This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
File:                     cNySeAi5pn58uhunTvtb9sEsiVs.mft (raw, json)
Hash identifier:          WHQ/kCWFFK/y41hCsgMz6uJsZHpVMU6DCrpM8E/qyVg=
Subject key identifier:   FC:E0:B7:03:98:44:46:95:F8:D3:3C:A3:5A:79:DD:6F:48:4E:D9:D7
Authority key identifier: 70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
Certificate issuer:       /CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Certificate serial:       019C41D858F58FD664FE28D239D1775FCB8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 10:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:23 +0000
Files and hashes:         1: CGASqwsZcGaWA7KhgQteEYO55EY.roa (hash: wP8KXOiWGgF6XyMWqWY5eIrUa40yWygDD4xGf13foh4=)
                          2: cNySeAi5pn58uhunTvtb9sEsiVs.crl (hash: t66gAkgqCIGHwFkBLRdtxm38l7jvNAcklrJF2FFdZ6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:58:f5:8f:d6:64:fe:28:d2:39:d1:77:5f:cb:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
        Validity
            Not Before: Feb  9 10:00:23 2026 GMT
            Not After : Feb 10 10:00:23 2026 GMT
        Subject: CN=fce0b70398444695f8d33ca35a79dd6f484ed9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:59:2e:b9:49:7d:23:18:b0:05:93:5c:a2:
                    d2:37:ce:f4:9b:5c:3c:6d:2c:1d:e4:8b:99:1e:89:
                    22:77:82:f6:a0:60:80:c9:da:7d:cd:eb:38:e5:7d:
                    de:12:5b:d6:c7:c0:e3:67:fd:7a:4b:d1:19:bb:f5:
                    4e:79:5e:f8:45:f9:0c:9b:90:a4:2a:e4:10:6d:c6:
                    08:d9:20:a4:51:e6:8b:54:f8:41:b2:ce:f1:db:29:
                    40:f6:f9:32:b0:61:3a:0a:9f:a5:ac:da:17:8a:dc:
                    cd:2d:0f:59:bc:15:45:7d:4e:c6:06:d8:97:eb:60:
                    7b:23:82:da:41:9d:33:64:5f:13:94:e1:5a:d3:57:
                    7a:98:01:f7:dd:9e:43:98:3f:29:ea:29:0a:97:e9:
                    17:6e:36:cb:86:2a:76:fc:d4:42:e9:d9:e7:69:76:
                    14:3d:52:01:a0:42:b3:51:b9:ff:d6:25:a7:32:6b:
                    e8:3d:1f:45:9d:6a:2f:9d:25:e2:eb:dc:15:5d:f3:
                    7e:3f:95:bf:e7:5f:26:1c:ea:7b:ea:9a:cc:3d:51:
                    60:3f:09:f0:55:fa:d0:21:67:73:76:74:78:c3:93:
                    b7:7c:cb:26:c4:f7:5a:48:3c:e4:60:10:18:fb:44:
                    a5:3b:6f:81:b2:a2:b7:4b:2d:cd:04:7e:19:f2:73:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E0:B7:03:98:44:46:95:F8:D3:3C:A3:5A:79:DD:6F:48:4E:D9:D7
            X509v3 Authority Key Identifier:
                keyid:70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:2f:92:c5:df:f4:a0:22:c4:a4:16:3f:ac:37:cb:d2:3c:99:
         d7:91:c5:7b:af:30:4b:e6:f8:b3:3f:13:69:e1:38:99:2f:92:
         c2:8e:73:a3:54:d9:f1:82:12:97:b5:d1:bb:7c:15:ba:b5:88:
         0f:f5:f0:7e:9c:05:d9:78:7b:c7:ba:b0:7c:16:06:28:a3:09:
         9f:50:92:96:e8:31:93:97:09:d7:93:dc:ab:49:9b:78:56:e6:
         87:30:7d:68:d2:25:c7:1d:aa:f5:5c:9d:31:21:a2:f8:3a:76:
         1f:12:9a:05:fa:d0:70:f2:6c:5c:12:6b:a1:e9:f1:7d:c1:26:
         59:94:f2:3d:ca:71:a3:65:34:8b:8b:03:7e:c2:41:3b:8a:81:
         49:4d:c6:9d:36:b8:e0:c6:a4:12:72:ef:69:63:a2:7e:79:ab:
         ef:cd:d8:27:9a:72:7a:5b:a9:36:f3:d0:7b:de:1e:f9:ef:a2:
         c5:68:2a:8c:66:45:38:90:f3:4a:cb:18:48:fd:4f:7d:be:98:
         24:cf:5d:09:84:c4:aa:3b:04:31:aa:db:94:12:bb:1e:11:68:
         40:50:5e:bb:00:a9:bc:f9:4f:0e:85:9e:77:89:25:1a:7c:d6:
         ea:5e:c4:d0:c9:98:11:be:b6:ec:0c:4a:3b:aa:09:a2:af:a1:
         89:40:32:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:21 2026 by rpki-client