This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File:                     ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier:          R1tOQ1Z67OCQAB6b0S53OSEehrf51TZqxONEzh29tx8=
Subject key identifier:   3F:09:92:C3:90:D3:46:CE:4B:B0:27:D4:0C:4A:3B:0A:44:E0:6E:FE
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer:       /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial:       019C41D8E92F117A9E49B156710E295E5029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 10:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 10:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 10:01:00 +0000
Files and hashes:         1: 3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa (hash: AEuGhXQguRSp/ih8O+939bXs6UO6yS5s6bISurK2/Vs=)
                          2: 6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa (hash: WC0gwtiT4OCWAekCe2z7fiG7BMx8NcVUB2W69nAJWQM=)
                          3: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: 4wMq2ZIdEGFL8P/vFGBcM6l6wXkvWtXR7SPN2f3WdGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:e9:2f:11:7a:9e:49:b1:56:71:0e:29:5e:50:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
        Validity
            Not Before: Feb  9 10:01:00 2026 GMT
            Not After : Feb 10 10:01:00 2026 GMT
        Subject: CN=3f0992c390d346ce4bb027d40c4a3b0a44e06efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c6:6b:06:13:6e:a5:b8:64:0e:88:47:c5:1b:
                    ee:05:24:af:62:4b:ef:3e:10:bc:46:67:6a:13:de:
                    0f:5e:f1:ec:a4:ad:68:00:11:f2:10:bf:ae:48:bc:
                    3e:ec:ee:08:df:8a:b0:9e:5e:e3:48:4e:c6:91:32:
                    b9:65:9a:31:0c:7a:92:6c:fb:b5:0f:87:69:a0:9e:
                    97:7e:6c:fe:cb:62:73:eb:bc:4e:64:fd:52:67:89:
                    6a:4c:68:11:af:5f:e2:38:f3:28:79:75:21:06:f5:
                    2b:fb:ab:c5:56:d8:0b:68:9e:b0:33:46:f5:90:06:
                    f7:b1:79:44:85:99:81:bc:73:39:2a:c1:66:72:a3:
                    12:d1:bd:92:13:8e:49:b5:ef:ca:26:8b:6f:77:3f:
                    00:f0:38:2d:61:d4:de:a9:50:77:b1:02:07:6b:da:
                    9e:e2:db:da:d1:e0:d6:f5:9e:ca:18:44:b5:c7:8f:
                    62:fc:f0:00:9d:cf:28:24:9c:1b:7c:c3:fe:dc:c6:
                    dc:5c:ab:26:17:7b:24:7f:f3:86:3e:cc:1a:96:86:
                    f6:7b:e7:c4:ef:7c:18:cf:88:0d:ce:fe:a4:e1:21:
                    cf:7f:87:47:3c:2e:c0:ae:be:73:c3:82:25:84:79:
                    d6:11:75:60:bb:d7:df:6a:d9:cb:89:61:6f:e9:f2:
                    0e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:09:92:C3:90:D3:46:CE:4B:B0:27:D4:0C:4A:3B:0A:44:E0:6E:FE
            X509v3 Authority Key Identifier:
                keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ca:65:3b:fa:54:24:8c:6d:f7:60:63:6c:a3:ec:57:94:05:
         7f:c6:6b:20:ca:43:e1:b9:16:4f:65:97:30:f2:0c:58:35:1f:
         b6:66:52:be:ac:b4:b7:7c:8c:d6:ef:d9:8b:5d:5c:52:82:42:
         06:19:47:c9:d5:4d:0c:1d:db:e4:6c:62:aa:27:45:8d:ad:55:
         a5:31:fd:a4:a7:5f:b3:b4:27:df:05:a1:f8:80:b2:87:58:e1:
         9f:67:f6:29:c9:21:3e:a6:86:70:6a:b1:22:a3:5b:6b:be:9f:
         47:a2:6f:18:f6:79:74:e8:5d:e4:b7:9b:19:ca:84:4c:27:b6:
         76:04:07:6d:96:5f:48:93:c8:8b:90:a6:6f:4f:17:2d:c2:4f:
         e0:12:80:b0:00:2d:c9:09:2d:7a:d2:a9:fc:e0:99:4b:e5:51:
         37:30:36:76:fd:d8:82:bd:e3:6f:cd:d2:bb:fb:6f:61:21:78:
         e1:a9:1c:90:73:99:24:93:86:76:b7:3e:a8:4d:f9:65:33:fb:
         35:27:42:55:a9:da:54:c7:bf:0f:0e:72:b0:0f:c8:29:53:28:
         93:ed:b6:1d:29:1e:2c:72:80:3f:4d:7e:93:a5:76:0c:91:40:
         2b:65:9c:2f:5f:39:e7:b2:c3:77:0f:6f:bd:5c:5d:d1:1c:82:
         2b:60:2f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:36 2026 by rpki-client