This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
File:                     yPGA3UiWddR5NSX-5s__Rpcv8zw.mft (raw, json)
Hash identifier:          ftZOZysnU9/9Lp7+am3f0EBwjAKXFaUbj9xmehlSZGc=
Subject key identifier:   B1:6F:63:34:22:0D:D6:B1:9C:84:24:E2:AE:FF:F3:5F:DA:FB:8C:D3
Authority key identifier: C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
Certificate issuer:       /CN=c8f180dd489675d4793525fee6cfff46972ff33c
Certificate serial:       019C41A19D4C37B93E4FFDF12107C381F494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 09:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:36 +0000
Files and hashes:         1: yPGA3UiWddR5NSX-5s__Rpcv8zw.crl (hash: zsfZhIMRUN2fjO4saEKUcIiLwZPQ5b5YkVEjqeBvSyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:9d:4c:37:b9:3e:4f:fd:f1:21:07:c3:81:f4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f180dd489675d4793525fee6cfff46972ff33c
        Validity
            Not Before: Feb  9 09:00:36 2026 GMT
            Not After : Feb 10 09:00:36 2026 GMT
        Subject: CN=b16f6334220dd6b19c8424e2aefff35fdafb8cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d0:0f:ec:28:82:fb:aa:05:a6:30:40:30:6b:
                    23:3e:8a:03:a8:9e:90:a4:48:4d:b1:a8:3f:e5:d7:
                    9f:74:0b:52:ff:2b:33:9c:77:c0:a2:25:23:3a:65:
                    a6:0c:fc:45:f4:c6:a1:23:4c:68:aa:9e:1a:13:af:
                    b6:05:c1:0f:9d:98:1e:2b:24:ea:0a:5e:00:d6:ac:
                    f7:91:66:bc:a0:c6:bd:ab:d6:fe:fb:ad:75:cc:84:
                    5e:bb:c1:ab:8c:7b:23:9a:07:b8:40:1d:83:f3:a2:
                    c3:83:cf:c0:b2:66:66:a3:50:c5:dc:ad:d6:fa:6c:
                    c2:4e:0f:cf:01:95:33:47:0b:c1:bc:7c:93:f1:16:
                    81:b6:dc:c1:0a:a9:07:1a:70:44:f6:27:b3:f8:de:
                    95:a1:65:8e:47:59:6d:86:de:56:aa:23:5f:d3:e4:
                    ae:e6:65:c9:5c:f8:fe:3f:30:ae:45:41:dd:f6:e2:
                    46:47:bc:fe:b0:96:ae:89:22:f6:4c:01:08:ef:4b:
                    e9:14:e4:ce:83:44:d2:95:b3:79:a7:f9:2a:39:97:
                    32:80:5e:4e:91:0c:2d:52:9b:4c:5a:9d:4e:64:0a:
                    89:8b:39:d2:53:7b:53:81:56:26:55:e8:9f:42:3b:
                    8a:23:bc:b2:6c:b8:3a:04:6e:8d:0f:47:f7:e0:c8:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6F:63:34:22:0D:D6:B1:9C:84:24:E2:AE:FF:F3:5F:DA:FB:8C:D3
            X509v3 Authority Key Identifier:
                keyid:C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c1:dc:b0:99:f9:77:fc:bf:64:ba:07:36:d6:d0:88:3f:59:
         be:12:25:a0:74:aa:40:75:14:68:74:b7:ad:1e:7a:81:99:93:
         70:ac:3a:7e:61:57:f5:5c:c3:f3:11:bc:55:54:96:5e:a8:13:
         d3:1f:a9:81:7b:4b:21:f9:e1:3d:18:94:b4:c0:89:28:77:98:
         02:17:e2:f1:a8:bc:3a:d5:3e:37:b6:9f:08:4b:12:52:54:d7:
         0a:71:6c:73:14:a5:b5:37:ca:41:fb:23:21:53:44:3b:fd:41:
         3d:e8:eb:0c:89:e6:a0:84:81:e9:c7:3f:6c:d4:f9:c5:1f:6b:
         5f:54:33:66:a9:17:6d:ec:73:9c:a4:2c:bc:bf:74:77:cc:21:
         3b:b9:3c:91:ba:b8:1f:7f:f3:bf:94:43:11:af:d2:5f:31:7e:
         66:b9:94:78:62:32:88:df:7b:53:4c:42:fb:ea:50:16:04:fa:
         0d:44:26:ec:7b:e4:6c:07:48:ec:71:8a:4e:be:20:0e:94:b2:
         c3:01:dd:7b:a3:09:f0:3f:51:67:f6:3a:e4:76:22:27:43:52:
         d9:fa:74:f5:ae:b9:63:52:a8:fb:59:0c:1d:1e:d6:e3:fc:f8:
         38:28:50:c9:f2:80:ec:13:bd:b1:09:82:a0:61:af:ab:e1:88:
         ce:e1:2b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:48 2026 by rpki-client