This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File:                     dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier:          0vVd5FMxp0ITyjaFvvPFirjMwQxu0pp536S0XJ7Takk=
Subject key identifier:   A3:60:A5:B6:42:72:C1:10:5E:C0:6E:B2:92:A9:1C:9C:91:3C:78:F8
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer:       /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial:       019C424631EE4647AD93F5EEF1C43A53CAB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 12:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:22 +0000
Files and hashes:         1: 4zHqkXwTdPpErUuwool8-zX-SB4.roa (hash: LHnM5v5Sz1IzlHeFp2joapwPeszU3VAj2kHXfdYdwu4=)
                          2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: Kw5MlakBRdiwo2nrYocgmCN4JBGvxA9FdMKYKKjTD1c=)
                          3: f_myMJMSIIWO9m-PmHiygg0XXSs.roa (hash: 3LE3GccOE6KqVlj9DZ+EFPId6e66LFjW7NsGN3ZdmPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:31:ee:46:47:ad:93:f5:ee:f1:c4:3a:53:ca:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
        Validity
            Not Before: Feb  9 12:00:22 2026 GMT
            Not After : Feb 10 12:00:22 2026 GMT
        Subject: CN=a360a5b64272c1105ec06eb292a91c9c913c78f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:78:0d:f1:3f:a6:e0:5b:d0:b9:15:ec:85:
                    2d:3a:8e:eb:f3:b0:c9:38:b7:d9:7d:35:15:e7:fd:
                    25:8d:6b:50:89:2e:6b:c7:a9:5a:22:00:70:21:8d:
                    3f:61:f2:a5:00:7e:44:bf:14:1a:72:41:8f:ac:8b:
                    02:f6:b4:74:11:e8:83:ac:80:0c:8b:7d:d0:1e:35:
                    7a:55:d4:fa:86:30:de:70:8f:58:8f:84:cb:40:99:
                    3d:b5:bf:1d:07:b0:19:fb:ee:be:88:fd:8e:f6:fa:
                    52:02:96:72:c9:66:e0:13:05:87:dd:77:f9:21:27:
                    ae:63:7a:2c:b6:f7:19:58:1d:0d:7d:5f:a3:89:58:
                    c9:3a:1b:59:b5:8e:74:97:5a:3f:fa:44:42:2c:1a:
                    33:2a:f7:df:92:78:9f:85:2f:1b:af:4c:ae:63:38:
                    4d:b2:f7:18:76:d5:22:28:4f:f6:cd:2c:ad:aa:c2:
                    14:52:6d:a9:f0:0a:00:8d:b4:51:64:99:a4:f1:96:
                    73:70:81:e7:9d:2c:6d:ad:e9:59:b6:72:3a:dc:a7:
                    d9:e4:fd:98:4f:fb:39:ab:fa:29:42:b2:5e:d9:2f:
                    5d:e6:fa:3d:6a:01:09:9a:51:45:80:32:74:1d:72:
                    74:52:8e:dc:dd:60:6c:74:dc:e5:ef:49:de:61:b3:
                    ed:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:60:A5:B6:42:72:C1:10:5E:C0:6E:B2:92:A9:1C:9C:91:3C:78:F8
            X509v3 Authority Key Identifier:
                keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e5:f2:f3:53:44:97:fe:2d:18:3c:83:60:5a:3e:6f:a9:15:
         b7:10:ff:8d:30:c1:2b:ce:31:1c:f2:d2:20:0d:f5:f3:cf:36:
         11:3b:3e:34:b4:2f:91:45:a6:46:3e:35:7a:7c:b8:8d:33:dc:
         b0:ca:85:d3:2f:92:34:d2:82:6e:49:5e:ab:69:a8:da:6b:fc:
         b5:cc:ef:e4:cc:04:f2:fe:bf:02:69:ed:16:28:74:50:a7:15:
         9e:9d:64:68:d5:97:51:c5:45:05:4c:43:64:0f:d5:f7:a2:62:
         b6:54:40:74:e7:38:9c:09:90:29:64:0c:d3:3e:6f:7e:26:a0:
         00:98:7a:d6:09:43:ae:61:12:c4:88:10:d4:e1:4f:d0:d9:69:
         d6:15:19:f7:70:b0:ba:e7:ec:39:01:78:ea:df:a9:e4:d0:f7:
         89:44:18:71:58:35:d8:62:6c:27:82:8c:2c:b9:18:7c:4e:25:
         fc:2f:11:25:5d:b8:31:ed:bf:2f:de:f6:75:92:37:17:37:d5:
         ce:9c:8e:e8:1b:82:01:56:d0:80:25:06:36:7d:51:85:34:a0:
         4d:17:35:64:4a:65:8d:33:a9:4d:b5:3d:44:20:bb:66:b4:e0:
         2f:37:d0:e5:6c:74:1a:84:9e:a1:8f:35:ad:82:56:ea:cf:bc:
         a7:53:05:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:42 2026 by rpki-client