This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
File:                     V2VnM04DVjndfMtJdqmycPcmMh0.mft (raw, json)
Hash identifier:          3C4PoFuKvhyFofmUBS0VkZJ0V+YdgRCxMe48ImVPS1g=
Subject key identifier:   DE:D0:8C:28:9F:31:54:9B:7B:0B:20:D9:DA:A2:9D:20:3D:6F:13:B4
Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
Certificate issuer:       /CN=576567334e035639dd7ccb4976a9b270f726321d
Certificate serial:       019C4390C86906C6834894A5D8C0B1C5C313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 18:01:27 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:27 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:27 +0000
Files and hashes:         1: Kz6MRzZAbf0P2fKRSo9EK3LhnNg.roa (hash: FunMB/X94eHRJVpgjb/DKK3OKKV8NdcYckDgjUBxDNs=)
                          2: V2VnM04DVjndfMtJdqmycPcmMh0.crl (hash: 9VLcMUugrskaGkqYF4lBBJJU4Bk3TjILzYfUTTqGU1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:c8:69:06:c6:83:48:94:a5:d8:c0:b1:c5:c3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d
        Validity
            Not Before: Feb  9 18:01:27 2026 GMT
            Not After : Feb 10 18:01:27 2026 GMT
        Subject: CN=ded08c289f31549b7b0b20d9daa29d203d6f13b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:f7:3e:f4:a6:2e:f3:03:43:d3:ff:da:69:
                    4f:ff:5a:da:92:16:04:72:f0:8f:9f:76:f5:c3:a0:
                    c0:c0:19:19:83:ce:c7:ef:a4:6d:a8:6c:81:18:b5:
                    99:22:a2:ad:c7:14:4c:12:91:b7:88:44:9a:c6:22:
                    c0:53:c1:f6:1e:f9:c6:e4:8c:d3:38:5e:bb:1a:b9:
                    fe:65:5b:79:18:5f:26:96:39:73:cb:6b:7c:be:77:
                    db:36:86:7c:09:3b:57:b6:a0:12:37:13:2e:94:cb:
                    6d:89:62:64:c2:79:76:7a:d3:2d:f9:68:57:53:f8:
                    8f:c4:ea:ae:05:fa:27:83:4e:08:56:17:9d:e8:60:
                    f3:17:d0:9e:d6:69:96:e9:1b:35:5c:64:d8:ae:62:
                    55:18:69:b5:3d:bb:98:35:c7:06:c0:63:b0:d5:86:
                    b6:7f:39:cb:c4:e5:63:64:c8:34:80:71:51:ee:40:
                    2c:d8:e8:8b:47:ee:39:1b:97:28:74:33:fe:2c:35:
                    65:61:67:c8:e8:11:10:39:4e:dc:16:87:d3:46:cd:
                    ac:4a:1c:d3:ea:2d:c4:cf:31:e7:b8:d2:37:83:db:
                    bb:ca:c3:b4:ed:a0:78:ec:28:55:62:9d:aa:30:50:
                    8f:9b:75:a0:75:f1:61:77:c8:04:fc:be:c2:a4:a6:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D0:8C:28:9F:31:54:9B:7B:0B:20:D9:DA:A2:9D:20:3D:6F:13:B4
            X509v3 Authority Key Identifier:
                keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:30:0a:0e:6f:7c:9f:06:2a:99:72:cd:dd:ea:5e:48:d4:51:
         9f:2c:4e:27:fa:af:dd:ef:0d:cf:c5:cc:b6:55:73:c4:8d:3d:
         6f:0b:f5:20:45:22:c9:4d:b0:6d:dd:96:d8:c5:c6:e8:fd:83:
         db:12:c1:27:46:2d:93:48:a9:98:fb:6e:e6:33:e7:cb:50:88:
         9d:93:c1:2b:8e:c7:82:28:2a:d5:8a:f3:e6:58:c2:d3:47:28:
         47:d7:da:2a:48:9e:a4:ad:7d:83:03:94:0e:1e:3e:b1:71:40:
         23:e4:36:95:39:67:c0:e9:37:ee:ae:f5:06:26:97:11:3e:b9:
         4a:32:7a:5c:d4:4e:ac:25:94:95:25:04:76:7b:e3:e8:cd:b3:
         43:8f:4f:04:18:15:70:70:01:d3:da:68:47:07:c1:ce:fa:b6:
         62:03:03:d7:74:a8:3f:04:4b:6c:ae:74:96:7c:19:6e:f1:98:
         95:8a:08:f8:b2:bc:26:64:47:ad:41:93:1d:57:75:b8:ef:55:
         e1:ba:11:52:07:19:09:a1:2f:4b:a0:1d:8e:aa:72:b7:f7:a6:
         41:1b:91:a9:00:90:1a:c7:74:db:2c:bd:df:11:0c:54:16:04:
         59:2b:ef:b7:a4:1a:77:1f:cb:06:ff:57:23:f8:95:d2:2e:e8:
         f4:61:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:57 2026 by rpki-client