This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File:                     aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier:          pEAWcYJJ6AedlGuLLHUV6A/OcqqFnHgbfO79aaDrXO0=
Subject key identifier:   FB:F4:76:09:F8:F9:7F:9E:36:A8:A9:41:27:09:19:BC:DB:5D:99:37
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer:       /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial:       019C4322DEC3217BA981B1C9CE40E4BEEB25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 16:01:24 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:24 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:24 +0000
Files and hashes:         1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: JDB1OtaVZwdw+cFi63Rr+PWLN9dORS+MHoAlTH8nR58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:de:c3:21:7b:a9:81:b1:c9:ce:40:e4:be:eb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
        Validity
            Not Before: Feb  9 16:01:24 2026 GMT
            Not After : Feb 10 16:01:24 2026 GMT
        Subject: CN=fbf47609f8f97f9e36a8a941270919bcdb5d9937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:aa:4f:f6:21:dd:83:0f:a7:16:bd:d6:4d:
                    db:6c:be:82:28:bc:ef:1d:30:ce:10:bb:7e:98:c6:
                    f4:84:01:e1:1c:23:2c:b1:c3:0e:5b:d4:a4:8c:11:
                    0f:44:c7:35:c9:ba:2a:96:2c:e5:b3:e2:77:82:d3:
                    07:de:f0:36:1f:43:27:ea:fc:16:b8:2c:36:31:6f:
                    eb:dc:b5:47:87:a8:ea:c2:3b:89:22:ef:c7:45:5e:
                    7f:59:d1:cc:36:b7:46:b5:42:12:e1:dc:e7:24:56:
                    5e:c6:d1:bf:0a:b3:c9:65:0a:df:43:92:75:b2:71:
                    ae:35:e0:0a:53:92:ae:f6:86:e8:e8:81:97:42:84:
                    c5:43:ed:ee:f2:4d:cd:17:12:68:52:74:fa:b2:11:
                    38:0a:ba:62:81:1c:fd:f2:f3:35:b5:5a:ab:df:3f:
                    45:2e:f0:11:51:d9:46:1f:60:f0:48:79:7a:05:f1:
                    ff:9c:fb:9b:5d:08:4e:49:37:98:05:67:60:76:89:
                    d9:dd:5d:dd:0c:ca:8c:7e:2b:02:d0:15:0a:98:65:
                    ba:36:8c:c0:39:58:d9:cb:f7:95:4e:2c:81:da:9d:
                    94:1b:4b:5a:ac:1a:91:6d:7b:4e:f2:6f:b8:9b:74:
                    1d:f4:c5:fa:91:86:10:6d:01:4a:3d:7b:21:64:9c:
                    eb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F4:76:09:F8:F9:7F:9E:36:A8:A9:41:27:09:19:BC:DB:5D:99:37
            X509v3 Authority Key Identifier:
                keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:1d:f9:3b:96:18:35:98:b6:10:9e:ea:5f:0e:ae:61:69:ca:
         15:09:e9:85:ea:0b:51:ca:9b:70:cc:42:ff:eb:fd:d3:9a:3b:
         be:4d:a0:55:b4:c2:4a:14:44:28:b6:eb:70:a8:3d:dc:89:cd:
         19:99:6f:7e:eb:f1:17:2f:1f:89:eb:7a:75:29:b5:c7:25:92:
         7f:74:13:a3:f4:3c:02:6a:94:04:a5:ca:d8:1e:2d:47:d2:6f:
         d4:0d:17:65:01:f9:ee:77:97:e4:9b:e8:9f:9f:76:8e:f0:4c:
         4a:0e:4f:f5:ac:62:19:50:78:ca:a4:4a:42:d3:1b:5f:5c:d9:
         7f:24:4b:f0:1b:74:aa:4c:2d:b2:a1:ab:37:44:06:1b:d3:5d:
         94:db:16:08:95:c7:d5:4b:3f:3e:b9:dc:0c:2a:5c:2d:26:34:
         87:8c:af:6d:64:dd:80:95:2b:39:6b:ab:bc:62:7b:bc:34:37:
         ac:24:bb:e2:b0:c1:96:6a:39:9f:ad:ef:d3:6e:a1:1b:fa:a5:
         ca:28:2c:a3:24:6c:e4:e0:6a:1c:a1:ec:da:0c:99:64:81:f6:
         b5:da:ea:f3:d0:bb:a6:dc:7e:96:a5:96:df:fd:5e:94:6f:3b:
         02:8f:1f:95:f5:86:93:0c:06:3f:32:e8:02:fa:15:77:4b:e4:
         56:c2:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:28 2026 by rpki-client