This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File:                     AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier:          1Tl4QlsC7akxLjRGY3PAGn2qVW0J1e8uNOJXOoG8eBY=
Subject key identifier:   1C:9E:9A:F9:8B:F3:DE:09:3E:61:09:1D:42:BF:1E:42:21:35:58:EA
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer:       /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial:       019C41A1C5C3787B545EBF8330282A68A974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 09:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:46 +0000
Files and hashes:         1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: ONLF8fVzrBDqNWdEdwlKVkBPF2BDnz3EL2yNxot54Gs=)
                          2: _ERGoNtkfCnC57fEn319xuy5MH0.roa (hash: Wq3TColJj1+ZOwaQJ2+Hu8QnMsklYvCOvDExQBnwEXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:c5:c3:78:7b:54:5e:bf:83:30:28:2a:68:a9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
        Validity
            Not Before: Feb  9 09:00:46 2026 GMT
            Not After : Feb 10 09:00:46 2026 GMT
        Subject: CN=1c9e9af98bf3de093e61091d42bf1e42213558ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3d:4c:8f:87:59:e5:f0:f5:08:81:f0:86:b1:
                    07:48:36:ed:ad:bf:90:e0:33:f1:b6:33:fc:86:9b:
                    1d:81:35:42:a4:b6:b7:9a:1c:58:79:08:49:29:8e:
                    15:df:2f:6c:ee:38:2b:39:c7:d3:b8:af:5d:8f:6c:
                    3d:49:91:ee:44:0c:10:18:e9:bf:b4:b0:e5:db:ec:
                    81:30:d3:93:67:25:29:34:cf:1d:6a:86:d3:63:2c:
                    5e:c8:37:7d:09:f4:65:87:7e:70:b0:88:76:db:5d:
                    27:81:6d:2c:d4:7b:7f:25:5e:0f:df:d1:0f:cb:44:
                    58:f0:21:5f:0d:11:b4:4d:fc:af:c8:ee:bc:dd:ee:
                    59:48:9d:66:ef:a9:7b:2d:26:39:67:c6:ca:5f:cd:
                    bc:5a:a4:0a:8d:94:6d:e4:36:8c:3e:1e:34:3c:b0:
                    13:69:82:63:a9:ae:3b:7f:8c:50:e9:15:28:35:c2:
                    56:9d:e1:96:8b:ea:50:3f:4d:4a:91:d1:bf:95:bb:
                    73:14:f7:fe:8f:12:84:3c:a4:da:ea:62:6c:2c:40:
                    fa:b7:cf:8e:f6:6c:90:f2:df:8b:63:7a:5c:09:3d:
                    6b:b4:0c:95:69:96:89:0e:98:27:66:1b:82:cc:17:
                    ac:6a:2e:ab:0e:80:98:20:4a:d5:58:1f:1d:f9:cc:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9E:9A:F9:8B:F3:DE:09:3E:61:09:1D:42:BF:1E:42:21:35:58:EA
            X509v3 Authority Key Identifier:
                keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1b:4d:4d:3c:f6:dd:ae:41:0a:2d:5f:67:4d:54:48:f3:5d:
         ee:77:87:9c:38:bc:93:89:ee:56:fc:bd:aa:54:32:db:54:2c:
         a2:87:39:21:59:f7:41:f1:84:9b:d5:f8:9e:44:f8:b8:80:0a:
         a7:ac:a6:db:d4:bd:e2:3b:e8:c3:55:42:1a:c9:d8:57:ff:7e:
         7e:4c:03:5f:e3:95:fa:af:38:13:f7:0f:5d:c5:87:19:1a:cd:
         10:68:4e:00:4c:93:8b:74:ec:6c:90:b3:28:17:44:e5:64:d6:
         70:3d:5f:ca:81:fa:d9:84:cc:1c:48:f1:7d:ef:cb:fa:c9:6f:
         f4:eb:db:31:b3:8b:eb:78:b7:aa:74:d3:89:5c:90:e5:d4:dd:
         1d:29:81:b2:a7:d5:60:9f:a4:ed:25:48:05:10:04:88:fb:98:
         a7:09:92:31:c0:b0:10:33:da:c5:e8:8b:7d:88:c3:a5:20:be:
         8e:8d:91:02:18:d5:a6:ff:fd:f9:fb:53:62:9d:a1:fb:80:e8:
         f4:81:c8:6c:73:d7:3b:ce:65:5d:88:7d:fd:38:a7:37:c8:c8:
         b4:54:2c:24:77:9d:9f:be:db:3c:6e:7b:5b:23:95:11:9e:22:
         2e:c0:43:af:98:e0:98:ca:9b:09:e4:8e:76:a6:4a:d6:2f:b0:
         ed:a3:dc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:56 2026 by rpki-client