This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File:                     1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier:          9hs1HK4GhDIA6C46mPTCLvb4NDldY3VOjZDUSvx5M1o=
Subject key identifier:   20:45:9F:63:FC:CD:D2:13:81:0A:D4:5C:38:39:E6:E3:00:57:D9:CC
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer:       /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial:       019C438FCD507BC13F9199D7D7ABC70A536E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 18:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:23 +0000
Files and hashes:         1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: 5pPgeHVW1PobYWZa7FHzbSi36M1RrOPee7g+kBsCDmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:cd:50:7b:c1:3f:91:99:d7:d7:ab:c7:0a:53:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
        Validity
            Not Before: Feb  9 18:00:23 2026 GMT
            Not After : Feb 10 18:00:23 2026 GMT
        Subject: CN=20459f63fccdd213810ad45c3839e6e30057d9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:b0:b9:11:b7:db:19:8b:13:ac:9a:43:27:
                    05:54:fe:9b:e4:7c:e5:d2:8c:8f:b8:89:f4:d7:92:
                    4b:3d:e2:15:00:24:6e:c1:6c:e4:f8:21:f3:3a:33:
                    dc:b8:f1:3a:cd:6a:6c:d3:62:1c:65:ad:a3:78:dc:
                    a6:4f:bb:ba:c0:23:4e:f8:d7:a9:b3:9f:ce:81:dd:
                    b4:28:26:3d:99:04:dd:57:6e:3b:a5:c1:d6:d1:3e:
                    19:7d:ac:d5:31:c9:44:e1:0a:08:de:24:3c:99:27:
                    44:fd:eb:69:86:71:c6:51:e1:61:53:12:bb:89:8c:
                    b1:46:2e:f5:ae:1e:e6:83:ed:76:d0:07:db:a2:8a:
                    a1:23:67:87:c9:be:91:82:3c:02:bc:14:09:4a:d1:
                    fe:03:33:3f:90:69:d1:7a:1f:14:3d:cf:43:49:8e:
                    e1:87:ac:11:3c:60:02:23:72:f0:8a:ee:22:60:97:
                    d7:87:2f:97:a5:b0:c3:60:96:8e:7e:08:17:f5:fd:
                    0b:20:77:4f:99:02:91:b6:8a:d6:c7:4b:fe:f2:c4:
                    3c:da:7a:9f:ba:6c:5a:29:a3:8d:27:36:29:3b:06:
                    54:f2:a7:bd:33:b0:2b:ce:64:b7:7a:21:1c:eb:4b:
                    ca:81:0b:94:10:31:c6:12:3d:4e:7e:1a:34:29:18:
                    6b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:45:9F:63:FC:CD:D2:13:81:0A:D4:5C:38:39:E6:E3:00:57:D9:CC
            X509v3 Authority Key Identifier:
                keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6e:e4:e0:60:1e:2e:f6:a4:02:37:0b:0e:ad:82:03:20:cf:
         40:21:a8:18:a1:11:4f:23:7d:22:5f:90:e8:c2:d9:f6:15:cd:
         15:9b:81:9f:04:2d:97:aa:bf:e4:b9:13:4c:4b:62:ad:39:e9:
         2f:a5:3e:0f:e8:d7:75:8d:4f:1d:8e:d9:92:b8:ac:08:d3:48:
         43:f7:07:58:c8:c1:f6:29:50:08:10:0c:d4:15:84:22:3e:d4:
         7e:3b:30:3e:e2:9c:46:c6:14:35:58:dd:b1:8f:3f:0c:86:13:
         c9:8e:25:41:82:34:14:7c:6f:36:77:a5:bc:7d:c8:a9:f4:fd:
         d2:87:da:fc:a1:51:fc:e2:48:98:5d:87:7c:30:ba:cd:0d:15:
         13:17:1a:94:08:a7:3b:ab:b1:94:59:c8:c0:36:55:0a:59:bc:
         02:ff:9d:27:ba:03:65:2f:ea:99:48:2c:14:c8:d4:5f:70:34:
         34:57:4e:91:27:0d:11:55:10:0a:37:5d:ec:97:21:e5:a8:47:
         5b:03:fb:26:02:1b:d4:a3:ed:f5:02:68:a0:94:9e:ca:68:c7:
         cd:26:fe:eb:f2:10:9b:bd:c2:5a:95:bc:3a:e9:c4:45:31:30:
         d5:c8:39:1c:8d:35:1a:aa:bf:98:0b:cc:95:2f:3d:8b:b5:07:
         1e:40:49:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:03 2026 by rpki-client