This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File:                     8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier:          mdZCQSR3oMAVeap8ZNeaXPXPh7gmDAHfQXR/jFtjrOY=
Subject key identifier:   01:DF:5E:D9:F1:C7:1D:85:BF:ED:60:B5:1B:68:A2:CE:79:E9:1E:6C
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer:       /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial:       019C432249022CE2644133B56E7F2FD95032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 16:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:46 +0000
Files and hashes:         1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: xWkvk9fGzgxZ3bSwqFVUkSiBXlOtJD+4CxhLLAGncvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:49:02:2c:e2:64:41:33:b5:6e:7f:2f:d9:50:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
        Validity
            Not Before: Feb  9 16:00:46 2026 GMT
            Not After : Feb 10 16:00:46 2026 GMT
        Subject: CN=01df5ed9f1c71d85bfed60b51b68a2ce79e91e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:05:f9:7a:c4:9c:60:fc:94:d8:3c:95:72:
                    f5:9e:98:46:38:bd:db:2c:d5:2b:93:49:5a:5a:ee:
                    77:45:bc:74:1b:f7:56:88:8d:08:11:e5:c7:55:88:
                    76:90:80:ba:52:b2:48:97:0e:4f:88:ab:c9:83:5b:
                    74:f6:a6:cb:9d:de:0e:b9:23:c0:fa:07:4a:f0:86:
                    2f:48:aa:9f:eb:39:14:88:c1:5d:86:34:c8:0a:23:
                    19:ea:5f:66:fa:84:3c:27:a0:e3:45:bf:c3:e2:2f:
                    59:a9:fe:05:f0:62:fa:2b:f5:ac:85:2d:c7:99:3f:
                    89:ed:85:40:23:f4:f2:c5:2d:76:36:e6:6e:98:84:
                    e4:9f:2f:12:d0:00:c9:1f:60:f4:5c:11:c5:4b:28:
                    d4:f5:1b:02:6e:23:7d:d0:af:67:5c:40:24:d1:c8:
                    30:b5:6c:d1:86:e1:28:ca:e8:11:73:b3:42:e4:cd:
                    85:49:fe:62:99:85:d0:e5:89:67:af:56:6f:7f:5a:
                    64:18:83:de:52:81:12:4e:11:60:e1:07:69:2e:91:
                    3f:60:3d:ad:05:4b:2b:38:a0:b8:11:d2:c6:13:6a:
                    64:77:4f:3b:44:e5:0b:e0:ad:46:f0:3b:52:10:40:
                    27:a9:77:38:81:6c:12:9c:ea:54:ff:f2:ea:85:f4:
                    b4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DF:5E:D9:F1:C7:1D:85:BF:ED:60:B5:1B:68:A2:CE:79:E9:1E:6C
            X509v3 Authority Key Identifier:
                keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:48:4c:d9:b4:ff:15:c7:cd:b6:69:27:bc:b8:da:7e:64:da:
         68:80:0f:65:66:b0:43:93:34:b5:aa:36:53:a4:2e:10:da:ee:
         0e:5b:b4:0b:8d:d0:4f:36:9b:09:98:32:4d:14:d5:51:a5:58:
         f3:c1:08:73:eb:63:7d:f5:05:16:33:13:5b:2d:80:b8:64:62:
         0f:3b:f8:a3:8a:37:59:15:23:54:9b:ae:99:48:5e:be:41:ca:
         38:a2:84:f5:72:dd:8a:77:31:69:64:51:eb:67:ae:bb:19:46:
         c7:b6:87:79:86:d8:76:97:e7:5d:7f:26:0e:92:23:a2:06:8e:
         ca:38:2f:aa:79:9a:a4:35:51:9e:a4:30:c3:77:1f:b0:e9:f0:
         b9:50:21:87:6d:f3:1a:2c:cc:ad:eb:39:b6:52:5b:f3:7e:db:
         53:67:ab:7e:5c:ee:8e:c2:54:dc:db:4d:aa:1f:94:1f:ac:6c:
         c8:34:72:17:2a:a6:4a:50:0d:e3:00:0a:71:4b:ca:d6:31:00:
         45:1c:d6:a5:8b:7a:54:10:17:73:9b:79:85:72:68:a2:18:2c:
         05:0f:2e:67:05:3e:c9:09:d0:de:42:9b:0a:03:fc:33:81:34:
         54:cc:c2:10:ea:16:a8:c5:8e:95:cd:e1:65:ab:4b:fb:aa:84:
         93:8c:f1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:44 2026 by rpki-client