This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
File:                     c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json)
Hash identifier:          GUs6B0ORLs+YQaVdjLYmDeTTwbo3e+z3C4Ue1CxuPV0=
Subject key identifier:   42:D8:E1:97:61:04:F3:23:7F:64:DE:9F:33:15:47:8B:7D:DC:3B:48
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Certificate issuer:       /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial:       019C416A8F40553775039AC15F4A25B4E9C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 08:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:28 +0000
Files and hashes:         1: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: +bRbhv4ZZ2qaYttJrhYsLJtq92HJhfazjXJA1aV5nr0=)
                          2: fy0xLRcedKrdOz_tcqW1Wz9EYV8.roa (hash: UicbF6HqFzNjuTONdGcIiDeIjerH1Ziz3AoeI+o7LaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:8f:40:55:37:75:03:9a:c1:5f:4a:25:b4:e9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
        Validity
            Not Before: Feb  9 08:00:28 2026 GMT
            Not After : Feb 10 08:00:28 2026 GMT
        Subject: CN=42d8e1976104f3237f64de9f3315478b7ddc3b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:09:26:10:4e:e5:3e:b5:50:c2:14:ab:f3:8d:
                    55:59:4c:a2:a3:ef:e4:f8:e9:9a:74:0e:f8:bf:90:
                    a3:ef:25:ed:f3:8d:ad:fa:b7:38:29:1d:56:57:14:
                    e9:2f:c9:a7:f0:b6:1b:20:23:38:81:ee:7d:fe:66:
                    23:e1:11:8c:18:ba:cf:4d:b6:8e:c7:8e:48:b9:f5:
                    1c:36:64:3e:04:69:71:bf:49:b4:aa:13:8d:d5:18:
                    30:08:92:51:ac:6c:7a:86:72:d3:52:d5:38:12:9a:
                    a3:0f:64:e5:2c:03:46:30:3a:88:97:8a:3a:ae:48:
                    a6:5a:47:43:8f:02:b5:eb:ad:66:fe:e3:2b:55:53:
                    8d:4a:5c:de:28:59:05:3e:8c:03:97:94:ca:4c:07:
                    aa:02:dc:51:28:9f:ed:0b:bb:6a:78:82:c1:2c:9f:
                    e9:d5:9b:c9:d4:76:38:15:72:f3:86:57:7a:7a:f8:
                    6a:ac:18:0f:a4:66:a1:63:0d:e9:4f:2e:61:96:18:
                    b8:64:3f:99:bc:53:f4:3b:15:e3:e8:a9:58:d6:40:
                    06:9c:32:1d:58:c8:fe:c2:eb:12:39:5b:8e:3a:ad:
                    02:09:16:39:32:3a:a5:c6:26:29:03:c9:8e:80:49:
                    fb:24:4a:ef:20:e6:45:e6:b6:0e:f5:db:3a:2a:48:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D8:E1:97:61:04:F3:23:7F:64:DE:9F:33:15:47:8B:7D:DC:3B:48
            X509v3 Authority Key Identifier:
                keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6a:90:d9:6a:15:25:76:e8:fe:10:cb:86:94:70:e0:a7:cb:
         b0:7b:bd:0b:53:80:df:19:85:f5:36:5e:b0:06:e0:49:90:01:
         9f:87:4d:3d:ce:ac:d4:d1:3f:f4:b7:d6:ce:9f:40:f1:1b:0e:
         10:10:1f:ab:49:99:69:1a:10:df:ec:1c:36:96:3f:86:4b:ec:
         e9:ae:db:7a:df:ca:46:cc:69:d3:63:fc:69:46:f1:29:d1:1c:
         6f:f2:05:b5:2d:ef:a2:7c:4b:ad:c3:af:4b:1e:38:4f:e4:5b:
         5c:1b:e7:d5:03:3c:ce:e1:37:27:79:ae:d7:c4:12:20:da:3d:
         5b:be:3b:65:0c:ae:59:a2:5f:f3:45:9e:22:5c:98:d8:1b:7f:
         fb:43:50:f8:03:08:19:63:23:c5:14:66:19:f1:90:e5:91:20:
         68:57:85:02:89:29:15:2b:eb:23:3f:3f:b7:f5:52:f5:ff:92:
         e5:66:e6:ea:c1:25:f7:4e:c2:01:34:05:46:56:11:c5:40:5b:
         38:fc:4a:6f:48:75:74:47:dc:43:be:a4:6f:05:36:02:fe:c2:
         aa:4b:17:c0:aa:9a:3b:e3:0e:08:0c:6a:aa:6c:f2:84:a7:7b:
         37:23:a9:86:8b:da:70:d5:3a:f8:b4:22:d8:a9:85:a1:7d:e7:
         cc:e4:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:26 2026 by rpki-client