This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
File:                     tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft (raw, json)
Hash identifier:          6OPkffO0ytg32/MO+TrzbIWX3+ZYkUQQ8LBwEpXB5MI=
Subject key identifier:   58:9E:3F:02:50:63:28:C3:07:E7:A2:D2:7E:1A:C7:BA:21:5E:03:B1
Authority key identifier: B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
Certificate issuer:       /CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Certificate serial:       019C432201301EBA28A590FDB88EBA28C48D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
Manifest number:          180A
Signing time:             Mon 09 Feb 2026 16:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:27 +0000
Files and hashes:         1: tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl (hash: PS1wcBuXDqeHklWjVEr5+6fkrR3qqXTfxmBFfhPl/I0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:01:30:1e:ba:28:a5:90:fd:b8:8e:ba:28:c4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
        Validity
            Not Before: Feb  9 16:00:27 2026 GMT
            Not After : Feb 10 16:00:27 2026 GMT
        Subject: CN=589e3f02506328c307e7a2d27e1ac7ba215e03b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:05:5a:27:e5:9a:cd:26:3e:5e:1e:86:5e:
                    16:ca:9c:ab:39:8b:69:0c:a7:15:31:6d:d3:8e:3c:
                    c2:b8:c7:f8:cc:f2:6c:cb:fc:f1:fa:08:d5:76:98:
                    f0:13:6c:e4:9b:03:bc:b6:32:0d:e7:db:9f:c5:18:
                    54:86:58:61:90:45:3b:e5:3d:39:f5:64:b7:ab:c3:
                    b2:60:fa:d6:74:3d:80:a8:d9:33:d5:6d:ca:2b:46:
                    0d:eb:23:ef:e6:e4:43:3c:2f:82:e1:68:37:3d:6d:
                    5a:1a:13:44:e3:9f:39:be:13:d4:6a:e7:82:9a:d1:
                    3e:1c:3c:65:d2:0f:02:9a:0a:97:fe:0d:5c:e1:41:
                    5e:82:70:54:b6:1e:31:e0:b0:91:68:cf:d1:40:0e:
                    25:19:48:b4:fe:f0:44:69:02:ec:d9:f0:88:a4:c9:
                    ac:71:29:db:f3:f5:f8:0f:23:53:c0:75:d7:08:9e:
                    c5:6d:a6:d8:c3:72:d2:38:c5:42:e4:07:c2:8d:77:
                    de:4c:71:7a:d0:d1:1b:90:b8:bb:1a:0b:0a:90:2d:
                    fb:01:7b:4b:ef:7c:ce:38:74:79:e1:fb:c7:a7:2e:
                    fa:b0:28:26:98:29:d8:1f:ab:37:c1:fe:e1:41:1b:
                    4b:e4:e4:c0:58:dd:e2:57:44:13:d3:b5:cd:d7:2e:
                    c1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9E:3F:02:50:63:28:C3:07:E7:A2:D2:7E:1A:C7:BA:21:5E:03:B1
            X509v3 Authority Key Identifier:
                keyid:B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:bc:8e:66:5d:68:17:1f:36:e1:38:64:cd:e2:71:b4:ab:0d:
         47:2a:e4:ed:04:ea:89:ca:7e:3a:a0:2e:10:16:6d:86:d5:ee:
         ea:d1:ef:fb:3b:88:81:b5:35:c5:c2:66:6f:93:de:76:e2:15:
         c5:28:e3:19:67:ae:e2:68:2e:05:e6:67:cb:d2:43:10:a6:ca:
         07:ac:2f:d6:2c:36:dc:de:a2:c3:c2:71:83:28:36:56:3c:9f:
         a4:d4:2c:2d:a6:0f:d7:6e:12:12:79:b1:57:c7:27:54:01:60:
         d8:70:1d:cb:96:e2:4e:54:ab:1f:b9:f4:ca:d3:91:80:3d:b9:
         32:12:c6:ae:a5:2b:40:08:5d:d3:13:83:dc:8b:e3:35:0c:40:
         38:c8:e7:2d:a3:ba:f9:9c:e0:02:57:0f:bd:dd:ec:2a:5f:e8:
         e0:5f:6f:96:06:46:92:2b:db:86:6d:e2:67:65:fa:f2:b2:79:
         2f:79:bb:f1:5b:09:7e:03:a3:e9:ef:c5:6e:52:ee:cc:e1:a1:
         d2:bf:01:c2:87:2d:69:fa:02:b6:61:e0:98:d0:95:fb:dd:2c:
         f5:aa:84:1d:c5:70:4b:5b:8e:4d:5d:1a:ff:d0:9f:7f:f0:be:
         3e:c1:52:8d:9b:8c:9e:b7:4c:8c:ef:8d:80:21:d3:c8:44:70:
         9f:d0:c4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:34 2026 by rpki-client