This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
File:                     8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json)
Hash identifier:          s4FTrwf9/+p7j74tNadpKXJ6RI5Ym6gJ7wMlonqk7UQ=
Subject key identifier:   58:85:C2:9A:45:3A:B8:D6:5B:CE:91:1E:5C:54:D1:C5:0F:26:30:3E
Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
Certificate issuer:       /CN=f092ce4d6885345484e99a77d76166fc72022033
Certificate serial:       019C420F3822EE732F698A5E6BCB5075C993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 11:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:19 +0000
Files and hashes:         1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: 0ATH5lHG0FKuVrtumeY4C1T5AuwtlnOnbWWIw6Q8yPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:38:22:ee:73:2f:69:8a:5e:6b:cb:50:75:c9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033
        Validity
            Not Before: Feb  9 11:00:19 2026 GMT
            Not After : Feb 10 11:00:19 2026 GMT
        Subject: CN=5885c29a453ab8d65bce911e5c54d1c50f26303e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:17:6c:c1:a0:ef:9c:5e:14:84:97:e9:9d:12:
                    0a:71:b9:0f:bd:a4:55:a5:21:a4:0b:f9:57:c3:92:
                    3b:a6:8b:7f:c5:35:b6:5d:b5:84:a7:40:11:e4:c7:
                    04:35:e0:bd:ee:65:01:d3:26:cd:a4:fe:f6:3e:d8:
                    a2:78:6a:70:d4:9a:58:d5:97:ee:28:12:6a:d9:0f:
                    2a:22:c6:04:a7:8e:d4:50:f8:bb:b7:80:10:5b:43:
                    ea:6a:f9:b6:c7:78:0b:d2:bc:69:b1:a6:07:18:2d:
                    97:b4:0a:85:dd:36:ff:ef:42:48:17:48:01:20:b1:
                    27:09:9c:ee:1a:d6:c4:4c:e1:7e:03:99:18:f3:83:
                    ef:f4:23:5f:22:55:eb:17:4f:a8:9f:63:5b:af:84:
                    a9:98:f9:e7:3b:27:92:ab:24:ac:9e:03:aa:2f:8b:
                    2d:51:34:28:fb:b7:6e:e5:78:1f:d9:fa:a7:9a:17:
                    80:db:45:20:e6:ca:fc:52:2c:43:c8:27:a4:e6:ff:
                    3c:df:bd:a0:ef:7a:90:e7:eb:8a:c6:8b:21:8e:41:
                    2f:d9:bb:9b:74:31:d4:62:8e:1a:99:56:04:43:e7:
                    b0:aa:92:c7:6a:d3:d8:69:e2:70:8e:31:81:a5:86:
                    27:ad:d1:47:12:b2:e1:ac:78:37:a8:37:3a:44:08:
                    b3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:85:C2:9A:45:3A:B8:D6:5B:CE:91:1E:5C:54:D1:C5:0F:26:30:3E
            X509v3 Authority Key Identifier:
                keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:75:51:9a:ce:3d:4f:c6:42:fc:3a:12:00:68:d2:c7:be:fb:
         0d:c8:2f:28:03:45:c3:3d:dd:5b:62:c1:5a:4f:9a:c9:f7:59:
         94:e5:6b:fd:f7:5b:ba:92:c6:e9:15:9b:a9:24:67:e5:8b:01:
         fe:cb:58:a8:19:33:92:a4:83:ca:35:fb:0e:c0:8c:df:3a:83:
         b1:6d:0d:16:54:69:5d:ca:9c:47:e3:2c:a6:ea:f3:9c:e7:a2:
         73:9b:b7:1d:3d:b8:fb:39:6f:99:8e:46:69:bd:c7:cc:c7:2d:
         33:f0:41:e4:53:93:97:46:84:83:b5:bd:1f:81:3c:ee:65:7c:
         b1:91:41:c3:ff:ff:e7:0c:b7:8e:34:b0:87:86:47:11:31:be:
         b3:6c:5d:9d:64:5d:83:f7:31:4f:27:92:c0:4f:26:cb:34:48:
         1a:9b:cb:94:d4:d6:76:6f:ba:22:e8:77:e3:ba:ae:e4:b9:b9:
         77:10:48:3a:ae:49:ee:68:b1:91:9d:16:a6:fd:3a:12:da:43:
         6b:01:8e:20:68:c5:ef:32:3d:f8:d9:14:ee:cd:3b:f2:a9:5b:
         1f:82:9e:99:47:00:18:cb:12:79:fb:2b:e8:d7:bd:60:7f:80:
         53:9b:b3:70:bc:f5:60:8b:90:83:0a:49:a8:52:b2:14:a6:92:
         44:c6:36:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:38 2026 by rpki-client