This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
File:                     L_jPdWH81tdmt6rTHb94XwKRSfA.mft (raw, json)
Hash identifier:          yvdL9IgMJaY/6bK6P0mApkNU+arJaOZzcPMNEq2khu8=
Subject key identifier:   02:B4:82:B0:97:A5:6F:3D:1B:E7:14:52:37:7B:7F:B7:A8:0E:7E:DD
Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
Certificate issuer:       /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Certificate serial:       019C4390033D3DF249947EC2AF82C285269F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 18:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:37 +0000
Files and hashes:         1: L_jPdWH81tdmt6rTHb94XwKRSfA.crl (hash: mdzmFP0+Cbdm1ntAtuYW9ThbpGdO/nRjVmv0HrEAPYg=)
                          2: m6sGLj406qOvs-B7a8lFcbKeNeU.roa (hash: ASVqS1lrRLqRqch7/XZOtlO/MWV6Jau0UM6Za5KHJnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:03:3d:3d:f2:49:94:7e:c2:af:82:c2:85:26:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
        Validity
            Not Before: Feb  9 18:00:37 2026 GMT
            Not After : Feb 10 18:00:37 2026 GMT
        Subject: CN=02b482b097a56f3d1be71452377b7fb7a80e7edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:ac:ac:8f:ef:12:e6:7a:92:77:ce:64:90:
                    8b:58:e7:2f:d5:d0:6b:7e:1c:3f:c7:59:5d:62:8a:
                    67:98:4f:90:37:c0:98:10:88:25:ab:3a:dc:f0:ab:
                    a1:59:8c:f7:8f:5a:15:c2:83:52:c6:54:22:9a:bd:
                    37:33:c2:de:2e:66:4f:b0:f4:6b:68:39:21:6a:a2:
                    67:7e:8e:fb:0d:95:c5:e2:19:7e:e4:71:fa:19:30:
                    bd:11:2f:90:29:06:0b:96:5f:bf:04:ac:85:03:47:
                    64:6b:59:5a:a2:6a:88:ea:81:0d:f9:e7:58:57:65:
                    d0:dd:01:c9:d1:96:96:0e:9d:03:61:f4:69:4c:0b:
                    7a:6f:04:c8:56:28:b6:1e:de:90:f5:41:98:22:eb:
                    8c:73:cd:13:84:38:aa:62:79:e3:0f:2b:81:78:8c:
                    4e:f7:76:dd:9e:d8:54:e2:5f:30:77:3b:17:de:21:
                    4c:f2:d8:fd:14:fd:82:ea:82:fa:3d:c5:86:0d:99:
                    de:cb:5e:13:8b:86:31:a6:36:e6:17:b4:04:8f:24:
                    cb:8d:9b:38:a6:e3:af:0d:fa:22:d4:77:64:7f:56:
                    e3:7c:9e:58:0f:61:75:d2:8a:1d:d4:b9:e6:d3:a0:
                    80:59:57:94:3a:d3:8b:54:e7:66:0b:23:82:78:b5:
                    8c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B4:82:B0:97:A5:6F:3D:1B:E7:14:52:37:7B:7F:B7:A8:0E:7E:DD
            X509v3 Authority Key Identifier:
                keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:1d:64:6b:4b:74:a9:de:eb:84:96:6e:72:22:d5:ed:33:ac:
         df:e7:15:61:76:46:33:48:8d:4b:6e:32:0b:5b:d6:7d:93:b5:
         84:56:7f:14:77:75:2e:8e:c3:50:eb:85:2f:71:11:60:56:1e:
         85:2f:24:7d:77:97:99:dc:ae:df:ee:9f:3d:3a:5d:d9:ce:29:
         c0:26:25:30:99:2a:d8:85:c5:5c:a7:ea:c1:63:07:80:aa:9c:
         76:8e:9e:92:24:1d:f2:75:d5:36:2e:c0:e8:fc:86:a8:7a:20:
         f0:a7:6a:72:67:a7:29:87:55:39:74:e9:fd:b7:2e:ba:41:12:
         c4:11:85:55:d9:0a:65:4a:02:f7:3f:29:bc:d6:4b:d5:93:eb:
         69:17:e2:64:83:4b:84:a7:30:89:0e:fc:8d:3c:f1:a9:0e:e0:
         79:37:74:cb:9f:da:35:ec:21:32:21:07:9f:c9:4a:43:63:4a:
         61:81:ed:7e:fb:1c:0d:f1:b6:87:e2:9f:11:10:08:92:8a:a6:
         69:4e:67:07:86:bb:3f:43:3b:7e:0c:3d:05:fa:53:46:a1:ab:
         6a:8e:5f:46:71:be:8e:98:33:fd:2c:3d:76:7a:15:26:95:20:
         df:bb:aa:6e:78:74:6a:84:3b:93:43:9d:a6:8f:43:bc:1d:3d:
         43:99:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:33 2026 by rpki-client