This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
File:                     _tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft (raw, json)
Hash identifier:          W2OdRgZigLrJFKkyyEyJ9q7QGQkQooE/5geD28H2CYI=
Subject key identifier:   BD:40:44:EF:07:72:31:B3:75:1B:F3:A6:21:97:9A:93:80:46:9B:AD
Authority key identifier: FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
Certificate issuer:       /CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Certificate serial:       019C427D05C89CC693C5476848EDFEC726CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 13:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:15 +0000
Files and hashes:         1: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl (hash: NuNDzQZFcKG7sei7Co0ky3z6wJnQ+Lo4U32odUsAV8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:05:c8:9c:c6:93:c5:47:68:48:ed:fe:c7:26:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fed4a96fe1ed028d5912d77a500b09478bd18322
        Validity
            Not Before: Feb  9 13:00:15 2026 GMT
            Not After : Feb 10 13:00:15 2026 GMT
        Subject: CN=bd4044ef077231b3751bf3a621979a9380469bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:56:a2:3f:57:ce:60:69:a8:33:ea:af:7f:
                    92:6a:17:8a:9d:cd:82:e9:a2:d5:7e:92:78:a0:b2:
                    a1:bc:f8:b0:02:88:71:30:ad:84:28:3c:a4:68:17:
                    02:b3:d9:01:66:03:3c:0b:87:39:5e:0b:7b:99:6b:
                    96:25:3d:47:38:22:01:fa:f4:dd:14:28:d2:25:30:
                    e5:58:df:56:c5:de:fc:20:3e:df:83:e8:4c:a1:05:
                    b3:d9:41:3f:71:0d:a6:61:73:4a:9c:16:60:03:bd:
                    ad:54:c5:09:c0:1e:de:50:b2:09:fe:c8:ba:e7:17:
                    0f:ee:99:ce:39:d7:64:a6:db:cd:b7:db:55:9f:11:
                    d7:a8:9c:96:99:c4:75:34:02:14:95:5d:37:a3:a1:
                    7b:cd:52:6d:a9:98:7a:69:5f:2a:ec:52:02:5d:50:
                    c5:3f:6b:34:e4:22:6d:5b:99:10:10:eb:a7:4b:8a:
                    37:f0:d3:97:a9:eb:66:a4:1e:03:e2:bb:55:da:8e:
                    c3:59:ed:fd:a7:9f:be:b5:13:23:7b:5a:cb:64:ce:
                    80:19:5d:b6:7e:3d:2d:83:a6:8c:04:23:9e:e7:06:
                    b5:05:00:42:72:b5:d8:30:3d:37:35:f2:99:38:30:
                    f8:66:1c:61:a0:c6:c4:8b:e1:85:fb:7e:2f:9c:af:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:40:44:EF:07:72:31:B3:75:1B:F3:A6:21:97:9A:93:80:46:9B:AD
            X509v3 Authority Key Identifier:
                keyid:FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d1:77:74:c2:1c:4f:5e:31:b8:f3:61:2a:fb:50:db:e0:d7:
         d1:dd:d2:8f:5d:ef:de:6e:78:a3:f0:22:0b:09:55:31:e3:69:
         2f:90:c5:72:0d:09:43:4f:be:7f:bc:22:d4:6f:e1:c5:fc:9a:
         b4:5b:91:3e:73:1e:d1:6d:ba:9c:d3:e1:78:2c:94:cb:06:b9:
         aa:c6:4a:8f:98:4f:6a:2a:b2:5a:82:9b:02:57:49:4f:51:bc:
         bd:72:14:d6:42:75:72:40:c3:54:b4:65:83:ae:9f:37:0f:b5:
         0e:db:66:8f:9d:41:ba:ea:d7:e7:ca:3c:a2:92:ed:05:a9:1f:
         90:61:61:a7:99:38:17:a3:20:7f:3e:1a:b7:99:be:da:a7:14:
         ec:9c:e2:1f:20:60:b8:d5:66:df:4e:6b:5f:56:ba:b7:3f:20:
         5b:96:4c:71:ed:cd:7d:74:93:58:91:b0:33:f9:e1:15:d7:5c:
         51:c5:5b:84:44:17:12:81:2d:37:8a:22:c4:0f:e5:f8:e0:99:
         2f:3a:4c:9d:ab:f8:05:8e:76:a5:5b:0a:fa:a2:9d:17:91:1c:
         e8:0a:05:20:cd:42:44:d1:d2:3a:83:3b:9c:ea:05:68:d6:81:
         c1:b9:82:78:bc:82:c4:0a:8d:c7:d3:b9:bb:fa:ab:60:d2:d2:
         6e:0c:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:11 2026 by rpki-client