This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File:                     dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier:          yDBiTFBRYfV1iNJAg6CJLYNmKl3lbhY652ApUb7n0Zc=
Subject key identifier:   CE:5E:70:46:3A:C6:82:96:39:A0:79:D4:91:E8:56:9E:43:B8:5D:B6
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer:       /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial:       019C4321DEE29EDA52AC30B7E087572A3792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 16:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:19 +0000
Files and hashes:         1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: EbxEIQl6CQ5fZ3ILncHmOaJ55kJxMJJYUSl5EIjTq5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:de:e2:9e:da:52:ac:30:b7:e0:87:57:2a:37:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
        Validity
            Not Before: Feb  9 16:00:19 2026 GMT
            Not After : Feb 10 16:00:19 2026 GMT
        Subject: CN=ce5e70463ac6829639a079d491e8569e43b85db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c9:ee:0e:a0:14:bf:c6:e9:ef:2c:dd:f0:a0:
                    a5:1b:c4:aa:6f:96:17:fc:4a:4b:48:81:76:ad:05:
                    1e:e4:b3:c5:00:16:c6:bb:fc:e3:7c:e2:4c:d8:07:
                    cd:9b:d1:22:6f:0b:b0:a3:93:81:6c:18:97:cb:94:
                    16:54:93:f1:58:2a:21:b0:c2:78:2d:73:b1:9c:4f:
                    a3:be:4b:47:ce:40:89:d8:cc:f5:85:34:f2:f6:ed:
                    14:f3:b8:81:ba:31:46:6e:ac:67:02:35:2b:6d:b1:
                    dc:ed:4c:27:8f:56:d7:46:93:5a:df:e6:cb:01:de:
                    d6:d1:b5:46:38:03:cd:fb:90:14:20:66:63:56:69:
                    de:29:46:ad:47:db:a6:ca:c7:ee:ef:7f:c8:1a:20:
                    3c:17:3a:0b:91:6d:e9:89:f4:36:01:5a:f0:ae:75:
                    32:7c:4e:10:18:5b:55:7d:fd:f7:45:fd:6e:c9:64:
                    90:cf:ae:f4:f4:84:12:d0:bb:40:c1:a0:95:58:75:
                    5f:c3:f8:aa:9d:97:cb:b4:7b:77:aa:86:36:ef:31:
                    67:f5:32:82:32:35:6f:7a:27:f2:ed:a9:57:bd:35:
                    8f:f4:e2:b7:56:fb:d2:71:74:8c:7a:41:45:b9:40:
                    c6:21:86:95:1a:47:2c:a1:33:5a:bf:11:f2:9f:df:
                    88:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5E:70:46:3A:C6:82:96:39:A0:79:D4:91:E8:56:9E:43:B8:5D:B6
            X509v3 Authority Key Identifier:
                keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:05:1c:83:60:49:cc:22:79:23:da:a5:ed:60:29:49:ef:12:
         67:2a:33:9c:87:c4:a0:2e:4d:9d:ad:ca:a4:b3:3f:c4:27:7b:
         4c:7e:31:a5:ac:8c:86:f5:80:8f:cb:ed:9c:24:db:39:fa:dc:
         f7:d3:18:ba:c8:97:17:83:57:8c:20:5d:49:b3:b6:de:0b:dd:
         be:92:d7:de:2f:97:ba:c5:01:62:b9:68:30:40:cb:a9:38:b2:
         3d:83:93:27:c7:53:9c:37:77:df:3b:47:9c:83:c3:ba:86:f5:
         ec:e6:9b:39:b1:f6:6f:e8:92:27:5c:0b:46:a7:2f:86:78:3f:
         81:af:59:81:ee:f8:9d:ed:d7:30:01:ab:26:78:d4:83:51:6e:
         cf:9c:44:c6:5d:44:8b:d1:c7:e2:06:68:cf:1d:e1:73:79:37:
         e4:1d:67:ed:10:c1:1e:7f:67:47:d7:62:79:15:97:09:44:2b:
         69:0f:90:94:6f:21:a2:06:65:37:aa:b9:59:69:df:2f:ea:15:
         3e:6c:47:a4:10:60:ac:6d:66:84:84:52:15:a2:13:bc:68:bb:
         c7:95:22:c8:fd:1d:43:0d:40:5e:58:6c:78:54:5e:b8:20:2d:
         60:0a:be:20:b6:22:3d:85:fa:b5:1c:02:0b:54:ea:98:dc:70:
         c5:99:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:36 2026 by rpki-client