This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File:                     18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier:          172EZjtb9uwQNHEHm3Fa78XH5dnXlAGXjOpwdYdQ208=
Subject key identifier:   9B:D8:2A:8C:09:59:D5:E6:77:05:C0:E3:E9:1B:AF:D8:47:54:47:B1
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer:       /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial:       019C4390707933D1C003C7BC27B5B1814B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 18:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:05 +0000
Files and hashes:         1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: rlhkpoW3f4DKgxyQeQRpR52s5jf44zpr6kq+g5ws030=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:70:79:33:d1:c0:03:c7:bc:27:b5:b1:81:4b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
        Validity
            Not Before: Feb  9 18:01:05 2026 GMT
            Not After : Feb 10 18:01:05 2026 GMT
        Subject: CN=9bd82a8c0959d5e67705c0e3e91bafd8475447b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:c1:9a:df:f5:3b:36:de:8b:37:a9:13:f3:
                    4c:78:7e:65:e5:b9:35:36:42:b0:d7:b8:22:67:2c:
                    7f:e0:60:24:11:a7:62:e9:54:4e:4b:4f:be:1d:c9:
                    b9:b0:e1:39:e6:70:46:22:0c:2d:79:df:ac:64:b7:
                    73:67:32:4a:b2:66:80:b2:f1:11:6f:4f:3c:c3:6e:
                    4e:04:7f:8a:77:47:b0:f0:ca:58:cb:30:8b:8e:89:
                    b6:ea:55:7a:d0:82:7a:86:4a:d3:49:35:23:42:a2:
                    40:19:90:78:dc:43:78:14:84:2f:e4:e4:c6:f1:50:
                    51:47:3d:5d:9c:fb:55:30:1e:28:2c:14:ea:84:df:
                    9b:98:20:6f:ab:3f:61:07:a0:7b:c2:2d:c5:c6:9f:
                    2d:31:a6:bb:f5:50:70:31:a0:38:f2:26:77:6b:11:
                    1d:12:14:2f:94:29:16:98:f3:ab:46:27:e3:b3:e8:
                    7a:7c:33:f6:c6:a7:07:5b:08:7c:c5:4e:3a:26:c2:
                    52:ef:3b:c7:53:32:1d:0f:99:71:d6:ed:46:ba:c5:
                    1b:d0:6d:15:74:15:d6:44:72:3b:d6:63:73:8b:a5:
                    9d:61:a6:40:52:a1:d0:55:16:ad:c6:5d:0e:f4:b5:
                    cb:e6:b7:ea:7e:2c:ec:ee:6a:7a:6e:1b:b7:47:cb:
                    aa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D8:2A:8C:09:59:D5:E6:77:05:C0:E3:E9:1B:AF:D8:47:54:47:B1
            X509v3 Authority Key Identifier:
                keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:09:8c:27:89:b6:b2:cf:71:b1:22:fb:26:1a:c0:ce:18:9e:
         c4:05:97:b7:b5:ad:52:67:63:bc:df:5d:74:94:b9:16:4a:65:
         24:61:4d:4a:44:e3:79:62:22:f3:63:7f:49:af:79:6e:33:17:
         58:51:38:17:50:b3:b2:20:ec:43:d9:84:2e:dc:3e:5a:c1:b6:
         82:97:41:b7:f2:c7:13:69:14:43:87:59:f1:ad:c4:ec:2c:d4:
         82:1e:65:3a:61:09:46:0a:5c:bf:3c:0b:ce:83:65:a4:f0:17:
         8d:79:f9:2f:fe:59:ae:66:ef:ce:fa:a4:ea:d8:55:05:e7:00:
         fc:8c:c3:8e:25:c8:05:55:f9:c5:5f:08:86:8c:64:d3:25:62:
         d6:dd:7c:88:1a:c8:7d:6f:90:90:a9:1f:a2:ec:d4:70:2a:1d:
         23:61:37:c8:56:fc:de:c9:5d:bc:71:55:85:0f:9f:18:52:bd:
         71:c7:0e:bb:40:27:25:9f:bd:f0:b9:ca:68:94:cf:b3:18:22:
         71:5d:bc:f3:0a:3b:3a:f8:57:a0:5b:14:34:49:33:89:d7:6a:
         ba:40:1c:af:ef:0d:fc:0d:e6:28:89:d2:c3:34:50:b7:0f:ab:
         80:38:50:56:f4:11:61:92:84:07:da:d0:c1:c3:65:ac:18:6c:
         89:c5:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:56 2026 by rpki-client