This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File:                     8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier:          R9wSl6JFlWGTYJdiGrZYCUc2WQQqHSHqTkrxY4fyFIA=
Subject key identifier:   87:11:FC:F8:38:E5:C2:79:11:6D:B5:7B:37:D3:3A:11:A7:54:52:B2
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer:       /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial:       019C413390484C39CD83AE17387E8F70E681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 07:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:24 +0000
Files and hashes:         1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: +JR+CeEXgYcT2SOViCayzM93T1CzAMfLBwNFJcjFGSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:90:48:4c:39:cd:83:ae:17:38:7e:8f:70:e6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
        Validity
            Not Before: Feb  9 07:00:24 2026 GMT
            Not After : Feb 10 07:00:24 2026 GMT
        Subject: CN=8711fcf838e5c279116db57b37d33a11a75452b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e5:33:22:82:aa:40:68:d8:c9:34:3a:09:92:
                    26:ef:13:b0:57:6a:c7:08:17:cc:65:33:b7:d4:2a:
                    3b:91:3a:4e:97:63:12:c0:82:9c:7e:2d:3b:a5:f7:
                    85:ad:f8:0c:f1:d8:28:d5:0b:05:49:2c:80:0e:59:
                    78:b2:b8:82:da:ef:81:c9:fc:cd:05:67:38:00:60:
                    ad:3d:24:21:45:28:ac:a6:eb:da:1f:9b:6c:37:17:
                    6d:61:ea:de:66:49:22:2a:10:89:e0:f9:f8:c4:33:
                    2e:18:90:eb:75:fd:74:88:09:ba:ae:3d:f7:92:58:
                    69:f6:fe:7d:79:33:c9:8a:38:94:61:0f:74:1b:32:
                    79:2d:99:9e:62:6a:7b:39:4e:45:63:c7:3a:2e:37:
                    d5:e5:be:a9:99:5f:3b:a1:e4:2f:b3:aa:f6:b2:e8:
                    2b:3c:d0:48:a8:91:f9:11:88:89:66:63:dd:72:55:
                    df:6e:29:8a:a5:2d:3f:de:16:f2:73:38:55:cd:2b:
                    1c:6f:68:74:1c:ed:70:c0:b9:51:69:45:31:90:33:
                    aa:82:49:a0:e0:05:f9:4a:a0:8f:dc:fb:6c:36:58:
                    1c:c6:93:4c:35:c9:ad:7c:98:8f:f3:80:64:e1:6d:
                    f3:58:60:cb:35:75:5d:68:a1:f8:19:a0:2b:f4:f8:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:11:FC:F8:38:E5:C2:79:11:6D:B5:7B:37:D3:3A:11:A7:54:52:B2
            X509v3 Authority Key Identifier:
                keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a7:05:24:1a:7e:0e:79:4d:48:a8:87:e5:c5:6a:f6:84:db:
         a3:08:82:95:a4:b5:37:f3:84:aa:43:fe:5f:e2:ef:68:a2:35:
         87:a6:e5:e9:94:df:61:8f:e0:cf:a7:87:75:9c:ff:a3:78:72:
         be:51:c7:7f:b1:01:e1:a5:ea:85:9f:75:2a:d7:e3:71:60:4a:
         b7:f5:d1:58:a7:0d:46:eb:2b:e5:5e:70:30:77:29:f8:dd:d2:
         06:4a:dc:2c:18:ce:ed:73:bd:05:e7:35:df:fb:19:cd:86:4d:
         da:30:d9:5c:31:86:b0:15:6c:5d:40:87:65:dd:9f:d3:f0:e5:
         fa:71:d7:95:14:fa:4e:89:29:5a:7f:b6:68:c1:62:b1:a5:e5:
         d2:ac:8a:f3:d0:24:c5:b1:ab:c9:99:b3:c1:cd:ae:8b:91:f4:
         9a:3c:2f:a9:be:28:66:4c:19:ac:35:ae:bc:5f:b5:e2:68:ba:
         b5:92:4c:8d:af:c2:4d:b0:8d:d7:02:12:cd:ad:67:06:b2:b7:
         87:cd:eb:f7:b9:99:a2:64:fa:97:e7:ce:ac:48:86:71:30:df:
         d2:5f:8c:53:fe:58:93:53:e4:8e:21:0f:9c:8b:a5:3f:a6:cd:
         77:1f:11:1b:45:ad:cc:b0:08:08:4d:b9:23:1e:6d:d3:c6:a6:
         ae:58:27:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:50 2026 by rpki-client