This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
File:                     ny83TJpzj63o-FDKq11507kARYQ.mft (raw, json)
Hash identifier:          c9jF9u9sLuXwzKUb9ekyKbfBChVAaFxjCw3M9Xx8hGw=
Subject key identifier:   23:72:1D:B4:C6:1E:37:CF:9C:B6:46:94:95:DC:E1:3C:A9:65:91:F7
Authority key identifier: 9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84
Certificate issuer:       /CN=9f2f374c9a738fade8f850caab5d79d3b9004584
Certificate serial:       019C43224A48BE6C460B14DAE35330A64DC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 16:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:46 +0000
Files and hashes:         1: ny83TJpzj63o-FDKq11507kARYQ.crl (hash: 9l6iOCJ3l3WHbLeOGqvkno4iKlvb28unSrFundQWB+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:4a:48:be:6c:46:0b:14:da:e3:53:30:a6:4d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f2f374c9a738fade8f850caab5d79d3b9004584
        Validity
            Not Before: Feb  9 16:00:46 2026 GMT
            Not After : Feb 10 16:00:46 2026 GMT
        Subject: CN=23721db4c61e37cf9cb6469495dce13ca96591f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:e4:05:6e:cb:32:83:5c:73:39:83:6a:31:
                    43:d5:48:bb:1b:0b:2c:40:16:8d:a5:b9:fb:b9:1c:
                    94:53:98:75:d2:98:cf:12:63:29:e7:e2:30:2a:8b:
                    a9:08:54:57:01:3b:df:28:0e:d9:d6:c0:9a:6b:3b:
                    85:f9:bc:d5:8e:3b:e2:7b:6b:d6:62:63:60:8c:06:
                    1a:16:86:dc:a3:d5:e6:47:71:6d:85:46:2b:44:78:
                    8b:a4:99:8b:bb:dc:19:65:22:b4:a0:89:e1:42:0a:
                    b5:cb:fc:b1:b8:e7:17:3d:a6:2b:cc:d3:6c:5f:cb:
                    04:eb:92:a5:04:fd:1b:28:32:08:79:48:07:ed:04:
                    8a:0b:45:05:41:57:f6:9a:d3:bf:06:fb:fa:78:d2:
                    4c:f3:83:6b:be:04:8c:5f:d7:9d:a0:34:b0:90:3e:
                    a9:c5:20:02:85:04:c8:ba:66:49:3d:63:53:89:08:
                    fd:ab:38:bd:81:08:3b:1d:a3:ee:2c:f0:fc:5c:7d:
                    b8:d9:d0:a1:d0:b6:1a:30:07:97:2b:fa:77:02:e8:
                    80:bc:b8:ab:10:78:9e:cb:1a:25:c9:14:3d:04:d4:
                    36:e3:9c:69:b6:32:b9:2d:31:dc:35:0f:1d:2c:fc:
                    47:ad:fb:26:b1:73:f6:2d:3c:2c:4e:9d:26:f5:2e:
                    cc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:72:1D:B4:C6:1E:37:CF:9C:B6:46:94:95:DC:E1:3C:A9:65:91:F7
            X509v3 Authority Key Identifier:
                keyid:9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b6:ee:7e:76:9a:21:b9:12:d8:41:b1:ab:75:71:d6:f7:cb:
         6f:3b:f8:15:bb:54:33:11:8b:75:7c:58:14:7e:25:a1:fe:a3:
         e8:32:af:54:76:8a:98:11:99:ae:ac:e1:88:5a:b3:03:2d:58:
         c1:f2:9a:fa:5d:fe:f8:c2:02:58:e7:69:f7:10:35:b6:86:bc:
         6b:09:c6:ef:8f:a4:71:63:37:42:e9:a5:5a:ef:64:74:a0:33:
         0a:29:d0:55:8e:c0:98:35:60:10:33:95:21:4a:0b:97:9b:f9:
         da:2f:76:46:51:71:f0:17:60:49:29:50:3b:0a:58:d7:3a:93:
         16:f1:d4:7c:42:b6:54:b5:2c:a2:db:d9:b5:f3:c9:7a:b7:88:
         a4:88:91:65:7c:70:8b:01:a9:5f:c0:d5:96:ac:c5:5b:e2:f8:
         8f:50:78:b6:03:54:d0:55:b4:69:de:16:24:87:84:26:36:29:
         eb:d7:42:7b:64:6a:b2:dc:b5:6e:2a:0f:93:a1:92:69:d8:23:
         10:6a:03:de:d3:1a:2f:6a:35:fb:da:e9:c6:a8:b0:31:1c:46:
         02:4d:df:ca:c8:b6:fb:02:fe:68:1d:fc:ae:56:fe:54:1d:4b:
         70:58:d6:a9:d7:9e:bb:46:67:a3:df:bb:ec:43:21:4c:e0:90:
         e2:de:d3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:03 2026 by rpki-client