This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
File:                     rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft (raw, json)
Hash identifier:          32u0KEBdlYPF1/i8NHk/eUsmeFMGH/2GLfzA7ACz6Ck=
Subject key identifier:   53:C5:80:A8:BA:C3:E6:08:A5:D3:BF:BA:D0:6F:E4:29:FC:CA:99:C7
Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
Certificate issuer:       /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Certificate serial:       019C43FE321E9D4612A3C3C49EF77A5C5D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
Manifest number:          181B
Signing time:             Mon 09 Feb 2026 20:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:58 +0000
Files and hashes:         1: KyN0CWaCH1SDWYOUqLNksdNsPzE.roa (hash: /rmcscD08dlHwE/FpDvYW0hn0CSDsvSiHmlRiI8+lQg=)
                          2: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl (hash: 1zQhkLS0C1BvduEBpsNBWzKLdusw1vhNmOYElZQqVA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:32:1e:9d:46:12:a3:c3:c4:9e:f7:7a:5c:5d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
        Validity
            Not Before: Feb  9 20:00:58 2026 GMT
            Not After : Feb 10 20:00:58 2026 GMT
        Subject: CN=53c580a8bac3e608a5d3bfbad06fe429fcca99c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:19:7c:35:b6:b4:9c:b9:53:14:04:bd:d9:
                    31:ab:77:86:2a:78:4f:43:42:6d:76:a1:c8:06:1b:
                    d3:ad:c4:66:97:ee:6f:96:55:ed:da:2b:9e:91:26:
                    78:1e:10:de:fc:f0:9c:c9:04:33:a7:43:e4:f2:f6:
                    4a:9d:5a:c4:7b:e5:4c:06:9d:fe:bb:4e:04:ab:a5:
                    30:cf:36:59:d2:2a:49:46:9c:b1:a0:1b:60:a3:2d:
                    54:56:c5:d0:b0:90:72:fc:15:ab:c2:2b:dd:35:71:
                    91:6c:27:6c:37:a5:f0:6e:39:25:60:7d:f8:31:93:
                    9d:0b:d2:42:01:d5:f1:cd:6d:b8:27:46:38:7e:6a:
                    8f:12:04:2c:da:a9:c8:49:4a:94:83:df:09:a5:80:
                    2b:62:a3:45:ef:b6:36:28:7a:29:31:5f:89:37:cd:
                    54:24:92:d2:7a:87:bb:78:1f:50:76:97:9f:5d:75:
                    f4:b1:56:83:4b:4e:b5:aa:16:49:2d:d1:b3:f8:09:
                    85:d9:1e:c5:42:b1:3e:4f:25:32:d9:cb:82:bb:91:
                    15:5f:9b:c8:1f:c5:b6:97:17:84:bf:4c:f6:92:e7:
                    56:ec:ff:51:c9:97:98:97:8b:cb:29:bc:01:5a:29:
                    16:e0:b8:72:f9:16:b9:33:9f:67:61:f5:8e:99:2d:
                    60:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C5:80:A8:BA:C3:E6:08:A5:D3:BF:BA:D0:6F:E4:29:FC:CA:99:C7
            X509v3 Authority Key Identifier:
                keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ec:c8:90:23:39:59:44:60:aa:63:0e:b7:ad:a2:ce:af:9d:
         9a:81:8b:da:26:28:fa:91:ad:74:aa:51:a0:cb:53:c1:ab:89:
         1e:7c:22:c2:48:85:b2:73:32:10:02:1a:84:aa:28:80:7d:89:
         1e:87:1b:2f:15:37:81:71:79:4b:46:2a:63:59:82:8a:61:89:
         40:37:1b:b0:9c:05:fd:3a:c7:e1:4c:a8:7c:5b:b7:a1:9c:43:
         17:f9:76:1c:46:76:3f:5b:6a:22:74:3a:99:27:49:9c:50:b3:
         d4:d1:69:be:f8:d4:e6:45:c5:26:37:78:a4:d7:6b:7b:6b:51:
         f2:1b:d0:75:6c:e1:eb:71:85:88:74:aa:c5:1e:68:cc:9c:b5:
         ac:f5:63:27:01:a2:2e:7c:9c:1c:8a:79:31:93:d7:b0:90:67:
         79:af:8b:62:a6:af:13:d5:6a:51:e2:22:49:56:69:b8:65:d0:
         9e:95:91:45:d7:db:dd:51:d2:2a:5a:59:81:9e:36:2f:fa:30:
         08:ea:dd:61:30:14:c6:c0:cc:52:10:7b:2f:38:d3:9f:dd:a1:
         d3:15:d2:7e:b3:ec:df:56:92:f2:57:ec:0e:9b:45:5a:8e:09:
         40:76:58:5f:e1:25:99:2c:15:23:4c:59:c9:90:bd:6a:2b:91:
         ad:0a:82:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:54:20 2026 by rpki-client