This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File:                     iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier:          GexcpFXGisdyw/nVNj6+236khYGnId5dVTZKetfhE60=
Subject key identifier:   EF:6D:EF:15:6D:BE:1F:05:86:66:05:BC:B0:8B:60:68:3E:57:F9:83
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer:       /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial:       019C427D9D397BE2C9FF6A9EC23DB88D71E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number:          1079
Signing time:             Mon 09 Feb 2026 13:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:54 +0000
Files and hashes:         1: MZaOI67AYigbpIsWpWqOKyUB95k.roa (hash: 28l2earsozG7gOJ16ktFFzzWVz+qyy71L+Rc+YVMUeI=)
                          2: VWwoGO2sGQjK21cMFf3XwlF6U0E.roa (hash: G+mIqYh3iGFVL9m6/VUywuW90iG64GkP4wAw6JgPgy4=)
                          3: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: TtXJsNVABDFxhbTqMaR4KiDmvBuDVmJA9vkgpf/tQNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:9d:39:7b:e2:c9:ff:6a:9e:c2:3d:b8:8d:71:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
        Validity
            Not Before: Feb  9 13:00:54 2026 GMT
            Not After : Feb 10 13:00:54 2026 GMT
        Subject: CN=ef6def156dbe1f05866605bcb08b60683e57f983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:2d:5e:b0:36:ab:32:87:2d:b5:45:07:33:
                    21:d3:24:b5:5e:96:82:18:0b:24:41:e3:50:87:f0:
                    86:d6:ab:52:b2:76:d1:43:84:68:31:f9:a2:4a:44:
                    8f:e2:29:41:ad:16:05:67:ae:dd:5b:b9:dd:14:39:
                    dc:3a:e0:0f:c0:38:71:51:1f:1e:b0:1a:c6:65:71:
                    07:ed:92:d9:ff:7b:e7:01:d9:d6:04:44:9b:d9:f9:
                    b4:93:42:37:4e:65:fe:e4:cc:27:e9:d7:66:82:9a:
                    7f:39:2e:d7:5c:ad:e8:44:f3:e2:1c:9e:b6:87:bd:
                    1f:dc:b2:5b:aa:87:45:17:87:d7:3a:0e:2f:96:b3:
                    bb:ec:1a:55:92:a2:74:e7:a2:bf:60:5d:0d:39:ef:
                    54:4a:70:89:55:0c:44:de:cf:88:d6:c1:db:5c:59:
                    c5:92:06:d1:ea:9b:41:d9:5e:c4:38:8d:b8:5d:4d:
                    22:ff:56:ff:a0:d0:23:b7:d1:a2:24:54:d6:e7:1e:
                    28:6f:05:6f:80:0c:3d:f6:e3:e1:98:fd:22:1b:b6:
                    7f:59:93:7a:40:c2:b6:e1:7a:de:a7:f2:66:10:67:
                    cc:1f:bd:9f:e9:66:f6:2b:3b:fd:ca:70:12:77:e4:
                    1a:24:1a:80:72:ce:bc:6a:49:1b:c3:ca:01:cb:da:
                    cb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6D:EF:15:6D:BE:1F:05:86:66:05:BC:B0:8B:60:68:3E:57:F9:83
            X509v3 Authority Key Identifier:
                keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:fe:6c:68:91:ba:e5:56:c5:ca:3f:d7:c1:97:7e:ce:3d:1f:
         a6:04:30:9b:e8:11:af:ad:18:93:fd:84:d3:4f:a0:a2:e3:c8:
         97:0d:c1:83:59:71:25:a7:2c:e9:1d:7f:05:8a:42:cc:8c:34:
         ec:97:f0:23:13:98:47:7e:7a:a2:50:ed:72:f3:02:5c:3f:fc:
         29:25:97:cd:0b:ed:19:13:7a:6d:d0:97:58:ce:e6:54:d4:99:
         1e:c9:38:b6:c6:b0:82:21:42:ca:81:39:46:8c:2e:c2:b4:cf:
         9b:95:dc:5f:ee:88:db:de:3b:d6:b8:54:76:e1:0a:32:18:2d:
         af:ef:10:6e:46:57:9b:80:99:b9:8b:ae:7d:be:4b:45:6c:f5:
         c4:3f:41:95:d5:c6:0d:2d:86:83:72:39:57:b3:e3:b3:8c:a1:
         c0:69:01:07:2e:ea:b5:b5:1c:24:b9:ee:01:a5:b7:99:f8:c6:
         68:15:7f:98:b9:a4:08:27:c4:50:4d:67:27:0d:ca:75:fe:d0:
         f0:7b:a3:74:05:c6:77:ab:c1:20:4c:df:83:45:9c:2b:d5:73:
         08:f3:ba:53:ed:3b:88:55:bf:59:c3:9a:2f:26:36:87:7f:25:
         35:2e:a7:15:e0:0a:0e:88:dd:f4:d9:ce:4a:15:95:17:25:64:
         20:fe:6f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:44 2026 by rpki-client