This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
File:                     lDbagFrtoKOlD_xmJR3L-0Lw814.mft (raw, json)
Hash identifier:          LZAzR9o/uILXymcH7+b2YuYVuQuUUtsMCmCrPXR8Rmc=
Subject key identifier:   2C:F3:41:B8:0A:22:7E:F2:EC:B7:74:97:99:35:8E:7B:D7:D0:40:FD
Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
Certificate issuer:       /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Certificate serial:       019C41A1EE31400A1DBEC3D6C55947C26FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 09:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:57 +0000
Files and hashes:         1: GyhIX9G7ssewah6bDhgNQPrqbwo.roa (hash: kljqR0c8WAPsE2bmcYrTdPFXyOSyujcjC+p/sprv0mg=)
                          2: lDbagFrtoKOlD_xmJR3L-0Lw814.crl (hash: 6tWPQNDv6qdGLvhjGVTo+hnL8HFHd55cXo3SNM+UDz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:ee:31:40:0a:1d:be:c3:d6:c5:59:47:c2:6f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
        Validity
            Not Before: Feb  9 09:00:57 2026 GMT
            Not After : Feb 10 09:00:57 2026 GMT
        Subject: CN=2cf341b80a227ef2ecb7749799358e7bd7d040fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:3f:ce:9f:26:a1:77:bd:13:7c:27:7c:91:
                    5d:9d:2e:27:56:9a:40:d9:94:00:6b:b5:b1:b4:af:
                    7a:d4:c9:a5:7f:65:af:40:c0:7c:d0:2c:32:ed:77:
                    a5:85:a8:b6:12:16:a7:27:6e:22:93:13:67:89:03:
                    7a:bd:75:85:cd:16:c8:38:ff:6f:78:c4:92:e2:44:
                    3f:2e:4d:f6:a8:10:64:bc:0d:b5:50:c6:b2:54:dd:
                    40:25:dc:03:ec:7e:cc:ae:ac:38:21:fd:6a:d3:a0:
                    c2:05:67:5f:de:5c:37:f4:88:88:97:91:a6:87:19:
                    78:7c:7c:96:a2:0f:c1:4b:ae:d8:8d:55:a3:ad:b3:
                    94:10:71:c9:42:97:31:6b:a1:08:04:9b:30:85:4b:
                    f8:ac:e3:9b:3c:85:e6:98:45:d4:6d:c9:34:cc:3e:
                    e0:5c:85:c7:8b:ca:de:a9:57:ad:66:12:49:3a:bc:
                    14:41:14:c5:01:10:3c:aa:aa:b7:72:c4:d2:70:bf:
                    1a:a8:11:ad:fd:28:30:58:ab:87:69:f1:0a:c8:15:
                    eb:f7:3f:e8:64:f2:f1:53:92:4f:3a:b7:93:12:f6:
                    8d:17:84:a5:9f:81:00:02:3d:0b:69:28:7f:f9:cb:
                    71:86:59:83:49:ad:3d:69:7b:8c:80:a3:61:f6:ad:
                    a1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F3:41:B8:0A:22:7E:F2:EC:B7:74:97:99:35:8E:7B:D7:D0:40:FD
            X509v3 Authority Key Identifier:
                keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0b:c5:b8:e8:84:8f:88:94:b9:5b:00:07:1c:1d:38:28:33:
         d0:42:83:4f:9a:78:13:82:21:67:e5:e1:15:88:c7:d5:ca:5e:
         b6:5b:61:9b:6c:7c:66:c4:75:16:0a:3b:c4:10:62:7a:7d:fd:
         33:7b:64:4c:d8:14:6a:f3:9d:6f:95:d1:73:c7:32:84:22:15:
         f3:1b:57:36:70:80:fd:93:cc:04:fa:ab:2e:e5:16:f5:4c:b4:
         be:f7:5b:4c:a2:9a:21:97:fa:88:d5:ef:0b:b0:79:42:53:65:
         da:fb:82:f6:cf:a1:ad:3d:49:f1:6f:e6:29:0c:b0:73:22:14:
         18:de:8a:ba:a4:dc:f0:07:56:28:4b:02:c3:f7:5a:38:44:01:
         d0:4d:22:d2:4a:f5:e5:ca:5e:2e:4d:a5:29:4b:51:bd:5b:4f:
         ca:c1:95:d5:97:a2:d9:56:b2:58:2d:fe:a4:20:c9:35:54:c4:
         4f:f0:b8:fb:a8:b2:ae:54:3f:83:f4:6c:4d:a5:2f:89:16:86:
         5d:b1:80:cc:ce:f2:53:6c:d0:7f:11:ca:fa:40:28:86:4e:e9:
         c2:2d:66:b5:44:e7:e9:62:47:cd:a0:00:66:62:5c:e9:e9:6e:
         71:71:36:84:22:f8:22:3a:43:3e:5f:87:6e:b3:b0:95:cf:65:
         21:32:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:31 2026 by rpki-client