This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File:                     clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier:          XZGaUCnbpqQHho85GXvGdaQcFLgr0fTHZLoVVKjZ65c=
Subject key identifier:   00:C2:F5:98:5A:FD:FD:E6:5F:25:18:CA:D5:A5:2C:47:69:10:86:75
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer:       /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial:       019C424642C8BA62F481781EAA25CA2D3A67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 12:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:26 +0000
Files and hashes:         1: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: A80OgYNekSc856eb5QC8CoNFnwRmR660Ty9+xM8Ksm8=)
                          2: tUd0APy5lJPbz6wFDFJu0u985WQ.roa (hash: KqXLchMnbVqnoKOUk/yCQOefoXck4w0BI9s549cedMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:42:c8:ba:62:f4:81:78:1e:aa:25:ca:2d:3a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
        Validity
            Not Before: Feb  9 12:00:26 2026 GMT
            Not After : Feb 10 12:00:26 2026 GMT
        Subject: CN=00c2f5985afdfde65f2518cad5a52c4769108675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:18:f2:52:b0:62:f4:14:b9:c8:50:dc:79:
                    e3:54:be:ea:3a:b3:11:0c:a7:fe:ff:01:8a:2f:2f:
                    b1:bb:6c:d1:61:75:37:b9:52:e0:24:49:ba:87:8c:
                    f5:e6:fe:a1:b0:e2:7b:24:76:8b:90:46:f7:7a:f5:
                    72:42:04:5e:6b:c4:e3:be:57:50:ed:c4:fb:a0:81:
                    1d:c2:38:d0:97:18:13:ad:95:89:d6:87:6b:da:88:
                    1f:45:2a:28:0a:db:bc:3a:c0:24:2e:1b:37:93:44:
                    27:28:10:ec:ee:43:63:7d:3e:31:ef:7c:9e:9d:93:
                    df:15:d7:f7:d9:4f:15:9f:cb:21:a6:ea:83:66:33:
                    d9:4d:bf:05:18:20:db:b7:16:3d:f5:42:ee:dc:c3:
                    3a:71:26:95:cb:44:5e:1d:25:fd:6a:20:84:a2:94:
                    06:89:cf:e8:a2:42:98:d6:97:83:0f:5b:e2:f9:ca:
                    3d:f6:48:8a:bf:d1:55:ca:95:2c:a1:6d:85:13:f5:
                    54:a1:4c:d2:c6:e9:18:50:b6:7d:32:ee:6c:73:42:
                    d4:97:5d:56:00:bb:07:2e:b8:c3:a5:09:bb:7b:53:
                    4d:4c:ce:da:4d:18:c9:32:2e:58:81:24:00:e9:80:
                    89:41:46:36:82:c5:da:73:a8:3c:b8:45:3d:ac:bd:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C2:F5:98:5A:FD:FD:E6:5F:25:18:CA:D5:A5:2C:47:69:10:86:75
            X509v3 Authority Key Identifier:
                keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:be:97:40:b5:e4:54:1b:52:f2:dc:b9:5f:f7:64:ad:20:43:
         e8:2f:00:f2:76:93:c8:33:af:2e:f7:d9:53:a9:df:9d:ef:03:
         3e:27:83:b6:9a:65:9b:97:d2:ac:f2:2c:02:a7:14:9d:c3:6d:
         9b:22:2a:bb:19:37:d0:24:52:58:e6:41:96:32:f4:de:59:e6:
         36:70:eb:88:2d:7f:25:7f:6b:07:59:eb:67:51:e7:10:f3:ec:
         cd:26:31:78:33:a7:66:c7:45:09:03:7e:68:79:8b:18:0c:06:
         57:9f:f3:72:62:b7:66:eb:70:0d:34:c1:f8:fd:1b:f1:dd:f8:
         83:59:e6:a0:90:ca:2d:b3:82:b9:72:b0:f8:b5:fa:67:7a:f6:
         1a:43:81:14:35:ed:0c:a5:b2:a2:98:5b:1d:26:e9:de:35:c7:
         1b:e7:f0:ff:3b:29:db:73:86:83:c1:2f:96:8f:80:1c:09:1b:
         bd:d6:29:5f:b6:4d:4b:76:1d:07:b9:83:77:d8:80:ae:de:9a:
         7b:97:af:cc:78:da:13:cd:a9:ca:06:e3:b3:79:51:d5:34:75:
         a4:c8:8d:f2:54:fd:57:1b:c3:31:d6:eb:12:8c:26:47:ce:41:
         22:e2:7e:ba:f0:2c:e6:2a:55:51:f0:e2:bb:b6:0c:3c:3c:e6:
         ac:55:6c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:53 2026 by rpki-client