This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File:                     1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier:          HYVg8NRBL2vIXteIUyGHpC9P19kKqfOrJ8DHkm1Qt2A=
Subject key identifier:   21:AC:3D:48:A0:D4:A8:00:54:28:D0:C4:EE:9B:09:E4:E5:C7:50:AD
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer:       /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial:       019C41A1782BC8AB194034AD36597AD88285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 09:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:26 +0000
Files and hashes:         1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: GcdndiwL6ga2Oq4HA41b2/Vg355uKYQ3pvJvf9YgqTU=)
                          2: 3vC4pYqybSvnyiv9AWSFuid8GOw.roa (hash: v8QGywV5eLuGaT2Uqfo+veGfvP9FzA92hTs+zKxoZtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:78:2b:c8:ab:19:40:34:ad:36:59:7a:d8:82:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
        Validity
            Not Before: Feb  9 09:00:26 2026 GMT
            Not After : Feb 10 09:00:26 2026 GMT
        Subject: CN=21ac3d48a0d4a8005428d0c4ee9b09e4e5c750ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:85:42:94:c6:f1:dc:56:e7:40:0b:f9:67:fd:
                    97:10:0a:ee:bd:d9:7c:8c:4c:75:b4:99:0e:c4:c0:
                    c5:ad:3b:25:f2:08:9b:7c:06:b2:eb:5b:34:d1:e0:
                    7e:e2:49:51:e4:cf:d0:45:0c:dc:d2:d2:aa:21:60:
                    2f:cf:5f:3a:d0:98:ac:b1:9c:c4:94:de:d8:bc:e4:
                    d6:28:03:84:b3:c2:2f:d6:b2:46:0f:80:4b:1f:29:
                    0e:82:a6:9e:8d:6c:d5:fd:6f:2d:9b:5e:3d:ef:3d:
                    e1:1d:ee:9c:ef:5e:cc:97:59:5a:2f:a5:ed:a8:96:
                    b2:57:67:62:ff:7b:a4:fd:08:fd:9f:cb:e9:84:e0:
                    09:e1:33:84:78:b7:42:43:cf:3a:78:3b:ea:fc:62:
                    73:4b:bf:4c:70:fe:81:83:82:65:30:b7:51:8b:77:
                    50:45:f5:15:a2:71:13:8e:ed:2e:86:ba:85:ce:3b:
                    12:41:ae:d7:34:49:92:4f:f4:c5:12:d2:25:4b:57:
                    dd:5a:d3:0b:5c:03:df:c8:11:0e:b0:6b:76:c5:cb:
                    d8:a7:c5:08:23:83:ef:3c:1c:11:02:3e:f9:67:1c:
                    18:de:e0:81:11:c4:f1:ee:a1:35:20:0f:54:e9:98:
                    56:dd:11:eb:bb:69:e4:47:fa:77:c3:72:a9:b5:83:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AC:3D:48:A0:D4:A8:00:54:28:D0:C4:EE:9B:09:E4:E5:C7:50:AD
            X509v3 Authority Key Identifier:
                keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3e:93:e2:27:6c:e8:74:91:18:17:07:90:8b:6d:b1:b2:5b:
         bd:a4:60:70:96:0c:b7:ce:bd:d9:f5:fc:d5:81:a5:3a:da:98:
         ba:25:ac:80:4c:18:08:d9:2a:b6:7e:ee:df:3c:8b:0d:3c:67:
         e0:66:4f:fb:42:82:98:eb:69:ba:30:f7:40:ad:1c:70:00:87:
         46:b8:a9:9d:0b:b5:2a:67:cd:ed:d6:db:d2:55:c4:22:20:e1:
         8d:d1:b9:e7:39:29:6b:c6:d3:15:11:83:f9:cc:f4:be:58:d4:
         20:9d:73:d1:00:64:bf:f2:47:d1:9f:83:b8:15:c8:f0:7f:83:
         a7:d0:fc:29:d0:f7:c0:c6:63:8f:29:cd:95:8f:9e:49:4c:a2:
         84:4f:a4:33:df:8c:a0:4b:dc:4f:4a:c7:95:64:b3:60:03:ec:
         1f:d7:10:04:9c:35:da:1b:59:08:0e:a4:c6:14:23:76:e5:2d:
         5a:c9:8a:2f:1e:c8:ef:71:ef:b5:e4:78:2c:5a:a3:31:52:1b:
         15:d2:99:7f:20:7e:ce:55:e2:f8:af:70:09:fe:b6:d1:f8:f8:
         20:a5:5d:a4:51:89:53:31:21:4b:d8:26:5c:57:f7:e5:b9:f9:
         5a:a2:cf:82:ca:c1:6d:8d:34:dd:1d:12:66:d5:5c:e4:6b:a8:
         04:67:32:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:28 2026 by rpki-client