This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
File:                     mtVmfEEoFBE5zKfFBH_BclC_Y68.mft (raw, json)
Hash identifier:          3E2biAfbEI1SLLGVq0RE7B1cXoZ+uQ48m4TA3EFn6jE=
Subject key identifier:   B1:5C:01:3B:25:DC:4D:AA:10:99:56:A7:B5:0D:61:DD:13:D9:8F:11
Authority key identifier: 9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
Certificate issuer:       /CN=9ad5667c4128141139cca7c5047fc17250bf63af
Certificate serial:       019C438FDCCA8B97AC3C6F4D085DF78CCA99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 18:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:27 +0000
Files and hashes:         1: mtVmfEEoFBE5zKfFBH_BclC_Y68.crl (hash: BQYSDEQsjk4R9HmXfvHIIANG9XmTcnN0RcbXy0DuZ8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:dc:ca:8b:97:ac:3c:6f:4d:08:5d:f7:8c:ca:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ad5667c4128141139cca7c5047fc17250bf63af
        Validity
            Not Before: Feb  9 18:00:27 2026 GMT
            Not After : Feb 10 18:00:27 2026 GMT
        Subject: CN=b15c013b25dc4daa109956a7b50d61dd13d98f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:98:ff:de:32:a5:e8:7b:50:3c:4f:8f:51:
                    31:78:0b:f4:3d:39:f2:a4:79:d1:de:ba:ef:cf:63:
                    c8:25:04:11:d6:20:ba:8f:3f:c9:c9:df:1f:36:b3:
                    61:1f:0a:ed:6a:90:33:2c:bb:22:d5:04:fa:da:3f:
                    59:9c:00:5a:6c:4c:8c:d6:65:55:6e:01:96:32:2d:
                    ac:a5:46:02:03:c7:b1:f2:c6:14:9c:02:a2:35:66:
                    db:71:54:52:64:7e:ba:1a:2f:c2:43:e8:3b:d8:d2:
                    99:6e:12:cd:08:69:61:8c:7c:f8:eb:c2:66:6c:0e:
                    3a:ab:72:30:de:cc:4b:14:40:a9:3a:6f:cf:53:75:
                    1e:db:8f:b2:9d:c0:76:97:55:4f:aa:18:f3:c3:a6:
                    d6:f0:12:5b:23:fc:ce:ab:a5:15:c0:40:28:6a:fa:
                    9d:d9:3f:8c:90:86:bb:2b:7b:b3:50:b1:e3:ee:52:
                    de:4c:0b:e3:45:28:59:e1:c5:af:78:64:c0:59:78:
                    6f:c8:f4:1d:9c:64:78:c1:ec:27:7f:b0:86:3d:e1:
                    b5:58:cd:e7:cd:18:5d:ad:4e:eb:81:62:67:8d:16:
                    5d:2f:63:a3:a2:93:a5:ad:66:b3:be:a4:6e:a2:3e:
                    e8:e2:0f:cf:3f:d4:bd:10:b1:af:ee:19:ab:bc:b0:
                    3a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5C:01:3B:25:DC:4D:AA:10:99:56:A7:B5:0D:61:DD:13:D9:8F:11
            X509v3 Authority Key Identifier:
                keyid:9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4e:b5:c8:38:ff:6c:34:e8:e8:c1:80:e3:fd:0c:63:b8:30:
         5e:46:28:0b:0b:16:e0:83:0e:c5:1e:c3:d4:0f:cd:d9:07:71:
         2f:16:b0:9f:5f:a3:19:5e:d7:99:b3:8f:74:7e:d0:21:91:f3:
         49:e5:f6:41:b8:89:e6:c3:3a:b2:a8:08:1a:ac:8a:ce:23:84:
         ca:13:37:e2:35:a7:49:72:ce:43:57:fb:65:7b:48:66:83:7b:
         60:65:a5:21:b7:5b:8b:a8:c6:ff:a3:c1:ea:c7:46:00:1c:ea:
         06:7c:7b:e2:c9:6a:88:c8:eb:8e:92:66:ff:a5:43:7e:df:03:
         7d:93:d2:46:d1:e2:53:78:aa:da:4a:b4:ba:80:c0:2c:32:78:
         76:f6:ed:f2:e0:71:66:77:38:d3:ba:f5:a3:13:fc:c7:1b:7e:
         b2:0b:b3:c4:45:a5:11:c2:81:c4:b8:40:3e:1e:00:1c:d6:43:
         1f:95:38:8f:3a:81:32:86:75:9e:e2:da:a4:ce:4b:8d:62:d6:
         a0:a1:0d:e2:f4:45:08:2a:7d:15:e8:6b:5d:07:37:3b:91:66:
         af:b8:48:68:9e:e0:f2:2f:d4:26:1c:6e:79:34:c2:cc:7e:94:
         1e:3d:38:0b:ef:52:59:17:45:72:ea:14:49:69:81:da:2f:7e:
         c8:8a:8d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:19 2026 by rpki-client