This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
File:                     Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json)
Hash identifier:          pEj94FN6+8tGG7OSAzHzv/9fzbmucxQQNay/K2U56qw=
Subject key identifier:   51:97:2C:20:6B:14:AC:45:F0:C7:A5:E3:07:87:90:D4:DC:91:7B:92
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       019C38309F3D376512B7037F9B4578C5480B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
Manifest number:          0F90
Signing time:             Sat 07 Feb 2026 13:00:36 +0000
Manifest this update:     Sat 07 Feb 2026 13:00:36 +0000
Manifest next update:     Sun 08 Feb 2026 13:00:36 +0000
Files and hashes:         1: 1jOzSXBij5_0E-f2suF9FA2ns6E.roa (hash: Nc0F7T+rokFZEGPWl4wCwZ72VzEoKQta+d5LVxuMNuk=)
                          2: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: Yy4DVHYZx50Lx+GuH0XksqUuh44Duv7xmltUm3MQs/k=)
                          3: VJzsM7xLy0BvWv62rRogwgx0xmY.roa (hash: r5eVuV7raUZo7rWfONsinf2tvmGiQxP2qwK0CFC96cA=)
                          4: Y1T4r7Fs3xLnU467yBjXxVxADek.roa (hash: 2REreg0NGysFv7m8SRA6AFjBorpvVS4eSFiK4h3b/NE=)
                          5: axPxdnGXgCRwQaSqTXZuNt_ZeRQ.roa (hash: 19+634b7ERlCmGPvTLiIQL850moJR3rSQ5I/u031cHQ=)
                          6: bQ8c-7koeiWAMWWzaWJffyBBvZc.roa (hash: hLJwj4Ja3tdG52rHBUCVD/JD4mLF045qQKob1dFnaXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:38:30:9f:3d:37:65:12:b7:03:7f:9b:45:78:c5:48:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: Feb  7 13:00:36 2026 GMT
            Not After : Feb  8 13:00:36 2026 GMT
        Subject: CN=51972c206b14ac45f0c7a5e3078790d4dc917b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:97:5c:18:4a:f0:39:72:d9:90:fe:df:79:1a:
                    99:06:a5:a7:31:ee:7a:3b:26:1e:fd:01:42:ba:ab:
                    eb:f3:a0:b6:b4:67:49:e0:bf:86:b9:1f:ea:14:61:
                    ea:96:6d:27:46:93:71:50:8e:4b:5c:6a:90:ab:a2:
                    bf:a3:93:6c:2c:19:68:3d:13:ca:f6:98:f2:ee:42:
                    9c:8f:9b:67:de:ca:c3:12:d0:14:4b:b3:e4:d9:36:
                    db:4d:12:31:d8:1c:fa:35:6b:a5:4a:0b:9c:cb:76:
                    b6:07:5a:37:8e:87:32:31:8f:e9:e8:63:68:a8:9e:
                    7e:87:73:42:64:f1:9c:8d:29:e9:a8:de:b2:32:26:
                    81:8c:fa:f0:4e:5d:e4:c8:a9:60:c7:ca:d2:75:41:
                    1f:a6:bd:55:05:15:76:06:0c:70:bc:e3:c2:84:ea:
                    5a:c2:b1:76:68:64:68:04:89:96:39:d6:9a:c8:2c:
                    99:80:77:88:2d:49:36:2a:41:d9:d5:57:1e:9f:0d:
                    a8:ae:fb:c0:35:ca:3b:bb:88:da:91:05:6f:7d:93:
                    05:47:7c:8c:df:cf:4e:45:e7:79:25:62:9c:32:74:
                    c1:c3:38:f5:3e:ad:5f:db:f6:32:cd:85:4f:d4:b5:
                    a7:e5:a8:d9:a7:8a:26:2c:88:c0:6b:24:93:60:f2:
                    21:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:97:2C:20:6B:14:AC:45:F0:C7:A5:E3:07:87:90:D4:DC:91:7B:92
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:62:85:82:4f:7f:4c:6d:50:a2:28:71:9b:8a:d2:90:79:cd:
         72:17:6c:d0:3d:78:95:7d:4e:57:4c:57:59:33:f3:72:76:6a:
         42:80:d0:8f:a6:e7:8b:de:4f:f0:43:f2:b5:6d:95:fe:e7:d7:
         3e:a3:e9:c2:50:29:11:7c:17:69:0b:5c:97:29:22:3b:a3:6b:
         b8:4f:f4:30:d7:b1:60:5b:e9:93:36:a0:4b:d6:f2:99:ae:db:
         c4:68:0a:fd:51:b2:1f:e1:5d:3c:85:67:76:95:72:90:25:a4:
         14:8d:4f:74:48:5f:17:ce:0f:5a:43:01:4e:c7:61:34:2a:25:
         85:30:56:29:b7:9b:5e:86:0c:38:41:16:6a:14:8f:4f:14:29:
         84:bd:07:59:97:6e:1d:10:08:f6:6a:25:a2:40:5b:bb:ea:e6:
         b6:da:47:b8:61:b1:24:0a:b7:4d:78:5f:df:e9:67:ab:6d:06:
         9d:68:0d:3d:05:77:79:6e:b4:fe:62:12:14:14:1c:52:2d:b0:
         ac:5d:9a:50:6b:b7:62:8c:a1:87:4d:4e:77:b4:be:d6:38:26:
         a1:b0:fa:62:a6:19:59:82:c1:a2:37:dd:d2:0a:1f:8b:04:55:
         6a:c7:df:ab:7c:cb:35:7b:a7:47:a6:81:08:b6:c9:85:b1:ca:
         26:1b:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 20:51:33 2026 by rpki-client