This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
File:                     iSWuMjSiyXwn9171HT_zJr4GDiw.mft (raw, json)
Hash identifier:          hIafnCUSsRl5nNZXKybJg0ohREimvB8PREsEfsjpZM8=
Subject key identifier:   61:54:7F:03:60:11:0D:37:53:D5:E1:B6:AB:FF:9E:F5:20:ED:D6:26
Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
Certificate issuer:       /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Certificate serial:       019C41D86AA2D45C2F98C7FED84B1DD02388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
Manifest number:          180B
Signing time:             Mon 09 Feb 2026 10:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:27 +0000
Files and hashes:         1: iSWuMjSiyXwn9171HT_zJr4GDiw.crl (hash: GF3XXvm4ZRjgcY3EQ0CiLs9/XiAyOrzhPCzN6ZsszhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:6a:a2:d4:5c:2f:98:c7:fe:d8:4b:1d:d0:23:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
        Validity
            Not Before: Feb  9 10:00:27 2026 GMT
            Not After : Feb 10 10:00:27 2026 GMT
        Subject: CN=61547f0360110d3753d5e1b6abff9ef520edd626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:e2:85:84:36:ca:87:25:3d:ce:b5:ac:87:
                    e4:af:6d:94:17:68:06:9e:b4:fc:71:20:ab:52:d8:
                    cd:36:9e:80:44:33:32:b6:80:50:af:2e:fe:37:6f:
                    fe:a4:91:a5:c4:c3:c7:42:d4:6a:64:16:c0:57:e2:
                    84:a8:bf:e3:ea:2e:1e:3f:9d:a5:d6:91:49:5b:b0:
                    52:0b:0e:6b:60:e5:0a:82:cf:86:c1:28:6f:4a:4a:
                    84:58:85:c7:51:d1:1a:66:72:c0:e8:92:4a:b9:d0:
                    84:43:39:0d:33:3f:59:6c:4d:0b:39:88:67:4a:37:
                    5c:b9:82:eb:75:65:d6:1b:82:de:96:9f:2b:86:ab:
                    0c:7e:ad:6f:21:33:ec:28:23:b6:73:d1:63:48:55:
                    1f:0f:a7:19:9c:1a:3b:bd:f9:22:db:c2:dd:07:f3:
                    e6:7c:4d:62:64:6e:29:29:71:d7:70:d5:80:21:bd:
                    d3:02:5a:f7:b7:4b:69:9b:1f:b8:f5:8f:3c:84:0a:
                    fe:dd:52:5a:c9:42:e3:b1:c8:f5:05:2e:74:0f:12:
                    45:f0:0c:ef:7f:8f:41:80:0d:95:92:01:c4:f2:db:
                    46:f5:2d:bf:98:60:06:79:09:ac:81:7f:50:73:3f:
                    db:33:d0:46:ba:c2:1a:ea:57:0c:27:32:cd:36:e8:
                    08:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:54:7F:03:60:11:0D:37:53:D5:E1:B6:AB:FF:9E:F5:20:ED:D6:26
            X509v3 Authority Key Identifier:
                keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:2e:4f:e9:a1:a3:7b:4b:e6:91:85:ed:5d:2d:08:af:83:39:
         60:39:25:8c:79:2f:a1:d4:c7:b7:6c:a2:38:40:ac:4f:81:f2:
         96:fb:d7:47:8a:19:04:21:50:00:33:d3:a0:b3:54:e7:31:48:
         ad:ae:74:b1:a3:7f:b3:66:b1:5a:e4:13:93:a3:d5:0c:5d:55:
         75:be:e9:f6:ab:30:f6:84:e4:e2:97:ad:25:e9:d1:49:d0:53:
         38:66:47:40:02:6a:05:eb:a9:7b:12:0c:c9:3c:2d:f1:78:d5:
         6e:77:52:c3:01:d1:92:b2:c6:99:56:8f:28:5f:a6:05:80:06:
         f9:81:42:4f:36:eb:a8:a5:41:a9:b5:d6:b2:db:96:f2:22:01:
         de:c4:b6:ea:7d:58:8d:c9:5f:3c:17:dd:e6:a8:e2:ba:da:5d:
         65:37:73:5f:ce:25:8f:98:cb:e6:db:1e:50:f4:3a:8d:f2:8c:
         28:b9:d2:53:6b:6a:92:df:35:65:9a:fa:79:ba:8a:0b:60:80:
         35:b1:77:ef:52:76:3f:11:90:da:a9:0c:aa:04:09:83:61:65:
         32:fe:c8:07:1a:0a:aa:65:6a:39:b8:59:a9:68:d2:e0:b6:ff:
         f0:68:d4:bc:23:04:49:31:43:26:27:62:6f:38:fe:e6:d8:41:
         b5:56:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:49 2026 by rpki-client