This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File:                     dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier:          t6emZRvo0Tzv+7NxRN9vy/DthAB3aw+7WhlTjWAjjw8=
Subject key identifier:   47:43:5D:5E:87:53:9E:D2:26:15:6C:05:8A:4F:4E:86:81:72:56:45
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer:       /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial:       019C446BC917F137A7C29CB933241EAE6011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 22:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:40 +0000
Files and hashes:         1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: GkyPU9CuFtdDa7KCrVZiTmWNgQjPpRBOYixyf6Gs/HY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:c9:17:f1:37:a7:c2:9c:b9:33:24:1e:ae:60:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
        Validity
            Not Before: Feb  9 22:00:40 2026 GMT
            Not After : Feb 10 22:00:40 2026 GMT
        Subject: CN=47435d5e87539ed226156c058a4f4e8681725645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:e6:26:65:df:e1:9a:17:ae:a3:ce:3a:0a:
                    a3:ec:ae:ce:17:cb:9b:27:1d:51:88:d3:35:04:88:
                    63:be:5c:db:e4:f4:70:58:94:9a:35:13:1b:50:ff:
                    01:c2:d0:02:7c:0e:90:55:9b:c2:cb:5e:58:d9:90:
                    16:fa:db:ca:2c:2e:08:3e:f6:c1:03:92:37:74:59:
                    93:c2:69:8f:ac:a8:a8:0f:4d:0a:40:cb:e5:50:0c:
                    8c:52:48:58:2f:80:12:c2:7c:89:83:ca:13:4f:f1:
                    69:77:cd:dd:c6:bf:71:8a:b3:fe:ad:54:94:ce:0f:
                    87:4b:38:17:ca:79:64:96:2a:13:fe:90:2e:4b:9e:
                    f8:85:23:7c:fa:7e:e4:19:db:4d:5d:28:bf:0b:ac:
                    44:5d:94:bf:ed:a4:1d:b1:95:f1:17:8d:1c:b6:bd:
                    95:d7:2f:ca:00:7c:69:7f:10:78:4f:76:67:f3:7a:
                    0d:f7:6d:ec:3e:35:dd:d6:8e:5b:47:0a:93:44:e2:
                    fd:e2:47:b8:c5:87:1a:ce:de:a5:0e:c8:e2:d9:cb:
                    b8:75:33:11:9b:c9:67:5c:9d:da:4e:af:63:46:10:
                    08:9f:3f:36:b1:30:64:1d:0d:8a:86:34:ab:02:b3:
                    40:a0:49:64:d1:33:e8:c0:8a:8e:14:12:f1:b3:69:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:43:5D:5E:87:53:9E:D2:26:15:6C:05:8A:4F:4E:86:81:72:56:45
            X509v3 Authority Key Identifier:
                keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:91:66:d7:ce:8f:8f:47:39:95:ed:13:c0:e4:eb:26:f7:37:
         c8:3f:75:69:7a:64:f1:cf:4f:ec:1e:a7:18:57:d9:53:5f:b7:
         90:d1:4f:67:59:6e:20:fe:fc:c2:41:be:98:57:84:ef:aa:af:
         f1:96:d5:28:56:e4:96:bd:9e:1e:a1:18:0a:51:3a:0f:ec:79:
         65:ec:98:f9:67:37:f9:19:f3:31:dc:60:5c:90:49:6c:d3:3a:
         22:67:7b:fc:07:e8:f6:40:92:98:57:09:39:8f:53:3b:48:16:
         8a:4f:bf:c8:f7:e6:f9:b3:b7:68:42:89:ee:1a:c1:d4:9f:45:
         18:03:d9:7a:8b:bf:3b:63:f5:f8:b2:fd:22:47:17:d5:50:ca:
         60:5b:69:b4:0d:4c:b9:90:be:25:b9:02:74:38:2e:90:59:b0:
         74:56:e1:84:2c:71:68:7f:92:6e:5e:dd:c0:80:3b:32:2f:77:
         44:fc:87:77:15:3c:ca:2e:7d:4d:04:1f:86:a8:8b:a9:d3:34:
         0c:3e:8e:98:0d:8b:d3:23:6f:8b:3f:91:36:bb:06:8b:ce:82:
         60:f2:54:b3:5a:4c:c4:00:f5:74:3d:34:a3:13:e2:98:91:a3:
         07:4b:f2:0c:73:de:a1:56:37:50:bf:19:47:1f:32:75:27:c9:
         de:fe:0d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:16:23 2026 by rpki-client