This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
File:                     imo0EVg-JhQzSS5QR88xxGw9LB0.mft (raw, json)
Hash identifier:          rmhyMDBAS5SYq6+JcP4rxhufKNR/QF0tPbhzvhQBpnQ=
Subject key identifier:   F7:BE:9D:9B:19:02:7F:9D:CE:D8:B2:BA:02:7F:13:48:FF:3F:F7:BF
Authority key identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
Certificate issuer:       /CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Certificate serial:       019C427DDECA099FADB49481A7FCC84711B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 13:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:11 +0000
Files and hashes:         1: imo0EVg-JhQzSS5QR88xxGw9LB0.crl (hash: 9maq2+3pCg25OL5rljnK/+GRbrq1UjaN8fZLnkqNtZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:de:ca:09:9f:ad:b4:94:81:a7:fc:c8:47:11:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
        Validity
            Not Before: Feb  9 13:01:11 2026 GMT
            Not After : Feb 10 13:01:11 2026 GMT
        Subject: CN=f7be9d9b19027f9dced8b2ba027f1348ff3ff7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:8b:aa:bf:76:2e:5b:73:63:ec:0d:a2:d5:
                    39:64:20:e3:41:81:6c:2f:a0:a0:29:1c:12:13:16:
                    cc:15:e3:6d:4a:19:32:8d:ee:6a:d4:50:ad:12:34:
                    4c:df:3b:b4:89:a6:81:ff:31:51:e3:33:bd:64:b6:
                    d2:79:d7:8d:91:62:78:2e:b5:e2:b1:d8:a3:97:f1:
                    fb:8f:21:1d:cc:71:31:59:ea:28:64:4c:e6:29:0b:
                    66:0a:78:2b:f6:bf:86:e2:44:46:aa:75:68:a4:75:
                    1e:58:ad:85:a6:5b:d0:da:d3:ec:76:de:11:67:d6:
                    e0:1e:3e:5c:33:b8:87:92:fa:06:a8:0a:38:d4:66:
                    4c:d3:71:73:13:84:6f:9b:94:32:3e:01:4b:1e:a3:
                    ae:c6:14:0a:22:e8:79:c4:85:c0:f5:df:9e:1a:5d:
                    f7:fa:a0:9f:1d:fe:af:31:fa:8b:9e:bb:53:67:4a:
                    0e:fa:97:84:f0:b7:14:c6:f8:77:94:2b:4f:99:92:
                    84:c1:af:da:75:e7:24:3c:44:78:4b:29:d7:e4:e0:
                    31:9f:7b:82:48:2e:e3:9a:1d:05:41:76:64:9c:8c:
                    4b:c2:a9:5e:fa:01:e1:7d:71:b8:91:15:c6:2d:a3:
                    bd:53:5f:55:e3:92:9b:8e:ca:5f:8b:7d:d4:7c:86:
                    4c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BE:9D:9B:19:02:7F:9D:CE:D8:B2:BA:02:7F:13:48:FF:3F:F7:BF
            X509v3 Authority Key Identifier:
                keyid:8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e2:d2:7d:d8:cf:81:9d:90:21:bc:b0:c4:34:7b:e8:31:50:
         c8:14:e4:07:1b:ff:52:13:2b:7d:eb:5a:97:8b:92:ab:6c:96:
         37:51:09:5f:20:cf:20:0e:a0:e6:be:6d:d6:a7:c3:d8:5d:c4:
         d1:6a:a5:9a:4e:f2:f8:a8:de:0a:5c:61:d8:fb:80:ee:ce:49:
         8a:89:6b:3b:80:af:3c:c7:fe:3f:35:2e:6a:1e:2a:e3:6b:83:
         b9:a1:0c:b3:3c:6c:dd:c8:b9:b0:b6:91:f1:7f:81:4a:d2:d0:
         8f:0b:eb:4a:1d:96:1d:75:a7:eb:d2:10:ae:36:0e:f8:64:ee:
         fd:26:b9:38:1d:7d:12:4a:79:a7:a5:fa:70:76:3a:48:2d:ca:
         65:3e:3e:c9:be:6e:1a:53:47:ce:7a:67:16:14:81:8d:85:5d:
         46:c4:6c:51:a3:b0:9e:2c:97:8b:3e:db:77:57:35:d1:f6:c1:
         b7:35:a7:47:8c:25:13:de:b9:5e:09:f5:01:42:66:0b:df:65:
         a1:a8:94:bb:78:c4:4d:3e:8d:a6:79:50:bb:6a:d9:f3:0c:fa:
         ac:9e:89:76:d8:c9:95:e2:f7:00:80:fb:e1:2e:0a:82:04:4e:
         0d:37:50:a6:02:d8:11:75:5c:01:1a:5f:81:cd:ff:8b:ac:ed:
         17:5b:2e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:34 2026 by rpki-client