This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
File:                     oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json)
Hash identifier:          MlZEJ3OFRqxf7DCHnL1WRcqvDRyI+v5l5GF6r00zeN4=
Subject key identifier:   8C:FC:76:C1:F4:C8:BF:A4:01:97:2E:E1:99:4B:B5:FF:F3:70:6C:20
Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
Certificate issuer:       /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Certificate serial:       019C4322ED2AF902D7219795B81160B7EBB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 16:01:28 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:28 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:28 +0000
Files and hashes:         1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: 8Y7XXAzkVEXugZ1dTf1YG9BqY/hbKowh6hWAruP/eXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:ed:2a:f9:02:d7:21:97:95:b8:11:60:b7:eb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
        Validity
            Not Before: Feb  9 16:01:28 2026 GMT
            Not After : Feb 10 16:01:28 2026 GMT
        Subject: CN=8cfc76c1f4c8bfa401972ee1994bb5fff3706c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:58:c1:14:2b:2c:08:91:c1:90:03:2f:89:
                    fe:65:d4:bb:5c:68:88:5a:d8:6a:df:8d:b2:3e:e5:
                    46:f5:c4:05:bc:e9:eb:08:f1:8c:ab:b6:fc:53:68:
                    65:e7:e9:3e:ae:5a:c1:88:d1:0b:3a:2a:29:20:3b:
                    8c:40:62:aa:04:5c:52:ee:ad:33:a0:27:e3:53:90:
                    33:a3:7c:36:d5:4e:45:20:61:1c:ca:9f:d4:33:02:
                    be:24:b4:f8:13:5d:15:5f:03:dd:2b:91:f8:b8:1d:
                    4e:ab:84:7c:00:39:01:82:4b:d4:95:6e:59:5c:00:
                    83:1c:38:4c:bf:dc:45:fc:7b:46:17:e9:04:69:38:
                    b8:95:e6:20:bd:03:8f:e1:0e:3f:73:35:c8:64:d9:
                    1e:d7:6a:3a:fb:3b:24:94:be:f1:19:87:09:d7:82:
                    b5:1c:4a:a7:41:c1:88:b8:d8:e2:59:d2:62:fc:bf:
                    16:48:97:04:18:90:48:5f:79:fb:1a:a5:d5:d2:d2:
                    90:86:a0:c2:9d:7f:1b:5a:7c:18:19:16:31:be:e4:
                    6c:be:2f:5a:ee:f4:29:7c:b4:b4:1b:a9:43:27:50:
                    d6:51:b8:40:26:54:63:ea:3a:33:c1:7a:18:64:62:
                    f2:13:a6:ee:f0:01:7b:e4:ba:d1:bc:a9:7f:15:3c:
                    c1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FC:76:C1:F4:C8:BF:A4:01:97:2E:E1:99:4B:B5:FF:F3:70:6C:20
            X509v3 Authority Key Identifier:
                keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:e0:57:be:05:b0:2d:5e:f8:40:04:5a:66:a3:2c:9f:73:91:
         36:8a:ac:24:9f:49:19:4d:ec:f5:1c:13:32:fb:50:ea:1d:db:
         43:bd:49:5f:30:0c:da:73:74:d9:2a:36:5d:2c:df:15:40:08:
         8a:24:fd:53:d9:e0:d0:bf:18:b8:61:92:c6:ca:c5:4c:e9:8c:
         9b:19:25:70:78:3d:ad:fe:ae:dc:96:6f:7e:60:ab:87:df:9f:
         7a:4e:f5:43:b9:91:37:95:a4:73:e4:9d:ab:4b:21:1d:0c:91:
         50:ba:b2:93:3a:2b:15:26:54:aa:86:e1:58:18:a6:6f:de:34:
         5c:11:44:30:22:2e:86:95:d5:5f:9b:7e:82:26:57:5c:5e:0e:
         b3:f2:1a:eb:02:6d:b2:09:fb:56:bc:f8:04:10:00:f9:d0:9e:
         92:67:f1:78:a1:3e:5b:c5:9d:14:a8:c1:42:b7:14:e5:4b:bf:
         07:95:e6:6d:b3:f2:8a:3e:12:43:e9:30:d7:a1:f0:7c:78:c1:
         c2:9b:53:e1:56:46:94:de:5b:d9:86:50:91:97:ea:23:36:2a:
         9b:36:06:9c:2e:b3:7b:03:bd:81:b4:bc:5f:93:9e:8e:09:37:
         fa:13:b0:dd:1e:70:8f:e0:67:41:81:64:d0:ac:8d:ca:15:2b:
         05:20:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:15 2026 by rpki-client