This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File:                     Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier:          qTXk6hCoAQZvuUhyn19x1X/sM9LR61bKi0rp0oFPibk=
Subject key identifier:   08:0B:14:FB:06:E1:C9:F2:2E:59:C8:D1:8F:7A:F9:23:1C:1F:AA:DC
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer:       /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial:       019C43906E687A85DE699F0A091FF0D5D212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 18:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:04 +0000
Files and hashes:         1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: EeeXDxZfNRovff42pO5ew6ZgxbF+ZJtRwzy2zzhMVj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:6e:68:7a:85:de:69:9f:0a:09:1f:f0:d5:d2:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
        Validity
            Not Before: Feb  9 18:01:04 2026 GMT
            Not After : Feb 10 18:01:04 2026 GMT
        Subject: CN=080b14fb06e1c9f22e59c8d18f7af9231c1faadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:ea:6b:1e:94:43:ba:82:c7:9e:1f:50:ff:
                    22:74:68:a3:ea:84:35:da:a7:64:64:ab:b4:ea:66:
                    1b:a5:c1:56:70:30:cf:b5:91:9c:3f:ca:e5:a7:dc:
                    03:c8:56:35:22:4b:92:04:af:80:bd:dc:41:f8:d0:
                    3a:6a:65:f1:ba:49:0b:8f:b4:97:5a:2f:f5:48:3b:
                    b8:45:24:1d:79:91:22:21:67:e9:c7:f6:9d:d9:bb:
                    e5:d3:33:1f:4a:4c:e9:f2:fa:ea:d0:0c:7e:8f:2e:
                    72:ab:54:53:c2:97:6a:38:54:ba:61:6b:5d:4f:d2:
                    02:d3:62:57:3b:5e:d1:ea:4d:4f:09:c7:7c:c9:08:
                    a9:5e:dd:6f:c6:fe:18:f1:e4:39:0f:9a:d5:3e:96:
                    7c:0e:1a:64:7a:2d:fe:49:dd:f2:79:89:14:72:e6:
                    d2:78:71:7b:f6:88:17:16:83:12:52:e9:b1:8d:0f:
                    42:77:f1:bb:0f:48:b3:99:87:c6:0f:35:0a:bb:4c:
                    69:09:17:22:50:1c:14:fc:c6:2d:a2:a4:e3:06:e8:
                    0b:03:44:bb:c1:d9:c0:57:ba:d9:18:8f:60:be:fa:
                    78:45:e5:c6:94:6e:51:f5:d8:b6:ed:ca:0a:d7:d8:
                    dc:3a:e4:3c:9a:73:a3:83:b8:b1:d2:2a:a3:97:b5:
                    bb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0B:14:FB:06:E1:C9:F2:2E:59:C8:D1:8F:7A:F9:23:1C:1F:AA:DC
            X509v3 Authority Key Identifier:
                keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:42:bc:44:2b:7e:ce:9f:d7:c6:4c:ea:ac:d2:7f:46:6f:f0:
         f9:f5:0a:11:bb:db:f1:7b:c8:4d:b3:55:04:fb:5c:ee:80:8d:
         74:71:a5:f7:79:a1:22:82:3c:7c:76:32:c9:40:9d:d7:e4:7a:
         f5:5d:ff:31:87:1b:a0:b1:d9:81:1e:79:74:02:f7:e0:09:fb:
         49:73:0e:b9:6f:9e:18:ab:47:df:90:69:74:91:c6:d1:74:d2:
         c9:3d:a5:2d:dd:74:e5:3f:49:65:a5:66:95:ad:5b:8d:aa:cf:
         ec:ea:12:26:20:f1:0a:b5:2c:5f:40:ac:65:f0:54:92:00:46:
         64:ca:61:4d:3b:59:54:2a:d6:8d:e0:5e:e8:6d:36:94:39:f2:
         c0:8b:f2:73:aa:49:5f:2f:db:de:06:06:db:be:b6:0c:ab:a9:
         69:31:ef:08:f0:40:d9:67:cc:ab:40:c9:0a:30:6b:c6:24:eb:
         96:ef:fc:2e:ed:64:ad:10:94:91:dc:32:a5:35:e3:16:54:76:
         4d:f0:45:9b:5c:0b:32:87:cc:5e:cc:d3:26:b8:ca:5d:bb:6d:
         1a:3b:52:49:89:28:9f:16:7c:47:0c:18:73:5e:57:37:ef:5d:
         ec:f2:5b:8d:f2:d6:07:dc:25:b2:99:b9:37:c8:08:74:ae:2d:
         b0:a3:a7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:55 2026 by rpki-client