This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
File:                     p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json)
Hash identifier:          UB64h200jjEDxb3oud2J2CZ6yy+gxR3PlqBS8zIa0Q0=
Subject key identifier:   67:6E:52:D0:AD:4C:EF:94:60:9F:46:95:E2:4F:96:76:D7:01:41:E1
Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Certificate issuer:       /CN=a7417257cb6366ff357233b26d25dd5887da89fb
Certificate serial:       019C4322A16A8DC952FBF54E51EEC7DDD047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 16:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:08 +0000
Files and hashes:         1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: AXway3mgFPiRQJlOtqkj0K3Kf0sOkFavR1x3Bvx1XuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:a1:6a:8d:c9:52:fb:f5:4e:51:ee:c7:dd:d0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb
        Validity
            Not Before: Feb  9 16:01:08 2026 GMT
            Not After : Feb 10 16:01:08 2026 GMT
        Subject: CN=676e52d0ad4cef94609f4695e24f9676d70141e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:95:59:ec:7e:5b:02:89:76:e9:d6:bd:2a:
                    a9:8b:9e:53:6c:48:df:f1:ce:99:4e:be:69:ce:ad:
                    e4:3f:af:f6:cf:ef:ef:1f:46:69:02:ca:b8:a0:52:
                    09:9e:b6:7e:19:91:dd:e3:d5:2d:d4:43:a6:a9:c4:
                    9e:bf:5b:be:b0:ef:7b:1e:9e:ba:86:33:bd:1d:30:
                    81:b1:de:94:ef:dd:5a:7e:df:f9:52:fa:d3:e0:ed:
                    98:b0:26:e2:fd:b3:42:e8:f0:75:05:ac:12:b6:da:
                    45:cc:81:ff:35:0b:a4:b6:0c:e9:26:3f:35:33:53:
                    c9:c2:ac:ce:98:b4:cc:00:dc:3a:e6:a5:1f:92:d8:
                    94:70:f2:bb:06:97:f2:37:fe:c0:df:52:0d:00:90:
                    17:f5:6d:cb:4d:82:c1:92:75:95:a0:68:fe:6e:3e:
                    5f:f0:b1:f7:31:b1:a7:11:52:e5:7b:16:19:9e:2c:
                    c5:0b:bf:a6:63:73:da:81:3a:dd:cd:d8:97:8f:e9:
                    ed:3a:f7:cb:0b:bc:ac:06:f3:e8:8d:3c:ec:68:47:
                    c6:37:c7:2a:11:60:bf:d6:b2:71:34:1a:19:1d:9b:
                    a3:5a:0d:55:d3:6c:d7:cd:2a:14:ee:5e:df:77:a8:
                    69:79:89:6b:3d:bb:6d:0f:52:07:23:52:1f:9f:58:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6E:52:D0:AD:4C:EF:94:60:9F:46:95:E2:4F:96:76:D7:01:41:E1
            X509v3 Authority Key Identifier:
                keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8a:34:f9:6e:7d:f3:1b:67:e7:16:f1:88:ea:27:42:29:6e:
         ab:c7:ad:dc:22:49:ad:94:bc:16:e8:ee:16:d5:d1:11:87:43:
         bb:ea:ed:66:72:f8:6b:db:6c:71:c4:c9:db:9c:29:cb:eb:4d:
         e5:9d:05:93:20:66:1a:3f:61:d9:3d:76:43:39:8c:0a:05:01:
         c4:d7:be:85:91:8d:17:03:a3:33:4a:ee:66:e4:4e:76:72:71:
         d9:64:db:4e:95:37:7c:a5:e1:87:91:50:87:07:1a:a3:c9:41:
         ae:be:f4:3e:ca:87:3c:64:34:c1:b1:29:a8:81:73:60:f2:fe:
         87:0f:be:01:3b:76:b3:fa:74:d9:f8:6a:a5:ff:4f:d9:07:cb:
         d3:3e:cf:40:ca:c3:47:a7:7c:10:92:70:50:10:26:7a:c5:7d:
         02:6f:81:10:6e:cb:dd:c9:b7:dc:fe:28:d2:9c:a2:47:3f:a1:
         34:45:44:ca:c1:5c:20:88:cd:4e:13:27:fe:aa:c2:ca:37:72:
         b3:98:58:d0:b4:1f:6d:9e:ec:ed:ce:43:94:34:47:f5:17:4c:
         b8:d4:94:01:58:d6:78:a3:4c:29:2f:3d:21:99:fc:ca:64:f5:
         7e:f5:63:bc:d2:6e:db:4f:cd:7f:7d:28:ca:e1:bf:dc:1f:e2:
         ae:c8:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:17 2026 by rpki-client