This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
File:                     MFKpUR4ZpULAuyN4td6PT7RSHb4.mft (raw, json)
Hash identifier:          qTHMYXScSNQ7KkAz1HKBPjJxrSQbSQXQEVbre39iR7I=
Subject key identifier:   CD:4C:56:C2:22:21:39:CC:F7:8D:ED:09:4B:28:7C:A7:8F:3E:E4:ED
Authority key identifier: 30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE
Certificate issuer:       /CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
Certificate serial:       019C42EB6E3DE353D53F250DA314577BE35D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
Manifest number:          179F
Signing time:             Mon 09 Feb 2026 15:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:51 +0000
Files and hashes:         1: MFKpUR4ZpULAuyN4td6PT7RSHb4.crl (hash: 3Mz4RdvalYbzGIC7EWAvxCTXwAhUT7/o3pIDPHvM0Ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:6e:3d:e3:53:d5:3f:25:0d:a3:14:57:7b:e3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
        Validity
            Not Before: Feb  9 15:00:51 2026 GMT
            Not After : Feb 10 15:00:51 2026 GMT
        Subject: CN=cd4c56c2222139ccf78ded094b287ca78f3ee4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:8c:32:19:90:06:8c:b1:a1:43:17:df:5c:
                    84:5c:25:f0:43:60:8b:58:4e:7a:88:2b:c0:61:12:
                    e1:d5:e3:3b:86:f5:3d:17:65:6f:8e:8f:5f:69:26:
                    00:31:5b:f1:d2:2e:a0:68:65:e4:34:7d:ea:52:ee:
                    34:b1:f3:25:ba:9d:e4:2d:ee:05:5f:27:47:93:a0:
                    10:2f:21:d1:e4:eb:ea:91:ec:27:d8:d1:5d:ca:1f:
                    38:d9:e7:39:62:4f:b0:38:6e:33:00:cf:8e:63:1a:
                    75:6f:f5:ea:ee:07:8c:cf:6c:84:0b:d6:9f:1f:5a:
                    5b:90:ec:a2:04:86:83:d3:b8:ed:8d:b9:4f:c1:e8:
                    d4:6b:f8:8a:55:8f:32:cd:cb:d1:c1:fa:24:e9:35:
                    9d:0e:ab:c6:06:1a:58:28:7e:12:76:20:36:6e:26:
                    7e:11:27:ba:6d:cc:4c:49:8b:dd:db:14:1c:fd:a2:
                    f4:be:3a:c5:37:ab:ca:e5:73:59:ec:a3:ff:e4:2d:
                    e7:4d:78:f4:e3:8c:14:1b:49:27:84:b1:0e:a1:0f:
                    12:55:ec:e0:ee:a9:b8:a1:07:b3:57:19:fb:09:99:
                    10:a2:fc:f1:f6:7a:63:09:27:4e:b5:6d:b0:d9:67:
                    b2:d2:46:b2:e0:8c:53:2f:c9:b9:dd:28:40:60:2c:
                    80:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4C:56:C2:22:21:39:CC:F7:8D:ED:09:4B:28:7C:A7:8F:3E:E4:ED
            X509v3 Authority Key Identifier:
                keyid:30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:09:5f:d3:66:3e:cd:f5:6f:79:f9:dc:91:f9:c9:42:82:ce:
         63:40:1f:2f:d6:b5:5a:f3:ab:e7:48:9b:6a:7b:ae:0f:4d:c4:
         5d:16:d4:ab:ab:f0:e1:1b:3c:1c:fa:ef:a9:97:fa:11:9d:1c:
         6a:f3:27:5a:87:fc:9d:33:db:e7:6b:df:3a:27:98:54:1e:fe:
         bb:47:0e:49:5f:78:46:6e:f6:fe:87:03:0d:05:80:b4:6d:d9:
         2c:bf:91:43:4c:af:b0:87:a3:ea:48:15:20:2e:e7:13:44:36:
         1c:7e:5e:9a:40:41:8a:2f:bd:4d:06:ee:20:d3:9f:3d:dd:70:
         b4:83:7d:b8:03:de:6b:4f:ad:50:71:db:68:af:c3:95:93:3e:
         08:0e:b3:6a:f0:d7:2e:46:21:48:52:e5:43:d0:5d:c6:29:a4:
         e3:b9:f5:b8:22:e2:63:17:01:4b:87:6b:a0:5d:a2:dc:e6:06:
         46:d8:8f:c2:db:1f:4d:75:d6:4b:70:f4:e4:e3:ae:05:36:80:
         f0:05:5a:d5:62:d4:eb:b8:47:96:ea:ba:e5:99:1a:c2:3e:ac:
         55:b3:9f:70:52:7d:bb:06:59:81:86:45:34:d5:0b:b6:be:cb:
         9a:2b:18:ee:c2:fc:02:a3:e8:99:e5:e6:8e:e7:25:46:f4:2b:
         49:bd:d3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:45:56 2026 by rpki-client