This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
File:                     cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json)
Hash identifier:          ULdoG1DP7mvXWSk7tcz9lemoNllxuSBoPBUy/9CVjZQ=
Subject key identifier:   41:18:0E:86:E3:63:6E:B0:72:C2:FE:C0:C3:83:5D:96:9F:FF:2B:5B
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Certificate issuer:       /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial:       019C424612A4E067A7716FE1F05393B0D44A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 12:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:14 +0000
Files and hashes:         1: MaMbR5QG8JlzxZJP9I1sXVNjHNM.roa (hash: PycaTW4K59wW80aiPDoqRYwdmZTOHKaA4NMu7/9B2n0=)
                          2: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: AUk6sgzzBDYpg0rAEiOn/EuUaqx7e5YFeDqHDkX6Qko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:12:a4:e0:67:a7:71:6f:e1:f0:53:93:b0:d4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
        Validity
            Not Before: Feb  9 12:00:14 2026 GMT
            Not After : Feb 10 12:00:14 2026 GMT
        Subject: CN=41180e86e3636eb072c2fec0c3835d969fff2b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:70:bf:f5:a9:7e:d6:d1:bd:b7:6a:cd:35:
                    a4:e8:c7:f8:15:34:22:65:07:bc:f1:25:22:c1:29:
                    65:04:96:b4:ac:77:79:0f:28:9b:f5:3f:d0:56:27:
                    d1:1f:b5:b4:eb:77:71:5a:b2:6e:44:f2:30:15:59:
                    69:ac:8a:b1:11:86:fa:e7:94:47:2f:ca:f8:d8:a2:
                    b7:3c:9c:12:0c:8d:a4:5d:78:12:49:59:a8:a8:f3:
                    97:be:5e:55:2f:d4:c2:ab:e3:de:8c:f1:d4:2a:d4:
                    f9:66:45:d5:dc:31:d4:09:f3:88:e2:ee:7f:ae:49:
                    c7:df:f6:ec:5d:1b:bb:a8:19:86:28:e8:37:f7:77:
                    7c:7e:84:07:81:86:33:a2:74:4e:e3:12:7f:b4:0c:
                    20:0a:16:23:e5:7f:32:70:da:b4:01:32:29:71:9c:
                    af:14:6c:4a:2f:39:7e:11:65:25:a5:dd:2d:be:6f:
                    30:7c:6f:a4:cf:ff:69:c1:03:8d:bb:a8:e6:67:f1:
                    62:06:af:42:1d:e1:38:03:3a:74:bf:f9:eb:51:2c:
                    a7:67:bb:8d:2d:45:1a:0a:b3:5c:7e:2d:b8:c4:32:
                    b6:86:9f:3b:10:d2:43:f5:49:e7:56:7a:f1:3e:85:
                    cd:55:68:e3:01:c4:2c:82:c7:2c:bf:73:b9:0c:8a:
                    d3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:18:0E:86:E3:63:6E:B0:72:C2:FE:C0:C3:83:5D:96:9F:FF:2B:5B
            X509v3 Authority Key Identifier:
                keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6e:77:83:4b:ac:f1:4a:ea:f6:18:12:e3:b5:72:49:19:3c:
         49:ce:e8:cd:71:7d:88:c7:3a:73:a5:c6:c6:2c:e0:94:56:3a:
         a8:91:ab:a9:4b:b5:26:84:d7:b3:37:53:17:dd:68:f2:80:63:
         15:c7:6f:f1:91:b2:5a:19:b8:70:26:bc:8e:47:51:4b:e1:9e:
         1d:c6:b1:9e:04:34:18:a9:dd:1d:77:05:51:7e:73:f7:2a:c7:
         6b:59:60:e4:30:c4:2e:b8:e3:e1:34:0a:be:64:b4:7a:69:1d:
         3f:33:f4:3e:b1:bc:c9:9f:38:f9:46:09:7e:b7:90:4e:dc:6c:
         75:dc:91:73:20:5a:59:80:7a:06:1b:f1:72:d7:60:43:32:ea:
         f1:6d:69:59:dc:1f:59:21:fc:6f:8a:2a:c2:c6:6f:b9:27:2c:
         31:5c:80:7f:97:30:00:6a:c7:f6:80:d5:3e:fa:16:d6:98:1b:
         fb:e4:59:bf:11:f3:76:3c:97:20:cf:c5:63:2e:14:99:a7:2c:
         84:ac:da:af:8a:ae:72:3d:e4:6e:e6:18:1d:b0:d7:73:49:94:
         58:64:c0:ed:c8:40:cc:6c:34:2a:7a:6f:73:e3:bb:c6:7f:ca:
         09:f7:37:4a:b9:91:34:21:6f:3d:d7:79:04:cf:31:fa:45:07:
         70:14:39:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:52:55 2026 by rpki-client