This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File:                     16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier:          FtSrNnxMCD6JM/oopjzgwCHZ4OznRVYh382f2gnLz5Q=
Subject key identifier:   B6:28:8C:B7:40:88:49:14:3C:E8:26:B2:05:34:F6:8E:3B:E4:10:E4
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer:       /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial:       019C4322D6F1191F228924BCED699454CCA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 16:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:22 +0000
Files and hashes:         1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: ibajAtoFBTp9rXE2wbq3MeslMTIXFN27ErWNLdZFaRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:d6:f1:19:1f:22:89:24:bc:ed:69:94:54:cc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
        Validity
            Not Before: Feb  9 16:01:22 2026 GMT
            Not After : Feb 10 16:01:22 2026 GMT
        Subject: CN=b6288cb7408849143ce826b20534f68e3be410e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d2:88:3b:33:a9:b5:09:6d:50:a0:5a:f2:f4:
                    3b:c8:5a:c4:67:34:a4:30:1f:2b:30:e2:f3:57:eb:
                    be:de:d2:72:67:02:67:8c:d8:ab:bb:0b:cd:3d:44:
                    8b:63:72:03:bf:1a:10:32:fe:90:eb:9e:27:54:98:
                    a2:8d:77:5a:64:2c:7c:96:d8:fd:55:50:4f:5b:7b:
                    f0:03:b5:e0:1e:1d:55:39:c4:3f:22:37:fe:48:7a:
                    60:92:d3:50:2f:e7:06:32:42:e4:f7:0a:f0:b0:65:
                    4b:3b:48:a0:da:3d:ab:45:cb:7c:91:2e:41:89:c7:
                    1f:93:e1:29:e7:33:c5:30:9a:cc:ff:48:5b:b9:6e:
                    94:5e:ce:d7:d2:11:ac:a0:a4:14:90:6f:6c:1a:28:
                    2d:39:ff:0a:d9:28:92:42:d5:b0:91:a2:2d:2d:6e:
                    6e:5d:3b:fc:53:92:3b:15:bb:52:c1:95:7f:56:c5:
                    24:3c:4a:10:8c:1c:f4:4d:8e:c9:0a:39:5d:1c:1a:
                    4c:ad:cc:58:ba:6a:a7:11:45:d8:2f:21:2f:5d:98:
                    45:28:fd:08:b4:5b:68:dc:c8:f7:13:90:27:38:b6:
                    7e:13:13:68:44:fd:cb:68:6e:ec:5c:12:cd:3a:45:
                    02:7d:11:37:65:ea:26:ca:f6:f2:04:0c:3d:df:b4:
                    fe:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:28:8C:B7:40:88:49:14:3C:E8:26:B2:05:34:F6:8E:3B:E4:10:E4
            X509v3 Authority Key Identifier:
                keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4b:1f:eb:a5:47:f3:66:e9:a4:f0:fc:91:30:1e:f4:64:f9:
         fe:4a:03:d3:a0:fd:62:c7:6d:c6:f4:03:6e:a8:29:4a:e0:92:
         d3:c2:21:aa:bb:36:51:e2:f8:6d:a9:e9:99:5e:5a:dd:22:de:
         13:7e:da:5b:11:b9:4b:6a:cc:99:c9:f7:28:0b:49:e1:6b:9b:
         27:a1:ec:f3:67:82:2a:f9:21:ac:49:47:c4:c9:f0:05:ed:ae:
         84:2b:6c:75:5a:cc:c4:57:72:8f:f6:6c:1c:65:17:20:65:be:
         5d:d0:ed:94:06:c7:f8:a8:35:74:43:bf:48:03:dc:22:3e:d3:
         22:2d:e1:33:be:11:9f:16:65:40:18:d9:52:16:e6:9b:dc:fe:
         ff:0d:b1:ae:01:99:7a:fd:12:8b:51:96:e8:a7:c8:2a:91:e8:
         d0:7e:bc:06:73:06:73:39:50:a9:e1:c7:56:d5:d7:a3:18:c9:
         7b:ec:ef:b4:ab:64:12:29:07:a8:74:ec:0d:a1:3e:76:18:fe:
         c1:b4:47:b5:bc:5f:c7:8d:e5:e1:62:73:10:85:36:80:88:b9:
         57:96:40:dd:f9:1f:78:92:f3:50:d2:df:8f:88:5b:99:c3:6c:
         d8:cc:e7:79:55:61:5b:03:b6:b7:ed:a2:09:75:4a:2d:9a:c0:
         7d:5b:ab:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:51 2026 by rpki-client