This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
File:                     80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft (raw, json)
Hash identifier:          mOqehvIvDc6GM6XmOyY1wstm8yskVaoL8WkpFQDMpKg=
Subject key identifier:   CD:CC:EB:82:C3:11:FC:F1:47:F9:16:73:E6:FE:60:F4:CB:A8:A2:80
Authority key identifier: F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4
Certificate issuer:       /CN=f344a9f3665084f5009921ac52d119750beed4b4
Certificate serial:       019C209681F75795937BDA725A22F88E2F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
Manifest number:          1801
Signing time:             Mon 02 Feb 2026 23:01:00 +0000
Manifest this update:     Mon 02 Feb 2026 23:01:00 +0000
Manifest next update:     Tue 03 Feb 2026 23:01:00 +0000
Files and hashes:         1: 2KekhlWBejdFD7GFVdo-rq9I-Lk.roa (hash: u86VEt28YlwVGTomKAy9b0M7sMBBTGVJ9+WMRB1kQKY=)
                          2: 80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl (hash: TMfEpkQYhNU7revkEQd8a2RW31L4Txw8JFka9evhpz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 21:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:20:96:81:f7:57:95:93:7b:da:72:5a:22:f8:8e:2f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f344a9f3665084f5009921ac52d119750beed4b4
        Validity
            Not Before: Feb  2 23:01:00 2026 GMT
            Not After : Feb  3 23:01:00 2026 GMT
        Subject: CN=cdcceb82c311fcf147f91673e6fe60f4cba8a280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6e:42:38:3e:e2:6c:ef:52:2c:d6:f8:0a:80:
                    13:4f:84:38:ce:aa:9a:ad:89:24:95:27:dc:67:cb:
                    f3:49:fc:7f:16:30:bf:db:14:31:24:e9:93:97:92:
                    c4:9a:ed:7f:72:b9:aa:fb:ef:99:17:12:04:72:b5:
                    1d:34:72:38:4a:4c:96:35:49:be:5e:b5:d2:cc:5f:
                    56:6c:a4:33:72:0b:4c:96:5a:37:d6:c4:de:d1:28:
                    5a:9c:d8:54:78:12:38:0d:75:c2:ce:c1:4c:6c:74:
                    69:6a:bf:7e:54:29:1f:23:65:9f:00:3c:de:6d:3b:
                    14:33:7d:a0:06:2f:1b:07:3e:22:a2:2d:32:2f:69:
                    94:4c:ff:0d:14:51:55:a3:c4:15:20:a3:53:fb:0f:
                    ba:e8:19:f3:11:2c:9e:92:5a:ca:a1:cd:58:98:d4:
                    9f:73:f2:ac:47:5b:5e:1c:7e:72:78:90:2e:7e:3c:
                    96:cd:1b:cb:46:3c:db:c7:a6:a0:12:47:e7:d4:82:
                    a9:b5:0e:c4:07:c8:e2:bb:df:a2:48:0e:21:56:4c:
                    84:3f:7d:91:63:7c:4c:27:3a:d9:9b:ce:d0:f5:7d:
                    0c:7d:c7:00:4f:6d:26:c0:a9:7c:07:fe:d5:37:33:
                    c0:96:5b:00:c9:a6:cb:53:1e:f9:29:4c:7b:2e:04:
                    bf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CC:EB:82:C3:11:FC:F1:47:F9:16:73:E6:FE:60:F4:CB:A8:A2:80
            X509v3 Authority Key Identifier:
                keyid:F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0e:4b:75:b7:79:55:95:7a:c6:bd:4d:9e:8c:f7:45:60:f4:
         f1:55:fa:f9:ec:8d:0d:55:ea:07:ee:2b:30:bf:31:1b:de:34:
         06:c0:ed:ee:7c:53:17:10:ce:1f:88:56:f6:67:e4:70:37:2d:
         e4:29:c1:cb:84:cf:77:bd:c3:88:f7:c2:c6:b4:f7:02:2d:63:
         a8:bf:20:da:73:3e:6e:c3:53:f6:f5:24:b9:68:b3:a3:c8:83:
         61:35:a9:d5:31:2e:0f:11:91:96:b4:a4:d7:0d:6f:8f:b4:09:
         88:11:cf:ef:6c:cb:b4:00:15:ad:76:6c:d4:8c:80:85:96:48:
         29:03:0c:a9:96:e8:8e:46:00:59:ff:cf:95:49:6d:54:81:0a:
         6c:13:98:a9:a9:39:df:63:64:cd:65:3d:2b:1f:46:ee:61:ce:
         73:b6:87:91:33:59:ac:0f:0d:e3:4b:e4:01:95:ed:5f:1c:88:
         9a:e5:0d:3a:ae:9f:00:15:ef:ca:4e:f4:7e:85:85:bf:bb:91:
         75:d6:fc:d6:c0:3f:e4:c9:04:45:89:d7:c6:46:ad:52:d0:d6:
         13:4b:50:e1:21:c5:b3:f7:9e:cb:61:aa:b7:3a:91:86:99:64:
         f8:76:85:86:8f:d4:ea:39:f4:96:7e:1a:ad:50:6e:34:bf:e1:
         fe:66:48:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 01:52:46 2026 by rpki-client