This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File:                     DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier:          5sKcuFbBsXakxXvoaygIonHX5ws2OvObFERKUC8k+7Y=
Subject key identifier:   8C:F1:30:5D:DE:D2:F8:05:A9:2B:3D:A3:88:8C:AB:73:41:33:37:2E
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer:       /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial:       019C427DC4791AB9E480B2082E2E92BA84F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 13:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:04 +0000
Files and hashes:         1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: rSGuNBiFVj7MJUTGM82PR5xd4vElijx6KRwgJIa38x0=)
                          2: bml28OP4KoXNao7A2GMBGmYqamQ.roa (hash: 0pR6vIDA6MRs37zqStEVFf7/l/MWTnFFDP3/gQtqi2o=)
                          3: ycbQTRWdjL9Qvr33IrnbqXH0Bqs.roa (hash: nglQg5MmKlEjssrWx8wngl2AAIBCB6KoQKV4TEUoUr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:c4:79:1a:b9:e4:80:b2:08:2e:2e:92:ba:84:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
        Validity
            Not Before: Feb  9 13:01:04 2026 GMT
            Not After : Feb 10 13:01:04 2026 GMT
        Subject: CN=8cf1305dded2f805a92b3da3888cab734133372e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:91:4b:4e:69:93:98:f8:3a:8a:2e:e8:5a:
                    e5:5a:80:f6:c0:7c:68:7e:e9:ee:04:29:87:1d:13:
                    70:8a:d5:68:ff:fd:db:75:46:c0:f0:79:6a:5d:32:
                    c0:dc:a1:6c:d6:28:bc:66:1d:3f:5c:c2:8a:1c:73:
                    2f:c2:a5:49:2c:88:db:5d:e4:eb:f4:01:58:29:2f:
                    f1:47:94:7b:ce:97:c1:8c:6d:13:f0:3a:a3:10:98:
                    d4:65:39:e8:27:e1:ea:c9:ec:cd:ff:78:b2:fc:b1:
                    69:84:ad:e7:3e:c0:5b:0c:03:eb:6a:36:a9:b6:86:
                    f2:87:91:1e:cf:a7:2c:50:5a:85:68:e5:44:a0:79:
                    25:ee:0f:6d:77:eb:ed:5b:42:bf:ee:bb:0a:b3:8b:
                    6c:e6:af:c7:d4:dc:18:e6:ab:74:44:17:c2:fd:85:
                    0f:3d:3c:60:7d:fa:3f:8e:28:12:9e:21:11:b8:b0:
                    91:10:0b:82:af:91:96:d7:13:d1:ea:72:3f:97:21:
                    a5:3c:8a:d1:b1:77:f7:16:41:58:f4:46:de:74:32:
                    dd:1b:9d:b2:93:2e:c7:e7:9a:bb:45:89:f9:13:8e:
                    8b:97:b4:3a:81:1a:b5:b4:90:10:89:c4:bc:91:34:
                    4f:45:9e:5d:1d:74:d6:e2:82:a9:f7:77:52:c5:9c:
                    bd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F1:30:5D:DE:D2:F8:05:A9:2B:3D:A3:88:8C:AB:73:41:33:37:2E
            X509v3 Authority Key Identifier:
                keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:98:21:a5:1a:b6:1f:07:49:e1:d0:bb:c1:20:d7:fe:8c:a6:
         8c:51:d8:59:81:2d:13:fa:78:bc:56:59:a7:db:ea:06:26:f9:
         1f:8e:03:f5:78:bf:2b:a4:90:d8:b6:08:a3:59:84:a5:55:3a:
         c6:36:cd:cf:dc:aa:e3:0d:99:85:8d:7c:3c:aa:5b:97:f4:89:
         3f:dd:8b:45:b7:bc:78:32:f0:b7:e1:82:77:8d:97:ef:13:f8:
         d5:c8:52:b0:df:8e:72:63:2c:31:b4:a5:fa:e8:4b:b2:df:23:
         c4:77:4f:89:6e:2d:e9:a4:d9:4f:85:44:2c:c9:fa:34:4f:2a:
         ed:1e:3b:a9:55:f7:56:c4:b1:d5:c1:98:e7:2d:2d:be:65:50:
         42:89:72:5f:19:2d:d0:c7:96:0c:ca:80:a6:9e:23:9a:d4:3a:
         ea:94:56:51:ed:e2:6e:43:b7:dc:aa:ca:e7:34:be:10:9d:97:
         62:61:5b:f9:16:2e:64:17:c3:f6:17:5e:96:c6:18:74:3d:d1:
         ac:38:10:d0:10:38:3f:25:e4:8c:be:23:35:d6:1b:b8:0c:11:
         69:83:f3:0a:d2:1f:22:a7:04:92:5d:a1:04:c0:7c:fb:1a:2b:
         cb:73:22:41:bc:14:4a:5e:a0:95:92:43:16:a6:21:6a:72:eb:
         af:bd:9f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:31 2026 by rpki-client