This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
File:                     _tPwXKP9-ef5nGXMagpnJPWTGnA.mft (raw, json)
Hash identifier:          ETUCWLNk62W0k4TpgCyL3KqhM1SUmCSpg/SL54qgHqU=
Subject key identifier:   66:F4:46:D7:F3:94:F2:10:2E:90:2A:37:61:4C:A2:BC:09:E4:4C:54
Authority key identifier: FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
Certificate issuer:       /CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Certificate serial:       019C4321DD67D799A5C1A00506D1C4F8F4F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
Manifest number:          180B
Signing time:             Mon 09 Feb 2026 16:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:18 +0000
Files and hashes:         1: _tPwXKP9-ef5nGXMagpnJPWTGnA.crl (hash: t1sIhDGUnl6M8sEEhi5STuPaYPSthTsmh7oYMiGLDJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:dd:67:d7:99:a5:c1:a0:05:06:d1:c4:f8:f4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
        Validity
            Not Before: Feb  9 16:00:18 2026 GMT
            Not After : Feb 10 16:00:18 2026 GMT
        Subject: CN=66f446d7f394f2102e902a37614ca2bc09e44c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:dc:0d:13:8d:92:69:22:a2:7b:24:90:bf:
                    28:99:c1:84:d4:8e:a6:39:5b:0d:d9:58:11:38:20:
                    08:23:5f:79:18:fa:3c:75:e3:8f:52:b2:1d:2b:d4:
                    6d:b4:aa:9e:10:b6:c3:a8:f1:7d:27:9a:37:82:16:
                    b8:55:91:d0:2d:92:70:52:2f:26:11:74:b1:94:14:
                    6a:38:45:f9:1b:52:e3:1f:56:0c:e9:b4:c3:2b:24:
                    e8:cd:21:f5:1a:fe:68:6b:79:7f:0c:6f:d3:dd:98:
                    47:e8:f1:d3:18:97:80:56:c3:41:19:a8:4b:57:e1:
                    22:76:67:c3:21:8b:68:c3:ef:4c:29:eb:a4:a9:c8:
                    ce:62:4c:a1:35:c2:b0:6b:7d:6b:5c:47:b6:2d:3a:
                    c3:03:e8:ed:4c:23:d1:4b:01:e9:b3:97:b5:5d:df:
                    85:77:6b:21:8a:27:84:76:ca:3e:7a:13:38:76:34:
                    8c:0c:2d:58:b9:bc:15:73:87:25:0e:2f:e8:c6:fd:
                    cc:56:04:bd:e1:0c:2d:32:22:98:fd:b8:84:ca:8c:
                    6f:93:02:67:ff:5f:4e:68:da:40:83:b5:ac:ef:c3:
                    0b:d1:96:9d:87:15:51:80:7f:57:f2:57:75:ce:ab:
                    d3:d3:34:03:44:6f:ec:77:4a:1f:5f:90:37:1e:77:
                    96:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F4:46:D7:F3:94:F2:10:2E:90:2A:37:61:4C:A2:BC:09:E4:4C:54
            X509v3 Authority Key Identifier:
                keyid:FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:13:4f:82:e6:76:75:7d:c0:b6:4f:58:65:05:85:3f:fe:f8:
         52:00:f7:ff:40:8d:b6:a7:10:ec:9b:1b:eb:62:5a:29:27:fd:
         f3:91:76:04:5c:c4:8d:91:c7:12:84:b3:d2:2f:e7:c7:18:c9:
         32:06:26:cb:74:1d:8a:39:45:ca:d1:ae:73:80:75:cf:e0:55:
         94:df:b8:1a:5f:ca:f8:85:44:dc:4d:12:d2:51:e7:41:73:80:
         62:85:e1:d2:3f:c2:d8:e4:91:4b:fa:95:84:b5:70:7a:4e:66:
         36:45:d6:23:75:67:0a:aa:d0:e4:b9:a8:84:4e:bb:22:8d:ce:
         74:4b:1a:7e:df:4c:08:d6:90:ad:87:7e:d7:65:74:e0:49:3b:
         55:92:3b:c5:1e:d8:f7:21:a5:3d:9d:40:57:0c:64:ec:34:43:
         8c:44:23:97:73:0a:9e:b6:92:18:62:ad:2d:d1:42:64:5d:c1:
         e2:eb:75:63:c5:79:91:b0:f2:33:4d:2d:b4:3a:ec:5c:e1:26:
         be:4d:cb:4f:a8:2f:c1:3d:74:71:6b:81:8e:8f:a5:7f:e2:43:
         17:52:a1:a5:e1:c3:c3:4d:0b:cd:14:4b:54:76:9d:3f:9c:33:
         85:b3:a3:76:1a:5a:8c:6c:9e:e7:cb:d1:c3:d4:99:7a:bd:e7:
         a1:52:71:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:24 2026 by rpki-client