This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
File:                     n8IY9nJDtH2gIf2j_rRBR0s865Q.mft (raw, json)
Hash identifier:          j8SF7epfAwkoisjFkwvLpxJnfibPPBsdyqe6NwpAcg8=
Subject key identifier:   C2:D8:D6:49:2A:06:CF:31:B3:7E:D2:67:C3:93:54:34:50:0C:75:73
Authority key identifier: 9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
Certificate issuer:       /CN=9fc218f67243b47da021fda3feb441474b3ceb94
Certificate serial:       019C41D8B27041BBFB177F8AD9F9F38B828B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 10:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:46 +0000
Files and hashes:         1: 4Cj0ydwfUPWxDIhUikHdLylv8JE.roa (hash: IVa5qWxh3J0W1FFzGjktQttQcJXOtRqBcHHVa+F05a4=)
                          2: n8IY9nJDtH2gIf2j_rRBR0s865Q.crl (hash: CxGdkNl8qSsMiHJUsF5nnhln6jYqOqryFmp1YlTgGKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:b2:70:41:bb:fb:17:7f:8a:d9:f9:f3:8b:82:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fc218f67243b47da021fda3feb441474b3ceb94
        Validity
            Not Before: Feb  9 10:00:46 2026 GMT
            Not After : Feb 10 10:00:46 2026 GMT
        Subject: CN=c2d8d6492a06cf31b37ed267c3935434500c7573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:5e:c6:1a:84:62:56:3b:fb:e2:97:c6:78:
                    7e:44:10:f0:cb:47:0b:a1:52:45:ac:a5:bf:81:b8:
                    2d:9a:e3:f0:10:27:25:db:1d:fd:60:7f:55:bc:52:
                    46:64:65:10:cc:64:e7:f7:5c:ca:d6:88:af:c6:a1:
                    d1:97:65:90:97:da:ed:59:5a:61:93:37:96:92:cd:
                    c9:15:80:ed:b9:28:0b:f4:c6:a2:2d:9a:91:0b:ef:
                    c2:60:24:dc:0d:f2:81:64:e8:ec:29:3d:82:72:3c:
                    0c:de:b1:0c:31:eb:87:bc:7f:6e:f9:12:d9:03:6e:
                    3a:f3:dc:a9:c5:87:24:23:73:47:a2:39:63:eb:8e:
                    fa:27:35:20:16:ab:e8:70:27:bd:d2:e5:d7:95:f5:
                    32:59:38:3b:81:af:d3:6a:41:14:6c:14:29:24:3c:
                    c1:71:f1:df:ab:ff:f1:ef:37:47:c1:7f:f2:5a:17:
                    fc:95:62:45:33:75:4d:7a:ea:73:78:85:92:f8:c9:
                    83:b2:28:c7:6d:43:d6:57:f8:97:6b:9c:1d:7c:86:
                    03:5a:a8:3e:d3:c5:ec:d6:12:81:3c:eb:87:b9:70:
                    7d:33:21:58:f1:cf:7e:f4:6b:b0:0e:3d:29:ae:23:
                    71:69:81:44:5d:9a:90:ad:ca:e1:f5:2b:46:1d:70:
                    7e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D8:D6:49:2A:06:CF:31:B3:7E:D2:67:C3:93:54:34:50:0C:75:73
            X509v3 Authority Key Identifier:
                keyid:9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0a:82:6e:c2:ca:53:a7:c1:67:69:98:ba:60:1b:a7:c1:d3:
         ba:48:bf:96:74:16:f0:9b:8e:3f:db:27:f5:2b:5b:8f:74:24:
         02:a4:3a:49:f3:a7:f5:8b:0a:d5:bf:aa:42:a6:61:2d:38:bd:
         8f:78:d1:11:7d:e0:77:0b:a9:9b:f5:1f:cb:90:89:8f:76:c8:
         7a:4b:45:be:8c:06:91:67:99:25:57:2d:72:c9:98:7f:75:b1:
         a5:de:cf:8f:a3:6b:46:da:93:41:07:cd:4c:a9:40:6f:5a:2a:
         87:c0:2a:16:ad:54:09:7d:d7:f1:37:e3:d9:0c:6d:c3:79:22:
         fb:bc:0d:69:d2:9d:0d:bc:65:b9:63:15:44:e2:b4:f4:08:d1:
         5d:78:51:f6:2a:91:da:16:f6:08:22:c1:f8:2d:b1:9b:4a:13:
         75:46:df:02:4a:bd:be:be:8c:97:c4:c2:0b:ce:23:03:29:f6:
         b4:78:0b:50:51:0a:c6:5c:84:af:0c:6c:ca:58:38:78:81:9e:
         69:2d:1e:15:b7:eb:a5:4a:4f:42:a6:2d:eb:60:04:5b:85:b8:
         a8:cb:e3:40:c5:1b:6e:89:da:eb:48:ae:56:3a:ff:9a:7c:0e:
         33:be:7f:17:01:d2:a9:ad:6e:8f:7a:50:0b:09:2f:0c:b2:1b:
         be:9a:11:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:15 2026 by rpki-client