This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
File:                     02jCohY2GiT97Jfx838uHRIHEIc.mft (raw, json)
Hash identifier:          EJCin6ATegVgtwZMqizm+ZmHWVdK3RNqB26R+tuNHuI=
Subject key identifier:   D1:4E:70:A8:98:FA:9D:45:7E:ED:6B:56:FA:71:69:E9:D1:F9:E4:15
Authority key identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
Certificate issuer:       /CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Certificate serial:       019C427D49C6661F0C6720DC3A58672F3551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 13:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:32 +0000
Files and hashes:         1: 02jCohY2GiT97Jfx838uHRIHEIc.crl (hash: IyTNiT/R+etnEtUEyIAlSpLSK0fnSLOpo9pQvLDYgek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:49:c6:66:1f:0c:67:20:dc:3a:58:67:2f:35:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d368c2a216361a24fdec97f1f37f2e1d12071087
        Validity
            Not Before: Feb  9 13:00:32 2026 GMT
            Not After : Feb 10 13:00:32 2026 GMT
        Subject: CN=d14e70a898fa9d457eed6b56fa7169e9d1f9e415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e8:26:03:a0:ae:46:94:41:c3:76:3d:9a:6c:
                    2b:1f:83:e0:a6:28:93:67:d0:2c:b0:6f:33:2a:a7:
                    6e:8e:d2:75:e0:44:17:a6:43:72:8a:b4:2b:5f:05:
                    c5:82:c1:82:4d:1d:b3:0c:67:75:8a:8c:2c:4c:82:
                    c6:f5:36:a8:f3:ee:5e:d6:e9:f8:13:ab:88:f3:e8:
                    27:68:c2:1c:37:d0:52:19:2b:64:a1:3d:87:ea:81:
                    17:4f:96:a0:68:29:89:8d:7b:aa:4b:ec:dc:c4:f2:
                    db:ac:ab:b4:68:48:db:c7:18:a0:d3:78:eb:10:55:
                    bf:3b:52:0b:7a:1d:73:6b:d7:82:16:ee:49:f0:a2:
                    e1:36:9b:7c:5f:de:70:e1:3d:3b:9f:fb:11:23:f3:
                    49:a9:57:80:cb:fe:61:1a:f1:e6:0b:9a:60:4e:ab:
                    a7:ca:48:3d:68:ea:54:0c:29:16:32:48:e2:43:ec:
                    21:e2:0b:f4:6a:66:c5:84:a8:60:e0:5f:c3:71:ba:
                    43:d3:44:3f:3a:98:05:4b:0e:4d:7f:18:d7:3f:b0:
                    5c:e6:19:f7:87:cd:a4:26:23:69:e3:a8:f1:91:c0:
                    8c:89:f0:67:86:21:db:73:28:0a:15:dc:03:47:2b:
                    0b:ba:02:bf:52:70:4f:2e:76:0e:2b:46:a4:dd:a9:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4E:70:A8:98:FA:9D:45:7E:ED:6B:56:FA:71:69:E9:D1:F9:E4:15
            X509v3 Authority Key Identifier:
                keyid:D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:bb:3b:24:97:90:0c:c4:fc:10:0f:73:f3:d7:7e:92:ec:20:
         8b:94:1e:22:19:62:b2:62:4e:63:b9:d5:a2:a2:28:b8:89:0f:
         d4:47:07:63:c4:a6:7c:c9:2b:07:c2:41:50:c5:65:51:cf:32:
         6d:8b:14:4e:65:e8:ab:c7:33:af:e3:27:2c:9c:6b:f6:47:71:
         2d:9e:16:12:e3:02:c3:36:d2:1b:07:0e:23:96:5b:be:65:90:
         40:66:25:2f:83:32:0d:48:9a:47:c9:17:b8:7c:24:a5:25:08:
         a3:e9:35:b9:df:f7:f9:8e:d7:c5:76:5b:cb:03:74:c0:23:ed:
         76:2e:d5:a7:9b:75:d8:db:ce:d4:85:0f:a4:83:31:62:45:4b:
         a7:a0:1a:4f:31:ae:d9:3b:7c:0c:d0:7d:9a:60:51:d6:08:72:
         34:53:4b:99:41:c7:c8:ed:31:a0:1e:18:d0:c0:2d:ff:f5:3b:
         52:9e:63:5d:39:73:74:18:ab:ac:fa:88:60:de:7f:e6:c3:d2:
         fe:38:70:60:19:47:e5:fa:68:58:fc:65:1f:9c:3a:94:42:a2:
         96:8b:21:8b:17:46:56:5f:85:ba:53:73:68:cb:94:03:36:cc:
         a3:d6:7b:78:16:ac:ca:82:d5:61:fd:f9:fd:4b:91:c4:17:4a:
         d1:55:a6:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfUnGZh8MZyDcOlhnLzVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjhjMmEyMTYzNjFhMjRmZGVjOTdmMWYzN2YyZTFkMTIw
NzEwODcwHhcNMjYwMjA5MTMwMDMyWhcNMjYwMjEwMTMwMDMyWjAzMTEwLwYDVQQD
EyhkMTRlNzBhODk4ZmE5ZDQ1N2VlZDZiNTZmYTcxNjllOWQxZjllNDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+gmA6CuRpRBw3Y9mmwrH4PgpiiT
Z9AssG8zKqdujtJ14EQXpkNyirQrXwXFgsGCTR2zDGd1iowsTILG9Tao8+5e1un4
E6uI8+gnaMIcN9BSGStkoT2H6oEXT5agaCmJjXuqS+zcxPLbrKu0aEjbxxig03jr
EFW/O1ILeh1za9eCFu5J8KLhNpt8X95w4T07n/sRI/NJqVeAy/5hGvHmC5pgTqun
ykg9aOpUDCkWMkjiQ+wh4gv0ambFhKhg4F/DcbpD00Q/OpgFSw5NfxjXP7Bc5hn3
h82kJiNp46jxkcCMifBnhiHbcygKFdwDRysLugK/UnBPLnYOK0ak3ak/vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFOcKiY+p1Ffu1rVvpxaenR+eQVMB8GA1UdIwQY
MBaAFNNowqIWNhok/eyX8fN/Lh0SBxCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJqQ29oWTJHaVQ5N0pmeDgzOHVIUklIRUljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMjJlZGYtZmI0OS00ZTAxLThmZDQt
OTAyMDhlMWYzZGU2LzEvMDJqQ29oWTJHaVQ5N0pmeDgzOHVIUklIRUljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kMjJlZGYtZmI0OS00ZTAxLThmZDQtOTAyMDhlMWYzZGU2
LzEvMDJqQ29oWTJHaVQ5N0pmeDgzOHVIUklIRUljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzLs7JJeQ
DMT8EA9z89d+kuwgi5QeIhlismJOY7nVoqIouIkP1EcHY8SmfMkrB8JBUMVlUc8y
bYsUTmXoq8czr+MnLJxr9kdxLZ4WEuMCwzbSGwcOI5ZbvmWQQGYlL4MyDUiaR8kX
uHwkpSUIo+k1ud/3+Y7XxXZbywN0wCPtdi7Vp5t12NvO1IUPpIMxYkVLp6AaTzGu
2Tt8DNB9mmBR1ghyNFNLmUHHyO0xoB4Y0MAt//U7Up5jXTlzdBirrPqIYN5/5sPS
/jhwYBlH5fpoWPxlH5w6lEKiloshixdGVl+FulNzaMuUAzbMo9Z7eBasyoLVYf35
/UuRxBdK0VWmGQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:51 2026 by rpki-client