This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
File:                     PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json)
Hash identifier:          +uEgikNtGHznMhehqBW8rVW4cxwxiQ2/JRHOSG4oeG8=
Subject key identifier:   1D:E5:FB:1E:F2:36:62:B1:11:6E:9A:97:F8:77:37:7F:A7:51:61:1D
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Certificate issuer:       /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial:       019C420FF34C033FC931B656226FFFBDF8C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
Manifest number:          181A
Signing time:             Mon 09 Feb 2026 11:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:07 +0000
Files and hashes:         1: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: 6iTZyH4Yyxk77umd6ObGtzPWTtX+cOQ6PLSgWF4//mQ=)
                          2: QHHv-lGS27dlf_Kcr4moiCURb3g.roa (hash: Lcy2JaAZZjozQ94TOOqc21SM3JNpF1vrI2NkHkiFmLY=)
                          3: ZlIYKpQfZxD4quoX13gwB__TzOI.roa (hash: 0dG2J+i0HlL8c6lGhDbjobp/DZ7RXvZ0x4M8FsHvCc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:f3:4c:03:3f:c9:31:b6:56:22:6f:ff:bd:f8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
        Validity
            Not Before: Feb  9 11:01:07 2026 GMT
            Not After : Feb 10 11:01:07 2026 GMT
        Subject: CN=1de5fb1ef23662b1116e9a97f877377fa751611d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:88:8c:bd:35:b4:de:d3:4c:b5:36:63:40:
                    70:da:c9:bc:67:6b:c9:2b:cf:77:2c:6d:79:f8:37:
                    40:f8:02:f3:7d:63:9b:8d:87:43:fa:26:89:2b:c2:
                    df:df:28:8e:03:70:44:27:ed:60:a2:fe:3d:d2:b6:
                    8c:92:23:73:b7:a7:cd:de:5e:06:aa:ec:df:c4:6c:
                    46:c1:f8:b6:26:28:77:fe:dd:2f:8f:9f:f8:57:af:
                    8f:5c:c8:44:71:8c:7b:fa:f2:fa:d8:f6:85:21:0b:
                    39:02:e2:3e:f9:af:84:43:22:56:02:33:6a:f7:cd:
                    e9:cd:50:88:64:b9:03:df:c7:c2:60:0a:b4:81:f2:
                    f6:f7:3b:f4:1c:e6:39:eb:b9:25:af:ad:91:62:bb:
                    7d:ef:a5:3d:17:50:00:62:19:86:6b:5c:24:2e:12:
                    b4:e0:91:43:8c:66:3f:19:12:14:34:c2:8d:bb:e4:
                    b7:e7:32:2f:5a:50:c3:4d:db:f4:63:4b:04:a5:63:
                    82:aa:96:53:0b:d0:8c:97:b8:66:f7:f6:e6:01:47:
                    08:9e:ea:d4:22:ae:bd:fe:33:36:2a:6f:53:5d:29:
                    54:3e:e5:52:25:ba:a8:a7:ec:22:0a:cc:3a:98:c9:
                    72:64:66:66:61:a6:bd:0c:85:b6:da:70:10:c1:58:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E5:FB:1E:F2:36:62:B1:11:6E:9A:97:F8:77:37:7F:A7:51:61:1D
            X509v3 Authority Key Identifier:
                keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:72:1e:ac:51:b1:14:7c:07:c0:e1:0f:a8:91:70:1f:9d:51:
         6c:82:ed:43:de:6b:e5:da:97:67:61:c4:ca:a3:c5:6a:97:ea:
         4a:29:ab:c6:ba:86:3e:35:b2:4d:7b:ea:57:17:c1:e1:ae:23:
         63:f2:70:82:62:08:56:5e:21:4b:e5:bd:fe:b3:df:3f:05:55:
         d7:ff:36:86:28:74:22:3d:93:24:8f:69:d6:dd:39:86:a1:27:
         70:00:ae:5f:51:5c:20:4a:57:8e:a1:4e:74:fb:8c:a7:05:c0:
         98:4f:65:c4:50:f4:77:5c:35:26:73:dc:10:9d:93:af:1d:65:
         10:58:f5:20:ec:ac:34:af:ba:48:db:e0:6f:d6:e4:80:a2:bc:
         09:f6:e7:cd:e6:09:06:af:65:76:17:f1:a1:01:ee:cd:d8:52:
         3c:1f:a3:ea:e4:5f:fd:3f:b5:0e:98:72:d4:23:c0:e3:f1:c1:
         82:83:59:f4:f0:79:e9:2a:d7:7d:2c:3c:34:db:5e:bd:c6:29:
         c2:44:7f:42:9f:ba:c8:79:c4:a5:29:89:3f:c8:2d:ae:dd:a3:
         62:d4:04:fc:0d:ac:33:85:5a:55:43:75:37:3b:3d:f5:b5:62:
         f3:94:3c:1b:15:32:71:1b:75:d3:52:45:af:0d:31:52:7d:ce:
         45:5a:22:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:05 2026 by rpki-client