This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
File:                     AdIyzG-yu_d4bZLGxq66oO2aceQ.mft (raw, json)
Hash identifier:          U3QSkzVqlyzyLHqt0C5k00dXIu45hupryIl51I8engE=
Subject key identifier:   1B:F9:BA:2C:FC:24:B5:33:93:3F:45:47:94:C4:5E:DD:BA:AE:26:B8
Authority key identifier: 01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
Certificate issuer:       /CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Certificate serial:       019C4322A85066B48D759F20AA3171C8E948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
Manifest number:          180A
Signing time:             Mon 09 Feb 2026 16:01:10 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:10 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:10 +0000
Files and hashes:         1: AdIyzG-yu_d4bZLGxq66oO2aceQ.crl (hash: 72U2kDTLTL6kV4WdiiILKih/4WXs/G3Wn92KbLWe7Bw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:a8:50:66:b4:8d:75:9f:20:aa:31:71:c8:e9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
        Validity
            Not Before: Feb  9 16:01:10 2026 GMT
            Not After : Feb 10 16:01:10 2026 GMT
        Subject: CN=1bf9ba2cfc24b533933f454794c45eddbaae26b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e6:1c:16:9d:ea:fb:78:45:94:2c:c9:b9:b4:
                    b3:de:b0:f6:72:26:8f:9d:d7:f9:88:d7:40:3c:e5:
                    b8:4e:94:a3:03:82:fe:a0:42:d1:ec:5c:f4:53:ea:
                    e3:6c:16:9f:2f:b6:54:af:aa:25:30:4b:a5:e7:c1:
                    f3:bf:e4:14:8d:16:ed:43:4f:59:f5:fa:5e:2b:22:
                    e7:63:77:75:94:66:ed:26:f3:a4:c0:54:31:30:8a:
                    89:83:6d:0f:e6:5f:31:2e:65:b4:54:7d:7d:e3:83:
                    c8:f9:86:dd:d4:59:df:1b:9f:86:9d:de:d0:45:f1:
                    03:63:bb:a7:80:38:07:01:67:69:6d:29:e3:b8:9d:
                    83:cd:a8:45:73:0d:76:43:db:42:fd:cf:cb:d2:fa:
                    92:22:43:a2:0d:6d:58:a9:7a:8e:51:1e:29:ce:9f:
                    4e:7b:8e:27:7e:e0:e9:87:53:41:32:00:f1:4f:87:
                    12:83:41:74:9a:8f:c7:23:bc:fd:e7:92:a6:4b:99:
                    ea:d7:fb:6f:2e:82:c2:cb:cc:3e:2a:ba:d4:b3:a1:
                    0e:f4:a7:01:19:4d:d7:98:ba:7b:5e:77:cd:8e:0b:
                    eb:a4:ae:42:e7:06:b7:48:a2:6c:d6:ef:61:13:b9:
                    9e:e3:3a:26:9f:89:6b:7e:88:70:56:d6:8f:ee:96:
                    06:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F9:BA:2C:FC:24:B5:33:93:3F:45:47:94:C4:5E:DD:BA:AE:26:B8
            X509v3 Authority Key Identifier:
                keyid:01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:37:f3:61:a8:fc:31:56:f4:26:36:e2:3e:6c:0f:af:af:fd:
         ac:61:ad:50:ee:95:20:7e:16:e9:e6:9b:eb:3c:cf:20:bc:49:
         30:68:4b:8c:3d:67:f1:4f:14:2a:49:46:ba:ca:ec:40:da:87:
         1c:aa:96:20:1f:a0:0b:e6:17:d0:c0:1d:7d:55:fc:82:4f:28:
         07:ba:39:46:79:97:0e:07:11:77:74:de:92:2d:63:f1:03:f9:
         0a:7f:99:f8:d9:24:7e:33:c0:26:41:82:a6:fd:e7:aa:7a:13:
         05:41:1b:cb:ed:7e:92:93:f0:79:2e:98:cc:0c:c1:d6:af:f9:
         1f:b3:36:17:c7:9e:24:9d:a3:17:e7:97:23:8d:35:ee:df:96:
         04:ff:dd:0f:1f:8c:82:43:81:a3:7e:42:d3:41:2f:6d:7c:c5:
         22:62:dd:ba:3a:c1:be:47:56:58:a6:bd:32:b0:9a:64:84:2a:
         71:8f:8c:1f:74:50:df:74:4b:cb:e6:e4:38:d2:de:b7:6d:5e:
         a2:ed:df:c5:be:66:ca:9f:a0:f7:e2:7e:37:f0:fa:ec:f6:3f:
         9c:48:a5:52:3c:58:6f:6b:bc:63:89:f3:d0:06:c9:50:a5:0e:
         36:eb:d6:8c:b5:e4:04:44:e3:59:ad:5e:e6:3b:61:1a:ce:95:
         95:0f:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:34 2026 by rpki-client