This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File:                     c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier:          jUvV8qXVYAHD0kci8+GHVUi7IUqws3mTeo9HnqvExOI=
Subject key identifier:   F7:D1:8F:12:94:B0:8F:22:77:74:AE:C8:C3:A9:E9:8A:4E:C0:E3:C3
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer:       /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial:       019C41D8D4BDF3BBFFFC0478DBD07883DC23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 10:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:54 +0000
Files and hashes:         1: LcqefA0kElh8JewV5kCSLGG-J5k.roa (hash: JMhJK/hqVpg8wqMcEmK9X4OKux3FowYsD4YqDBdN+EQ=)
                          2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: CUeJQ2GjnJW/Bqm1St7562gtMj644XXVczyrwK6vL5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:d4:bd:f3:bb:ff:fc:04:78:db:d0:78:83:dc:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
        Validity
            Not Before: Feb  9 10:00:54 2026 GMT
            Not After : Feb 10 10:00:54 2026 GMT
        Subject: CN=f7d18f1294b08f227774aec8c3a9e98a4ec0e3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:b0:4e:69:a7:46:4f:ed:c9:57:9b:39:e3:
                    c1:ac:5b:72:d8:05:a4:6d:2b:c3:b1:d6:ef:86:6c:
                    23:5d:9d:f1:ca:99:cb:d6:6e:7c:c7:74:1d:ef:64:
                    c8:58:ba:11:7f:95:dc:4d:d3:9b:69:3c:c0:52:17:
                    9a:d0:e7:da:37:73:66:59:91:b8:79:61:19:6f:83:
                    bd:c3:44:a5:7d:8d:9e:4d:34:cd:82:78:e1:37:f4:
                    ec:c7:a3:3e:84:06:55:42:2f:91:01:89:fe:57:91:
                    3f:fa:41:e3:6e:b6:20:37:0b:3f:95:41:05:77:66:
                    6b:56:cf:56:fa:8e:fc:a9:60:f7:26:08:22:f0:cc:
                    4d:80:91:c9:4a:94:27:57:fb:c8:f8:4f:0f:83:b9:
                    c6:46:ce:33:bc:42:c4:d2:81:04:97:50:4e:83:84:
                    67:55:5e:8f:a8:88:f6:64:94:00:13:26:02:e9:a8:
                    7d:97:88:0f:9c:0a:b2:d7:45:c4:b7:fa:59:fa:a9:
                    3a:58:06:01:85:3e:f4:64:07:5b:35:ff:e7:35:9f:
                    bb:37:25:63:82:d7:d4:4c:67:f2:69:65:69:23:9b:
                    1d:31:8c:2f:79:a5:34:2f:ab:1a:37:a3:98:d8:69:
                    d2:94:78:b5:db:ea:84:ec:cd:ee:a5:29:63:38:d8:
                    73:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D1:8F:12:94:B0:8F:22:77:74:AE:C8:C3:A9:E9:8A:4E:C0:E3:C3
            X509v3 Authority Key Identifier:
                keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:12:79:0f:a5:79:63:6b:a9:ca:e6:73:d7:db:dd:40:71:46:
         40:2b:59:a8:69:b8:a3:ce:28:19:2a:45:ac:28:30:af:08:3b:
         dc:b8:2c:87:6d:45:6c:a8:ec:68:65:7b:17:82:95:74:e2:0a:
         5d:f1:8e:c4:e9:11:76:6a:bd:4d:da:40:3f:94:2f:17:19:dd:
         7d:bc:bf:8d:53:76:d7:54:79:5e:e2:00:93:5c:99:fc:e0:61:
         f5:3f:70:3b:cf:04:84:38:b1:fd:36:47:ce:50:5f:18:f7:99:
         58:3d:b4:e2:a1:76:1b:55:42:33:5e:33:13:7e:a3:e2:e4:df:
         f0:06:36:fa:c0:c4:1f:0e:31:4b:35:05:6d:a2:17:8e:e9:38:
         e9:f2:27:13:1a:2c:53:88:b9:c9:b3:26:a4:76:1d:27:05:e2:
         f7:7d:73:ab:a4:aa:fc:c9:cd:9d:7e:e2:ac:a1:c8:89:dd:8f:
         9d:b1:8d:87:eb:31:61:4e:cb:1c:1a:3b:c1:32:46:85:b1:34:
         98:f8:a5:27:ec:67:15:8e:1a:3f:d4:9b:26:c3:77:4b:42:40:
         98:f5:97:df:56:32:17:df:e4:ab:1c:eb:af:27:fb:6a:f5:8f:
         65:d8:a8:20:a2:2c:a1:f7:9f:19:cb:8b:68:8a:bd:95:95:bd:
         11:a7:28:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:26 2026 by rpki-client