This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File:                     mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier:          3skEJULJHnhZZnTOEYrgHHFsylTvxjOxJdZFpzwV3GU=
Subject key identifier:   30:00:44:60:D5:95:13:A1:D4:73:8B:92:34:3F:E4:BF:0C:E1:F7:CC
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer:       /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial:       019C41A1D17BFAD6F04C2E84F09ACA27D0DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 09:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:49 +0000
Files and hashes:         1: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: 180dH6a8SB69MgJYgVw42FU8x7TjN4wJm+BUTk6f2Vs=)
                          2: s3PhyUwOeXidBN-bO1cXle0zxkc.roa (hash: m1yCoIslCCFawVsviGgtGHxVd9skui2ny3tBhKLzDTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:d1:7b:fa:d6:f0:4c:2e:84:f0:9a:ca:27:d0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
        Validity
            Not Before: Feb  9 09:00:49 2026 GMT
            Not After : Feb 10 09:00:49 2026 GMT
        Subject: CN=30004460d59513a1d4738b92343fe4bf0ce1f7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:71:4c:11:2e:49:c4:c6:fa:d4:3c:c4:27:
                    85:34:df:e2:37:59:43:b9:50:e4:d7:e8:2a:99:bc:
                    c6:1c:41:fd:3f:20:75:7b:5f:39:b3:55:aa:b8:84:
                    f8:0c:6d:63:07:ed:88:71:df:b7:8b:65:c2:06:4f:
                    3c:10:5f:9c:73:64:2d:71:db:57:ec:3a:73:4c:e1:
                    a2:be:a8:e9:d6:cf:45:50:96:47:96:e0:b9:08:ed:
                    54:5c:da:28:72:dc:dd:1c:1f:fd:1a:1e:50:01:d8:
                    b7:b3:da:81:3a:c2:ca:3b:ba:c3:69:ac:a9:59:fe:
                    9b:d9:12:68:3d:f9:f7:2e:4e:99:00:c7:c5:22:30:
                    df:b2:69:d3:d9:e1:97:c7:53:34:f0:6d:07:f8:98:
                    84:11:30:86:4c:4a:5f:81:04:7f:21:51:e2:fd:fc:
                    b2:b3:8c:04:38:6a:89:38:bf:73:ea:1e:13:25:93:
                    5e:4c:ac:53:a2:5f:ca:2f:64:c9:38:e6:62:51:da:
                    23:56:08:ce:7d:ef:cc:0b:c3:bd:d0:24:36:55:9a:
                    f7:13:fc:9d:3f:ea:27:94:21:f0:16:74:fc:dd:ca:
                    e2:7e:10:dd:72:3b:38:b8:aa:3a:c9:c7:41:c2:8e:
                    e7:a5:00:f9:0c:d6:8b:67:c9:6e:09:56:d0:23:15:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:00:44:60:D5:95:13:A1:D4:73:8B:92:34:3F:E4:BF:0C:E1:F7:CC
            X509v3 Authority Key Identifier:
                keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:c1:86:42:c2:8f:31:bd:ec:b4:82:fc:b7:2a:e4:31:cf:46:
         dd:5b:25:64:ed:68:12:39:47:71:72:16:11:35:89:46:0a:e8:
         99:89:a2:21:5a:72:a9:63:e6:9c:32:80:a7:03:67:c4:cb:fd:
         b2:ff:f9:11:8c:8e:49:4f:c2:a7:d7:96:44:68:7e:94:a2:35:
         98:cb:80:57:e0:35:9d:38:b9:62:da:a0:88:e8:ee:ef:c9:94:
         1c:16:a0:2f:66:a0:df:e4:fb:4f:20:cb:85:18:63:d7:95:fa:
         18:21:54:94:82:e1:3d:a2:88:51:8d:1a:a9:a4:e3:ad:94:5b:
         73:d1:6e:86:70:24:ac:ee:0b:0e:a9:21:b9:7f:d5:2b:e9:09:
         d2:83:7e:eb:8b:0f:5f:62:ea:ae:60:5a:46:79:f3:cc:36:cd:
         6c:06:14:70:ac:d3:03:e3:ce:eb:86:b3:ce:49:f7:ad:92:f3:
         17:3c:a0:86:63:a9:ab:b9:b4:ae:4c:6c:85:53:a5:f9:93:37:
         54:16:45:c9:11:13:a5:dc:92:32:9b:0a:8a:09:48:4c:94:83:
         b5:c7:ad:9a:62:7a:65:52:5a:53:a8:d2:c3:47:d9:eb:64:ee:
         91:d0:e3:09:9b:a0:68:bb:98:3f:1e:a2:ad:a1:0e:ed:74:15:
         a5:46:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:37 2026 by rpki-client