This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
File:                     _1VJGZMcZ70mUPxODHPC-z4ijZU.mft (raw, json)
Hash identifier:          JcIDauTRN9N+JgrJvOFYxmRri7JL4EZYdKT7DnEwdDI=
Subject key identifier:   F0:FE:46:E0:AD:6D:84:B0:61:F8:AC:6C:9B:07:5D:7F:73:8A:AD:E9
Authority key identifier: FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
Certificate issuer:       /CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Certificate serial:       019C43C6E6AB40D7E198F8976804A62ED0A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
Manifest number:          180B
Signing time:             Mon 09 Feb 2026 19:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:34 +0000
Files and hashes:         1: _1VJGZMcZ70mUPxODHPC-z4ijZU.crl (hash: YnayaRjW+9+Cn7O10MZQ0aHZIUgNkkVRic0Yc2aePVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:e6:ab:40:d7:e1:98:f8:97:68:04:a6:2e:d0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
        Validity
            Not Before: Feb  9 19:00:34 2026 GMT
            Not After : Feb 10 19:00:34 2026 GMT
        Subject: CN=f0fe46e0ad6d84b061f8ac6c9b075d7f738aade9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:da:de:0e:b8:44:4e:32:c0:29:17:de:45:b4:
                    4a:8a:f4:f5:f0:83:e2:ed:96:7e:af:9a:67:97:02:
                    86:9f:a4:bc:e0:71:94:26:ad:78:84:63:fa:d0:8d:
                    f9:58:c1:f5:a4:a3:74:86:25:a6:3c:f8:d0:15:c8:
                    94:40:f8:86:dc:6b:10:09:0b:d5:9b:b6:81:06:0f:
                    2c:b5:b3:30:99:b5:83:23:c3:b9:23:59:bf:95:13:
                    4d:a0:41:42:1c:3f:ae:85:28:05:e4:76:e4:cd:35:
                    f9:61:45:f3:12:25:a5:a6:ab:c3:48:c1:55:73:09:
                    4a:11:1a:a7:ba:92:3b:32:6c:96:a3:ab:19:16:5d:
                    c4:7a:0f:42:fd:f1:50:23:47:07:98:36:60:3c:8a:
                    5a:b7:fa:0f:eb:35:88:af:32:c6:e8:c8:fb:dd:02:
                    9e:ac:01:00:91:93:c8:89:c0:c6:19:a7:96:b7:25:
                    15:1e:6e:6a:f4:0c:c3:6d:34:d9:f3:65:9b:71:60:
                    7c:b1:7e:34:28:de:52:65:cb:56:5b:39:34:cd:d2:
                    e7:84:c2:4b:16:33:f5:8f:99:ed:d8:7a:b6:97:17:
                    72:3f:62:b2:5b:cc:9d:e3:43:b5:0e:2d:ad:71:ab:
                    d9:44:35:98:f0:f8:86:2f:ea:3d:7d:fa:41:b8:13:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FE:46:E0:AD:6D:84:B0:61:F8:AC:6C:9B:07:5D:7F:73:8A:AD:E9
            X509v3 Authority Key Identifier:
                keyid:FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:75:ed:37:d6:04:ad:d8:12:80:fa:b4:cd:ef:e5:de:80:c5:
         45:e5:a2:66:4e:b8:3d:7f:1c:7f:82:19:56:13:79:6f:76:52:
         5a:35:df:43:83:a9:86:83:71:ae:5a:20:e7:d1:84:24:aa:84:
         74:24:80:9d:08:83:16:1f:53:14:33:ed:f1:40:99:02:84:ff:
         5d:f6:25:c7:c8:2e:d0:e6:53:5a:e6:fb:3b:a0:1e:80:91:a6:
         6d:c2:d5:8e:14:91:2f:41:27:33:04:9c:ea:f7:41:72:b8:c8:
         54:28:e9:a2:33:1e:2e:c1:c4:38:77:3c:e4:91:9f:04:2d:3c:
         3e:19:cb:74:e5:2b:4c:c3:e3:8b:f0:78:01:5f:d3:29:bb:47:
         fe:c5:8b:7f:e2:54:7f:fa:94:07:0f:96:d7:81:dc:4e:d9:47:
         1b:e3:f3:34:33:43:f2:34:75:b8:55:b9:e3:11:27:6e:4f:a9:
         b5:1b:d7:cd:8f:68:39:b1:33:bd:4c:8c:dd:dd:44:e8:5a:f3:
         40:c1:ed:4f:6f:02:c0:a2:cb:5a:c4:3c:78:c0:32:08:ab:90:
         4d:d0:07:5d:f5:74:93:19:ac:b1:87:ef:e1:21:1e:fb:2b:51:
         40:90:9c:6a:39:26:6d:6a:50:75:62:e4:40:86:d8:b8:83:58:
         4e:70:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:31 2026 by rpki-client