f:6f:33:65:67:
                    ae:dc:60:f3:47:5c:53:de:3b:e1:47:83:ed:ec:3a:
                    cd:bd:9f:a9:28:19:2f:bc:70:b2:d0:d6:29:d8:68:
                    aa:67:2d:b8:9d:97:80:01:b9:31:67:4d:d0:b0:1b:
                    10:ac:ea:3d:52:63:7a:fd:56:68:73:72:4d:7f:35:
                    1e:2b:ad:85:b9:80:1b:33:f8:02:2f:7f:e4:11:4a:
                    35:40:79:97:48:c2:1c:df:f1:0f:fb:13:b6:0d:c1:
                    b4:a0:cf:77:84:5c:e1:07:5e:56:a9:ed:a8:21:a1:
                    17:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:28:DE:47:69:70:12:3C:E8:16:64:77:6D:AE:77:FB:B4:17:58:74
            X509v3 Authority Key Identifier:
                keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:47:56:6b:0a:91:b8:49:d0:a4:02:ac:6f:ca:a1:d8:93:ba:
         2f:05:61:44:69:cd:fd:92:85:a2:77:95:0c:b1:38:7d:0f:99:
         c7:8c:0b:f1:16:1f:b2:b6:b3:b3:bd:8d:4e:b0:6f:01:96:b3:
         fa:6c:f8:a2:1f:8c:79:bc:3a:1b:01:bf:ad:b0:43:e0:49:4e:
         89:5b:cd:ab:cf:2e:7e:51:7d:f3:ef:1c:e8:9a:97:41:21:16:
         e5:86:f7:03:36:c4:82:b0:34:d1:d1:1d:9c:33:45:ac:27:34:
         96:bb:a3:22:f9:38:1b:ae:cd:8c:2b:e2:ee:72:23:ed:7f:17:
         46:e5:72:13:37:99:8d:21:1f:1b:7e:cd:46:3d:22:72:84:09:
         58:36:fc:9f:0f:75:ff:d4:f8:e8:5b:11:87:cf:ff:52:39:db:
         c2:0e:98:f0:30:6b:f0:af:67:e0:16:74:18:bf:8c:ed:7f:c8:
         9b:be:6b:40:5a:8a:b5:9a:fa:93:b2:c2:29:b1:2c:f7:e7:48:
         0a:a7:69:62:5c:4c:fb:90:8b:7d:d5:8f:6d:9c:18:7a:a5:90:
         a1:9f:e3:b4:dc:ff:89:bb:fc:b6:fb:cf:cc:43:9c:6e:3b:02:
         14:12:6f:ad:ec:a6:ab:32:71:61:25:d9:43:84:37:5b:3a:9a:
         6f:75:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:23 2026 by rpki-client