This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
File:                     cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft (raw, json)
Hash identifier:          zev4LZ6uofkHXbUTBe6IbRp/xefCD7lex/bDQHqTBxk=
Subject key identifier:   2F:8C:09:55:83:35:E2:F1:F9:3F:68:D6:76:22:AF:14:01:43:A3:E7
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Certificate issuer:       /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial:       019C44DA18528B078AC5018A1FDD59AA1500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
Manifest number:          181F
Signing time:             Tue 10 Feb 2026 00:01:09 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:09 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:09 +0000
Files and hashes:         1: 1E2GfXyPoyKCnvX8Op-67NNeeII.roa (hash: N8Q/qvAY27SFiMXr6tcvfagA2n7ieRadFl4CNkx0CiQ=)
                          2: cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl (hash: oMLyQ9Nt2zRCD2pW5RmnjaW+yQo4nFn5tHOarWZPZGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:18:52:8b:07:8a:c5:01:8a:1f:dd:59:aa:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
        Validity
            Not Before: Feb 10 00:01:09 2026 GMT
            Not After : Feb 11 00:01:09 2026 GMT
        Subject: CN=2f8c09558335e2f1f93f68d67622af140143a3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:22:b1:e9:40:e7:64:a4:70:9e:8a:4b:c6:97:
                    d4:6b:7e:e7:8f:c3:fd:4d:88:1b:91:18:c7:d7:c6:
                    6d:f5:42:d6:10:c1:36:77:8d:98:25:f3:be:b2:2b:
                    70:cd:98:ea:07:54:4f:bf:ba:38:1a:44:0c:3f:c3:
                    4c:1f:c9:68:ce:25:00:94:1b:16:22:fe:f5:cc:55:
                    1f:9f:c6:b6:14:6e:3f:4c:b5:7d:d5:d9:70:ea:a2:
                    6d:a0:26:6a:17:0d:94:89:81:55:e1:e8:a7:88:80:
                    bf:31:6d:0b:63:10:a9:8e:6f:da:55:dc:da:58:f4:
                    f2:9b:78:4a:06:3a:2e:d2:33:2d:6f:2a:95:41:ed:
                    a2:34:5e:0f:b8:24:f5:e7:90:57:bb:9d:17:07:b2:
                    5d:6d:62:99:88:ac:1e:9f:2d:5e:67:96:82:35:7c:
                    de:10:36:0c:b0:e5:9a:5c:13:2b:9a:01:b3:bf:35:
                    f7:48:6c:87:ff:41:c8:c6:89:9e:ff:75:61:9b:5b:
                    42:8d:8e:93:fb:b5:20:70:84:a2:e1:d4:af:35:7e:
                    3d:67:20:06:49:44:96:ad:33:a5:ec:6a:10:93:a5:
                    fe:79:26:c0:4f:02:13:71:95:66:b1:cc:79:9d:69:
                    aa:d9:37:a8:e8:7c:94:cb:b7:23:92:40:8b:8e:20:
                    ab:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8C:09:55:83:35:E2:F1:F9:3F:68:D6:76:22:AF:14:01:43:A3:E7
            X509v3 Authority Key Identifier:
                keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9d:72:1b:79:01:f4:a4:20:af:fe:cf:76:de:91:18:33:00:
         2b:48:cf:e2:fb:4c:74:30:91:ca:b7:b5:93:91:ee:36:8f:b7:
         0b:b7:6b:d4:56:6f:af:49:ce:35:c4:bf:b4:fd:42:69:e3:2c:
         aa:36:22:4b:46:5b:7a:93:f0:2a:97:46:bd:d4:9b:bc:60:42:
         d7:bc:f9:f5:24:02:a2:2c:8f:de:4d:33:55:dd:db:29:7e:34:
         86:a1:1e:cf:2d:18:96:b4:e9:fc:b7:ba:d0:6a:8e:b9:67:04:
         7b:ed:56:c4:be:7a:28:b9:81:0a:2f:26:a5:9f:e2:2a:10:bf:
         da:8c:77:73:e2:46:97:65:cd:df:c8:c0:44:c1:45:d9:8e:ca:
         d9:2f:82:57:2f:14:1b:6c:68:50:7b:d9:0f:25:a0:0a:77:25:
         61:11:14:46:fd:44:51:05:46:99:b4:d6:db:80:27:64:1a:73:
         50:e4:1e:54:f7:bb:aa:68:55:7e:9a:16:96:48:cc:ec:b8:ca:
         5f:fa:08:3a:ad:c2:7d:7f:0c:fc:d9:5d:4e:2d:36:9f:69:70:
         35:1d:9d:52:70:49:6c:e2:8a:fe:6b:92:8b:36:f2:14:ef:84:
         bf:1d:54:7b:ac:03:a1:50:9e:ed:34:13:78:7e:18:68:81:5d:
         c9:92:dd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:22:12 2026 by rpki-client