This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
File:                     jygQkMQApWFm_Ii083pcuu0hhfA.mft (raw, json)
Hash identifier:          RulddAEA85uEnGojodFCRl3k3ded40UsVZN0RsDZYuc=
Subject key identifier:   56:80:48:E6:28:28:8D:6A:A3:04:0C:BF:F9:1A:F5:43:1A:D6:D3:64
Authority key identifier: 8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
Certificate issuer:       /CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Certificate serial:       019C42465B0D2611AC847D476C5CCC13E78C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 12:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:32 +0000
Files and hashes:         1: jygQkMQApWFm_Ii083pcuu0hhfA.crl (hash: 0kEBGIfS8w995xdyIyIJHm8FB7A8RKJJ1iZz6FK1Bks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:5b:0d:26:11:ac:84:7d:47:6c:5c:cc:13:e7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
        Validity
            Not Before: Feb  9 12:00:32 2026 GMT
            Not After : Feb 10 12:00:32 2026 GMT
        Subject: CN=568048e628288d6aa3040cbff91af5431ad6d364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:20:7a:29:57:a3:be:16:23:71:5a:32:1d:
                    18:15:c7:1e:28:db:3a:3e:9e:28:14:84:8f:58:b9:
                    96:14:45:45:1f:c5:39:87:c6:cd:c7:ef:61:31:e6:
                    ee:6c:fe:b6:67:ea:41:de:00:1e:c7:ed:a7:40:cd:
                    8f:48:4c:47:27:67:c3:cc:af:74:46:ee:0f:85:06:
                    92:a8:15:d0:ae:03:e4:b2:04:b7:18:1b:df:01:d8:
                    1f:59:a5:72:ae:02:ce:b7:39:2d:f3:76:87:40:f3:
                    6d:70:c2:bc:45:d0:fc:cc:d0:5f:d4:a9:8b:d5:fc:
                    ec:fe:db:cc:b3:25:2d:89:78:bc:cc:7b:09:cd:ba:
                    a2:b4:3c:fe:1d:86:fe:bd:9c:bf:9a:cf:e2:c4:65:
                    bf:1e:e5:cb:eb:7c:4f:f8:85:88:cf:17:4b:54:6d:
                    d7:03:f8:06:8d:32:d4:91:dc:f7:36:91:88:31:2c:
                    0d:01:e9:35:63:b3:db:43:0b:67:3d:b7:0f:df:48:
                    99:67:9b:38:42:30:b5:4e:e7:18:1e:64:09:5c:ce:
                    f7:51:96:ca:17:a9:ea:50:20:ae:fe:77:72:ab:96:
                    48:07:dd:3c:b7:ca:dc:9a:27:e8:81:3c:d1:d4:6c:
                    d7:49:8e:df:a1:45:e0:84:ff:32:49:cd:54:d5:dc:
                    12:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:80:48:E6:28:28:8D:6A:A3:04:0C:BF:F9:1A:F5:43:1A:D6:D3:64
            X509v3 Authority Key Identifier:
                keyid:8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:3f:90:8f:26:65:41:f4:eb:65:ee:e1:ad:28:2c:b2:81:66:
         7b:b3:f5:cb:06:9c:81:f6:b6:f7:c5:32:6d:ea:90:7a:65:8b:
         a0:6c:00:5a:be:71:b6:32:fe:04:e3:cc:98:ad:47:77:20:83:
         66:bd:ab:b7:40:1a:e0:2c:d6:13:2f:90:c4:47:ad:6d:79:a9:
         3c:6e:c7:eb:03:42:b2:7a:15:aa:a8:69:52:a4:16:df:7f:34:
         48:17:25:a9:2c:50:df:f1:24:64:9a:7c:fe:30:13:1a:f0:4a:
         21:e4:19:39:70:77:df:ed:61:09:d0:4f:93:a5:68:bc:d6:79:
         82:69:35:b5:91:72:05:28:45:2b:da:f6:b2:9f:e5:62:37:40:
         89:80:8a:1e:4f:c5:51:4a:10:09:8f:94:65:d0:30:72:8c:fd:
         85:ad:5e:57:10:c5:cd:8b:d1:de:b7:31:36:6f:6e:79:b8:e6:
         d6:ac:26:15:7f:74:8a:4b:be:ad:49:11:27:1c:97:d4:ca:93:
         78:af:83:5c:9c:28:9d:95:2f:73:0e:a4:39:14:bf:52:8c:c2:
         cc:5d:f1:c0:70:49:83:12:f9:e6:22:5b:fb:e0:df:d9:c8:b4:
         c9:09:dd:68:a4:b9:55:bd:6f:b3:0b:69:c9:b8:01:99:34:25:
         7e:d9:ca:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:00 2026 by rpki-client