This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
File:                     RNC2iz7BebNdz_XEZdwtBGGZJ24.mft (raw, json)
Hash identifier:          UubXsKTsFS9OcW93D7KChkobwAlJwOKOsq7G+rV6Mfc=
Subject key identifier:   85:19:AF:DA:64:F8:E3:23:FC:B7:5B:0D:03:05:3C:2D:74:34:3E:BF
Authority key identifier: 44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
Certificate issuer:       /CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Certificate serial:       019C439020E5F4CBA596A4A74F548372E404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 18:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:44 +0000
Files and hashes:         1: RNC2iz7BebNdz_XEZdwtBGGZJ24.crl (hash: x0NHCgISQ4LLEzrDp7mxX3u9/AT5UfQPwebkbY74MpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:20:e5:f4:cb:a5:96:a4:a7:4f:54:83:72:e4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
        Validity
            Not Before: Feb  9 18:00:44 2026 GMT
            Not After : Feb 10 18:00:44 2026 GMT
        Subject: CN=8519afda64f8e323fcb75b0d03053c2d74343ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:97:ad:2c:c4:09:01:3a:c1:06:16:3a:15:
                    b5:06:b2:21:c3:5b:27:65:d3:1f:71:3d:7b:eb:14:
                    f6:6a:26:eb:72:1b:cc:1e:d4:ff:51:61:bb:3a:ea:
                    d1:33:6f:74:be:7d:f2:e9:26:e3:48:b0:7e:22:e6:
                    f5:e9:d9:05:f4:cf:8e:bf:21:3e:42:1f:da:4f:7d:
                    5f:fe:15:da:7b:24:de:c7:45:fa:31:95:5f:7f:dd:
                    ce:8f:f3:ba:29:e8:dd:57:f0:b2:62:47:6e:a5:5d:
                    56:db:99:ee:41:61:51:43:5c:bc:51:a4:46:76:2f:
                    44:46:41:7e:93:52:99:e0:99:32:88:1a:7c:4b:97:
                    ff:94:03:19:7f:1c:ae:f9:87:ee:69:71:0a:dd:62:
                    52:90:98:72:c8:c9:87:d0:13:6b:ca:62:db:79:23:
                    76:6c:62:3b:db:a7:19:69:ea:c5:a4:56:6f:30:84:
                    22:76:e4:e1:32:01:97:78:15:0e:10:10:da:bb:19:
                    98:a4:a3:4c:6b:10:88:e0:e5:80:05:67:14:93:13:
                    e7:54:75:0b:8e:0a:72:dc:19:d4:4e:f7:7d:85:28:
                    d3:85:da:cd:3e:7d:ea:a7:60:92:c5:1a:08:7b:55:
                    ee:e0:64:b7:57:09:8e:76:03:7b:93:4f:67:72:66:
                    5f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:19:AF:DA:64:F8:E3:23:FC:B7:5B:0D:03:05:3C:2D:74:34:3E:BF
            X509v3 Authority Key Identifier:
                keyid:44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:54:52:1f:f8:2e:13:85:9e:af:c7:57:96:c4:c8:7b:13:f5:
         c9:dc:1d:c1:65:56:a4:49:b6:87:c1:e1:c1:f2:fa:15:44:ae:
         5a:ef:b5:6d:db:26:b0:bc:40:bb:ec:27:be:8a:05:6d:91:5c:
         e8:88:6e:db:e5:6e:46:fb:b8:b1:9a:d6:a7:59:36:a3:9c:52:
         0c:73:6b:70:a5:46:fd:7c:25:5b:6b:23:c2:1a:c0:df:c3:45:
         4f:71:5e:18:a4:29:9d:b2:d4:03:63:c0:d0:a5:ac:bd:98:f5:
         d2:03:6b:a4:06:d4:ff:ae:77:7c:f1:56:b2:c4:be:f0:1b:36:
         fd:b4:70:19:21:2e:46:c0:34:6f:92:f3:5d:e5:4e:46:ef:37:
         31:c5:32:de:b3:12:82:06:44:fa:ff:2c:b4:5a:ae:41:24:95:
         fe:25:bf:2e:b2:74:7b:ba:0d:38:17:2a:d5:12:4c:60:f9:e9:
         72:36:11:10:5f:8b:7b:71:51:50:14:01:c3:ef:f7:19:01:68:
         30:ff:94:d4:44:cb:cf:59:d0:78:99:dd:a4:b9:68:0c:b7:bb:
         9c:18:62:73:dd:7c:b9:b1:1e:02:91:43:b0:b7:4f:74:e2:d5:
         91:63:a8:d4:af:c3:36:1a:4b:3f:df:de:d6:64:70:92:d1:c9:
         e3:54:ed:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:52 2026 by rpki-client