This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft
File:                     cHSIc9gyAihk-skAZdUdjie0Pl0.mft (raw, json)
Hash identifier:          9B6u9Vx2kFDFS9P2H8ztv8RmTxnv54gYKsd3+nflCCc=
Subject key identifier:   03:9C:26:50:76:24:D2:8C:66:05:EC:A1:66:75:07:F4:16:AC:33:A2
Authority key identifier: 70:74:88:73:D8:32:02:28:64:FA:C9:00:65:D5:1D:8E:27:B4:3E:5D
Certificate issuer:       /CN=70748873d832022864fac90065d51d8e27b43e5d
Certificate serial:       019C427D999F1DAFE5191F0478237C0E0C69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cHSIc9gyAihk-skAZdUdjie0Pl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 13:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:53 +0000
Files and hashes:         1: O-DHQ-d3mfAOgq3yuIWV4iVv_x8.roa (hash: dSSiaDVSWahBigya5YVNu9L0fcAePIWgFzlkT6f9BmA=)
                          2: cHSIc9gyAihk-skAZdUdjie0Pl0.crl (hash: ohKe23ZASxj8aEU3bHjN+3DgaKgObsTRzFGg3o/JRsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cHSIc9gyAihk-skAZdUdjie0Pl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:99:9f:1d:af:e5:19:1f:04:78:23:7c:0e:0c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70748873d832022864fac90065d51d8e27b43e5d
        Validity
            Not Before: Feb  9 13:00:53 2026 GMT
            Not After : Feb 10 13:00:53 2026 GMT
        Subject: CN=039c26507624d28c6605eca1667507f416ac33a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:9d:6f:ec:c4:eb:cf:2e:b8:d0:78:02:cf:7f:
                    e4:be:e5:d7:68:cf:67:fa:5d:dc:34:49:4d:09:e0:
                    e2:98:b6:99:7d:8c:c4:fd:61:8d:44:8e:7b:b8:3d:
                    89:1d:f7:66:09:89:4c:7e:c6:46:d9:15:3d:c1:b3:
                    83:cc:f8:52:07:26:49:90:ae:20:bb:34:10:da:63:
                    2d:e8:cb:4f:42:03:03:4f:45:89:21:df:c9:07:49:
                    ba:2e:67:2c:ad:d7:3a:ba:11:2d:1f:f8:2e:96:08:
                    1b:75:0f:79:38:35:b4:8d:7d:67:04:95:e7:59:d9:
                    91:23:85:5a:9c:bd:b5:a6:c2:ad:32:03:97:8c:5d:
                    bf:92:2f:49:5e:d7:66:34:18:06:df:3b:0d:34:cc:
                    f3:27:29:5f:75:87:ad:2d:2a:3a:6d:d1:16:6b:9e:
                    e0:11:69:8e:e7:16:eb:81:cb:5f:ad:f5:a1:9f:5a:
                    11:93:8a:d1:e8:bd:17:b3:cd:e3:d0:53:90:f7:8a:
                    8d:03:cc:3d:d7:66:82:62:69:a1:36:08:3d:8a:35:
                    f7:8d:2b:f1:9c:51:b5:4e:c0:98:3a:25:46:04:a4:
                    da:fb:b5:9d:38:6c:f7:01:df:64:8f:16:3f:49:18:
                    e5:de:43:b8:37:e1:b5:dc:9a:4d:8a:f6:ae:5a:50:
                    6d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9C:26:50:76:24:D2:8C:66:05:EC:A1:66:75:07:F4:16:AC:33:A2
            X509v3 Authority Key Identifier:
                keyid:70:74:88:73:D8:32:02:28:64:FA:C9:00:65:D5:1D:8E:27:B4:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHSIc9gyAihk-skAZdUdjie0Pl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b1:b5:72:78:b9:40:34:3b:b9:29:23:23:52:f9:2f:52:05:
         ad:92:94:2a:95:6d:6d:e9:a8:90:e5:d9:cd:ae:92:c6:7e:e8:
         2e:c3:b0:b9:c7:26:3a:a4:43:f6:75:59:73:19:f5:39:d8:15:
         13:73:51:c1:4b:d8:43:03:0a:41:af:a5:84:c9:48:ce:7a:d1:
         b9:74:29:46:8e:07:42:0f:d9:97:40:e7:21:b1:e9:a0:c3:91:
         0f:e6:d4:74:8f:78:6e:dd:5d:c1:51:dc:e1:55:10:88:ef:7a:
         e6:01:14:aa:30:84:a2:d7:fe:21:1a:4c:87:d8:c6:db:be:cc:
         ae:ca:2a:24:ba:4a:88:b0:19:7d:16:cc:4c:42:54:b9:26:09:
         0e:14:42:00:47:a5:d1:09:73:e1:84:85:26:73:f3:76:84:4f:
         db:d8:3d:7d:aa:f5:26:3a:d4:7a:4a:72:74:b2:6d:de:3e:82:
         5e:fe:99:a0:d4:72:7c:eb:63:9f:7c:a9:f6:99:77:a3:95:bc:
         26:ae:4e:1b:9d:d5:bd:4a:9e:45:ca:a0:f2:10:1b:3a:45:8b:
         50:4b:3a:e6:7c:03:03:e5:60:6a:50:bf:71:a1:62:2d:20:90:
         2d:10:bb:83:5c:9b:08:33:34:8e:9d:70:d4:c1:14:4b:1d:37:
         0c:fc:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:04 2026 by rpki-client