This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File:                     INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier:          oRrPG5aPTbObrLTyyVZgmq1GzD3TaQYlzh2JsvQ3HV4=
Subject key identifier:   A3:D0:CA:D4:11:16:94:B2:EA:CB:57:08:2E:0B:4A:B3:A0:12:D8:E2
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer:       /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial:       019C4210043620A7DCBC4E3DB1895B454683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number:          180B
Signing time:             Mon 09 Feb 2026 11:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:11 +0000
Files and hashes:         1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: Ort62ssUASdOOFs7kEDrH1ipSpg46WwQw1Wt0Vr79+g=)
                          2: V8NlnKjUgS7bj4rUkCz5LctnTTY.roa (hash: 2V4IKo8nS+06Kfv+fwmatbojuyWYf1XN4kaAl/BcTuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:04:36:20:a7:dc:bc:4e:3d:b1:89:5b:45:46:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
        Validity
            Not Before: Feb  9 11:01:11 2026 GMT
            Not After : Feb 10 11:01:11 2026 GMT
        Subject: CN=a3d0cad4111694b2eacb57082e0b4ab3a012d8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:b5:47:48:2f:0b:67:fa:ff:72:d5:03:46:
                    25:a8:dc:25:eb:ce:7c:aa:54:db:8e:a5:8d:7f:e8:
                    b9:f4:bb:86:64:9a:d6:a5:d7:4b:90:43:e9:2e:ea:
                    2d:f5:52:b9:82:8f:26:91:f9:0b:b0:5b:e6:9e:bf:
                    7a:60:c1:f9:9d:0b:e6:20:6e:34:0a:8d:08:10:9d:
                    15:a7:22:ea:08:3d:40:3a:f9:14:67:82:f6:a2:9b:
                    ac:9a:b1:46:cc:9c:57:5a:0e:3f:f5:2b:ac:a0:46:
                    9e:5e:1d:fb:97:e0:60:42:4b:26:ea:07:7c:d8:34:
                    40:24:13:81:2a:74:58:45:23:d9:e9:25:0d:6f:48:
                    e1:94:4c:95:ed:c8:96:4d:d0:f3:89:30:ab:1b:51:
                    56:4f:28:3c:df:14:11:63:41:c1:a8:d5:9d:53:68:
                    11:e1:ec:28:81:80:17:7e:3b:5a:da:05:1f:fc:0c:
                    c3:ff:ab:fa:e9:2b:70:24:c0:17:cb:5d:0c:cd:34:
                    19:f5:95:25:69:bc:02:10:f9:8b:ec:ac:78:be:bd:
                    3a:c1:03:2c:57:8b:86:45:5d:4c:7d:0c:05:a1:73:
                    a5:ef:ae:55:73:30:9c:b0:24:65:0b:84:f5:db:c2:
                    0c:e8:f8:7c:bd:ed:e0:38:d1:10:3e:70:a5:ea:fe:
                    4f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D0:CA:D4:11:16:94:B2:EA:CB:57:08:2E:0B:4A:B3:A0:12:D8:E2
            X509v3 Authority Key Identifier:
                keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:36:01:1c:c2:12:56:ad:69:b3:aa:9a:ff:08:a1:9a:00:cf:
         15:02:f8:c3:6c:d1:dc:41:e0:48:a3:14:7d:28:e3:c5:27:92:
         67:bd:fe:be:45:f7:5e:7e:ab:53:a1:be:d9:c1:e5:a1:93:9c:
         87:a0:33:0d:c1:c8:09:4e:39:56:54:17:50:3a:32:81:58:70:
         f9:8d:21:cd:49:3f:5b:90:5f:4e:57:d7:fc:02:79:ab:4d:a5:
         8e:2d:1d:22:59:4d:38:bd:96:80:a2:62:3f:9a:21:8c:d8:74:
         63:0b:47:84:37:3c:53:65:8d:9c:86:3d:06:51:e2:46:93:e4:
         36:32:ff:e5:5f:f3:df:3b:cd:16:04:ac:80:2b:88:89:01:0c:
         b3:b6:64:18:8c:d0:02:6c:e3:d6:17:1c:65:90:f8:b4:2c:c3:
         7d:dd:e1:4e:ec:ab:24:e4:3b:96:1b:9f:c7:3b:37:ee:ee:64:
         cd:23:38:40:3e:ec:05:9c:9d:f0:8b:02:aa:61:e7:8d:80:5a:
         28:be:7b:d7:04:b4:36:92:18:87:cf:f1:dc:85:f8:b8:a0:d3:
         16:66:4c:d6:1c:a4:8f:be:40:13:d6:f3:a2:81:12:d2:0d:20:
         47:6f:a6:73:1b:1a:11:b9:2e:9d:52:86:e3:8c:01:55:19:93:
         9d:77:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:00 2026 by rpki-client