This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
File:                     iMaZNJivBRiWLl9I1chG3BddGIQ.mft (raw, json)
Hash identifier:          uediacnKmm6cLWDWQljiuPKtjiTUE+NZcgSrt/1EwS4=
Subject key identifier:   A1:56:19:99:74:42:DA:46:47:1D:1C:AC:59:CC:56:57:FC:15:52:97
Authority key identifier: 88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
Certificate issuer:       /CN=88c6993498af0518962e5f48d5c846dc175d1884
Certificate serial:       019C43909E98BC57156A05CCCDC2EC30B57D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 18:01:16 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:16 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:16 +0000
Files and hashes:         1: iMaZNJivBRiWLl9I1chG3BddGIQ.crl (hash: adU6Qi7so3ifH/2n5qGDNWjeJgy1t4i1kWbzAivHsj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:9e:98:bc:57:15:6a:05:cc:cd:c2:ec:30:b5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88c6993498af0518962e5f48d5c846dc175d1884
        Validity
            Not Before: Feb  9 18:01:16 2026 GMT
            Not After : Feb 10 18:01:16 2026 GMT
        Subject: CN=a15619997442da46471d1cac59cc5657fc155297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0e:18:41:85:b6:91:5f:f9:72:16:c7:1f:45:
                    a3:b2:60:15:70:75:6d:2a:4e:f7:f6:7d:ae:16:15:
                    15:d7:35:9f:0c:4f:ef:6e:1b:ec:94:6b:aa:2a:bf:
                    a1:84:c0:b4:e3:59:2f:6d:bf:6e:9d:41:db:aa:13:
                    3f:11:fe:66:ad:d6:3f:5a:66:dd:5c:6c:0c:97:3d:
                    80:20:79:d2:51:f8:94:cf:87:58:d5:e1:0b:7d:8a:
                    81:f4:68:e6:64:29:93:2e:f1:f7:9e:22:5d:51:cf:
                    96:35:90:5c:75:99:0c:51:07:23:68:4d:7d:35:2b:
                    92:a1:36:b4:41:9f:ea:65:90:3b:11:a0:07:ec:1d:
                    36:86:94:b7:e5:06:3e:4b:9b:22:35:4c:2d:75:8e:
                    ad:96:c1:ef:cc:bf:14:3a:44:ef:73:8c:87:a4:e4:
                    32:e4:95:ed:44:de:c4:1e:df:d0:1e:19:07:0a:e9:
                    22:ce:a4:ee:07:49:61:26:c9:c5:9b:ce:7d:48:29:
                    b6:c6:b7:8d:8e:31:f8:e9:82:7c:ad:39:de:47:53:
                    f0:9b:37:05:b8:31:16:d3:0b:8a:2d:c7:dd:d4:39:
                    24:d6:de:95:f9:cf:39:1d:67:a8:e9:02:5b:67:1e:
                    8e:41:69:fe:f3:b2:b1:57:59:27:f7:da:7f:89:e8:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:56:19:99:74:42:DA:46:47:1D:1C:AC:59:CC:56:57:FC:15:52:97
            X509v3 Authority Key Identifier:
                keyid:88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:94:44:58:ae:5f:85:94:dd:05:31:f4:e2:e3:64:54:61:2a:
         7c:02:86:c4:86:6d:3a:9c:8f:4b:19:28:e8:a1:1d:a0:ab:4f:
         21:c0:a9:87:51:d9:eb:16:e0:27:06:11:03:5d:2e:5d:f0:62:
         23:b9:26:03:97:bf:39:b7:e2:9c:00:33:a3:43:6f:8e:f7:69:
         52:fd:1e:39:b3:fb:5d:27:46:34:15:eb:8e:d8:6d:bc:b8:0f:
         2c:10:bd:1b:e0:b5:3d:f9:17:e0:51:85:4d:9c:f9:ca:d6:2e:
         17:07:7b:45:3c:f2:95:56:16:18:e7:c5:16:1d:07:6c:e3:23:
         d2:8b:98:d7:59:4c:43:c5:dc:88:4b:6c:6d:7d:9b:a8:0b:f6:
         d9:06:bf:00:0a:6b:35:ab:ba:7e:aa:2c:f2:3a:a0:98:db:73:
         79:01:5d:56:48:3d:cb:7b:29:9a:d3:dc:c7:53:82:e6:79:8e:
         5f:79:9a:55:f7:13:d3:5f:ff:b8:a9:51:d6:f2:c5:c6:16:a9:
         f7:97:4b:7a:fb:6f:46:aa:d0:7b:06:aa:a1:a6:65:29:52:25:
         ed:8b:45:e1:b6:85:9b:7f:05:3e:e6:3c:f3:32:19:34:4d:48:
         55:7f:fc:ca:7c:a4:39:84:87:35:f7:1b:6d:db:98:28:f2:03:
         17:7c:2e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:52 2026 by rpki-client