This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
File:                     enUOttEsV-pkMLnwI5XK8qgb7Pg.mft (raw, json)
Hash identifier:          m4gXlQs/cS4R0JArUVsmdWRv0sbdjNj/55Bu6FurecM=
Subject key identifier:   8F:52:12:BE:42:41:BA:78:CE:54:FC:6D:C9:AF:51:07:44:6A:E7:75
Authority key identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8
Certificate issuer:       /CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
Certificate serial:       019C439029FD9F3754324F55DBCC46A3116F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 18:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:46 +0000
Files and hashes:         1: enUOttEsV-pkMLnwI5XK8qgb7Pg.crl (hash: OXBz2xnq6qfhOmdh7r+MYDOnqHp7yJQQU8dhWBY55rQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:29:fd:9f:37:54:32:4f:55:db:cc:46:a3:11:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
        Validity
            Not Before: Feb  9 18:00:46 2026 GMT
            Not After : Feb 10 18:00:46 2026 GMT
        Subject: CN=8f5212be4241ba78ce54fc6dc9af5107446ae775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:2a:66:af:f8:f8:04:bd:bd:27:52:6c:ae:
                    a6:8c:f2:51:1e:48:6a:c1:e5:4c:79:f2:bc:b5:22:
                    9d:1c:e6:a2:da:19:f6:63:08:88:63:29:a6:fd:89:
                    e7:e8:1e:2f:3c:ce:af:76:bd:bf:fb:39:e3:b9:18:
                    cc:af:7b:9b:62:32:b9:9f:d2:91:6d:37:e3:7d:07:
                    01:a8:a1:6d:16:b1:ce:85:c1:53:cb:a6:78:c1:ac:
                    58:4f:65:0a:2f:1d:04:b4:03:73:87:77:a4:dc:1b:
                    2c:e1:82:c7:78:9a:22:c6:61:b6:f7:2d:61:3c:dd:
                    c6:e3:ce:81:69:9a:1d:77:3c:06:ad:9c:2c:23:cc:
                    61:88:b0:25:82:d6:c8:15:7a:12:ef:6c:32:a2:ed:
                    57:b5:6d:67:e3:8c:39:a9:07:97:6e:8b:07:e1:62:
                    2d:c4:3a:1b:ba:a4:da:78:14:42:64:a2:0a:db:80:
                    8c:08:6a:91:2c:ce:4e:69:51:96:6d:3d:89:81:ec:
                    3d:00:41:d0:99:65:b9:48:d7:c8:50:06:9e:19:d8:
                    7a:8c:27:46:69:cf:5a:65:81:35:e9:76:e1:f4:a6:
                    70:b3:95:bf:68:3a:df:18:44:e2:3a:e9:e6:64:0b:
                    66:5b:f4:3b:c0:8e:ca:6a:f5:c9:88:b4:5e:4f:00:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:52:12:BE:42:41:BA:78:CE:54:FC:6D:C9:AF:51:07:44:6A:E7:75
            X509v3 Authority Key Identifier:
                keyid:7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:77:27:2e:62:36:ff:bb:d7:91:82:26:a1:a5:36:ea:54:08:
         bc:f0:ec:80:79:0c:90:38:9c:90:08:08:b1:72:58:a3:0f:73:
         2d:6f:04:5d:48:f1:da:07:01:0f:55:8d:62:bc:6b:3b:83:3c:
         98:3f:a2:89:93:8b:ee:9e:ad:68:7c:a1:33:96:81:bf:f2:4c:
         4f:11:29:c8:55:04:be:d2:7e:2e:b2:9a:b4:8e:98:a0:f0:f9:
         d2:94:03:67:3d:38:fa:3e:b6:74:58:6b:d9:fc:c7:2e:30:5c:
         5c:89:de:87:3a:bb:08:0d:f5:c0:9d:4c:a2:08:d9:0f:0a:4d:
         08:30:79:53:65:82:d3:d5:03:01:90:31:69:32:ce:89:71:b1:
         85:03:3d:a0:70:52:77:6f:63:e3:f1:dd:43:33:cb:d3:0a:07:
         ec:71:5a:9f:04:71:23:ee:af:8c:75:09:94:1f:4d:d3:60:67:
         c8:7d:bb:ac:02:9d:2b:78:d3:f2:e9:e2:73:e9:f2:6f:ea:b0:
         6f:29:1c:60:19:97:70:63:70:ad:74:7b:97:2b:e0:0e:c9:a2:
         cc:db:03:d2:79:25:d5:86:e8:34:a6:cb:2e:af:35:2e:be:1f:
         c0:09:23:e0:10:ec:47:9a:3e:1d:06:60:44:12:e1:de:cf:3a:
         68:69:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:30 2026 by rpki-client