This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
File:                     W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json)
Hash identifier:          MzvUQ2jmbUyOqF1IakDCaB/W4bhlWas3ze/W+q1nE3I=
Subject key identifier:   F9:42:FC:91:44:AB:DC:07:D2:AF:50:E8:83:9F:C7:5C:14:2E:33:A7
Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
Certificate issuer:       /CN=5bbd69d998484c139fac1265a645745f3333cf1d
Certificate serial:       019C4510655B6CF0EB5783BCA74568495D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
Manifest number:          180F
Signing time:             Tue 10 Feb 2026 01:00:28 +0000
Manifest this update:     Tue 10 Feb 2026 01:00:28 +0000
Manifest next update:     Wed 11 Feb 2026 01:00:28 +0000
Files and hashes:         1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: ioeEReYcGws6U2VZ4sLQ/Imtz3WI0gM0IGcDWoDCoog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:10:65:5b:6c:f0:eb:57:83:bc:a7:45:68:49:5d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d
        Validity
            Not Before: Feb 10 01:00:28 2026 GMT
            Not After : Feb 11 01:00:28 2026 GMT
        Subject: CN=f942fc9144abdc07d2af50e8839fc75c142e33a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:cb:1c:68:fb:05:1a:f0:68:25:bd:3b:bd:
                    6c:e1:e8:a3:02:27:c8:14:97:f2:2f:52:ff:79:16:
                    f9:84:27:97:09:68:9a:a1:2d:1c:0f:38:e4:07:e9:
                    12:34:bb:11:eb:3b:e1:f1:78:5c:cd:ec:3b:cb:86:
                    4f:2f:b7:32:0d:3a:59:a5:fc:3e:81:4b:1b:1f:e3:
                    e2:f0:ba:b4:ca:27:b4:7d:e4:93:31:7d:01:de:51:
                    46:d4:8a:38:72:3c:77:a4:d5:c9:d1:97:d9:6d:1a:
                    51:b6:ae:09:68:6c:a9:49:de:af:a0:52:0f:80:80:
                    fe:96:f0:65:a9:07:30:a6:c3:c9:cd:b6:1d:de:cd:
                    16:fb:bc:e8:da:62:97:9a:76:c6:32:e6:32:99:59:
                    c2:00:40:60:08:ad:8a:19:f3:af:a8:8c:62:e2:94:
                    e0:56:f0:a5:b4:5c:b0:57:db:5f:91:3b:df:54:14:
                    6a:d9:57:b4:b6:66:0a:33:5f:e0:77:98:56:5a:18:
                    39:d9:98:9f:cf:0d:a3:13:0d:a5:a6:f4:e6:e7:3d:
                    57:7e:50:4b:81:3d:df:c6:a9:1c:bd:97:44:80:f1:
                    f6:d1:7b:35:82:26:9a:cc:c3:c2:fa:33:63:47:af:
                    a7:8e:9c:dc:3c:9c:2f:37:76:c8:27:de:37:c7:ce:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:42:FC:91:44:AB:DC:07:D2:AF:50:E8:83:9F:C7:5C:14:2E:33:A7
            X509v3 Authority Key Identifier:
                keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:76:8b:c3:17:b5:5d:6c:9b:33:4e:51:94:d7:c4:13:02:1c:
         86:6c:00:1b:48:d8:09:0b:87:d4:61:75:33:73:a1:26:df:dd:
         34:64:0c:53:36:e0:99:d5:45:6a:24:e0:dc:c9:2e:61:06:4b:
         3d:1b:89:ae:c5:15:a3:5a:48:c3:9a:a0:e8:d0:46:83:25:c0:
         4b:6e:3a:3e:be:d3:12:5a:80:b6:3e:b2:8c:6c:bc:da:07:68:
         49:12:5c:79:fc:dd:b8:aa:87:40:3f:e7:bf:2d:42:a0:6d:f2:
         23:2e:da:6d:be:72:be:fa:98:a1:ea:26:68:91:f0:e0:d5:6e:
         d3:d0:bb:35:f2:a7:5e:82:4d:37:f8:84:cc:80:cd:19:87:00:
         7d:69:c9:40:4d:36:46:4b:3a:ab:6d:bc:75:53:98:66:38:8e:
         24:18:d7:05:ff:67:4c:ae:6f:6b:41:7b:a0:24:a4:91:31:68:
         76:1c:56:3f:d2:83:68:4a:c8:b9:d6:77:fe:f5:ee:97:3c:f9:
         32:35:d4:9d:23:57:00:bf:ee:22:71:91:78:48:ab:c9:60:ce:
         db:8e:7e:19:4a:80:7a:3e:97:de:ff:20:5b:c5:01:70:24:e3:
         b8:7a:5f:59:b6:4d:00:1b:30:f6:ab:a2:22:f9:42:78:ee:e3:
         e2:0c:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:20:32 2026 by rpki-client