This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
File:                     11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft (raw, json)
Hash identifier:          zO2S2OtyKYIHz8IWFk77GqbyacYKONXSh1S9efkxNO0=
Subject key identifier:   EF:04:4D:3D:10:BF:CB:88:5E:F5:FD:AA:FB:1B:52:05:09:F6:C2:F7
Authority key identifier: D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
Certificate issuer:       /CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Certificate serial:       019C43225E40C712FE9D8AD6DE44C983B56A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 16:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:51 +0000
Files and hashes:         1: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl (hash: GXuUEJQ70sq7iSjKERSCCW5d7LsVs/R9opGb96nPo50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:5e:40:c7:12:fe:9d:8a:d6:de:44:c9:83:b5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
        Validity
            Not Before: Feb  9 16:00:51 2026 GMT
            Not After : Feb 10 16:00:51 2026 GMT
        Subject: CN=ef044d3d10bfcb885ef5fdaafb1b520509f6c2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:cb:ab:54:e0:43:e3:80:6a:38:52:00:57:
                    6f:db:5c:10:61:ce:27:1c:0c:66:b5:71:68:fd:7a:
                    3f:d2:1e:92:41:1c:41:69:c7:e0:f9:0a:8a:08:64:
                    6c:fe:0d:c4:70:ec:a8:d7:db:3b:6c:05:27:42:07:
                    db:0b:67:ab:83:2c:28:67:82:1a:67:8f:0a:24:3e:
                    6e:b8:1d:20:b2:d5:88:dd:51:27:be:8c:df:ba:8a:
                    a9:45:15:f1:9c:55:9d:96:67:61:31:67:9d:b8:64:
                    8b:9d:c5:60:c8:02:4d:86:90:3f:e0:12:7e:11:dd:
                    38:24:51:b7:c0:53:4c:f8:7e:81:9b:b7:06:80:6c:
                    95:1d:fd:c2:c7:06:4c:43:06:11:db:86:e7:74:68:
                    73:6e:39:6a:27:d6:58:bf:6a:fd:45:b1:63:7a:fa:
                    ee:14:b7:31:1b:e4:de:d3:fd:e7:2b:af:ae:39:30:
                    c6:bc:d1:26:fa:5a:f3:a7:21:88:6e:ec:c1:38:98:
                    6b:0b:0f:d0:a4:a1:d6:82:c4:87:14:4c:1c:76:28:
                    47:b9:fc:ae:e0:29:41:00:3a:74:45:13:b2:13:f1:
                    63:df:df:63:d4:f1:a4:54:75:fe:b1:02:9d:97:63:
                    3d:cb:43:57:e8:cf:a6:ce:80:d1:b9:ac:02:9e:64:
                    85:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:04:4D:3D:10:BF:CB:88:5E:F5:FD:AA:FB:1B:52:05:09:F6:C2:F7
            X509v3 Authority Key Identifier:
                keyid:D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ab:8a:aa:cd:9a:8c:32:ea:c6:8f:fb:65:cd:a2:80:3b:3d:
         c7:db:6f:8a:1f:a0:c8:14:7c:cf:04:a6:c8:62:28:d0:2d:c7:
         ed:32:0a:a1:29:1c:89:03:af:e0:7f:d3:e5:62:3c:81:cd:3c:
         24:77:d5:c8:42:b4:e2:33:57:c8:fb:d0:cd:b5:30:45:33:24:
         8f:04:c3:7c:b0:4e:99:78:d7:e8:3d:cd:06:51:e1:4f:57:b4:
         79:18:28:74:cf:02:ab:ac:f7:14:f4:49:2f:8a:c3:9a:1a:56:
         6d:fa:17:e0:00:09:65:a5:4e:4f:33:4f:63:b1:6e:73:99:1e:
         74:14:5e:5f:46:e0:fd:5e:e4:18:27:67:a7:55:1c:8e:f7:c6:
         1b:83:01:35:f9:7f:8b:8d:46:17:87:8e:9c:c4:18:14:ee:ec:
         34:c5:45:b6:f9:c3:c0:e0:d6:80:4f:36:42:96:20:94:e8:c9:
         0a:18:b2:54:56:4d:4e:b8:d6:79:91:9c:64:86:94:1f:9d:c7:
         da:fe:a8:ed:df:e7:ec:a5:c4:c3:9c:49:be:21:a8:8e:a7:a2:
         1d:10:7b:cd:3b:a8:97:6a:13:a5:b8:b0:3d:fd:4a:36:dc:28:
         1c:0d:1a:94:24:2d:a3:fe:ff:8c:dc:49:f3:77:14:d5:41:71:
         a2:9a:2e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:52 2026 by rpki-client