This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
File:                     IYOyVqIVtNb-JhfRJitji_p9bUA.mft (raw, json)
Hash identifier:          MGNN6YhD7ABTMlghHv7gIWh1PcOAcEQedC+5m3zjEIM=
Subject key identifier:   50:71:A1:BC:DA:E3:D0:E6:39:A2:59:BF:A8:85:5A:5F:00:18:CD:0F
Authority key identifier: 21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40
Certificate issuer:       /CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40
Certificate serial:       019C4390628FE568DB8CAA5876504A18B0DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
Manifest number:          01FD
Signing time:             Mon 09 Feb 2026 18:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:01 +0000
Files and hashes:         1: 3t7l7f24gteZE6pfOCHDjy6tPXU.roa (hash: 68JrqaeJqxrTaW25a9hnE6OONLO7WRq5rzCsMPJFtyU=)
                          2: IYOyVqIVtNb-JhfRJitji_p9bUA.crl (hash: dt5uzaGIG8rvyrpdZtL1ONy7s7UNW/bW2ZJB+pVAecw=)
                          3: jI8kE_edmCe6nU3HjTS6dGcZn4c.roa (hash: bpSk5eGaUyyPipTCLYLXXztA6txMxswrw9EiMZYwCO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:62:8f:e5:68:db:8c:aa:58:76:50:4a:18:b0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40
        Validity
            Not Before: Feb  9 18:01:01 2026 GMT
            Not After : Feb 10 18:01:01 2026 GMT
        Subject: CN=5071a1bcdae3d0e639a259bfa8855a5f0018cd0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:80:36:c2:fe:da:49:43:9e:37:b0:d7:b3:
                    e1:3e:6c:f3:62:62:81:91:ef:c7:21:74:81:29:2a:
                    13:ef:d9:fa:95:99:9f:35:d9:ca:26:7c:4e:38:38:
                    e9:0a:a7:f7:0f:15:a0:17:e4:60:42:7f:f1:81:d0:
                    fe:03:59:71:c9:e2:7b:fe:a5:f0:eb:c2:33:0f:96:
                    a4:94:da:50:2e:dc:b6:5a:4f:06:52:9c:e1:ee:f7:
                    24:c8:20:2f:af:2c:39:b5:7e:4d:c4:4c:29:ea:94:
                    7f:63:02:e7:cf:db:9c:93:91:5f:b9:6f:1f:41:32:
                    23:02:74:28:dd:87:b2:1e:0b:39:2e:39:07:83:55:
                    24:1c:bd:6e:30:65:17:4b:1a:88:ae:0a:ee:d5:87:
                    ff:fb:c6:d5:92:c7:c1:0e:c3:d8:73:7d:b3:ad:3e:
                    b9:7b:33:0f:c3:51:c6:0f:28:2a:49:80:50:9b:cc:
                    45:48:19:27:38:35:bd:06:65:81:01:b2:8b:9e:98:
                    f8:91:a8:1b:54:2c:21:e6:74:3c:68:75:a4:be:3f:
                    95:f1:5a:2e:27:69:ca:ff:7d:cf:18:5b:f5:0a:da:
                    07:87:3b:0f:48:3e:e4:c5:7d:4c:0f:21:ae:13:60:
                    50:1a:dc:32:6f:41:43:1c:67:e7:9e:98:b3:b2:9a:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:71:A1:BC:DA:E3:D0:E6:39:A2:59:BF:A8:85:5A:5F:00:18:CD:0F
            X509v3 Authority Key Identifier:
                keyid:21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:02:1a:5f:05:d1:53:60:3e:4d:ef:e9:62:ee:e0:65:78:90:
         3a:c9:4b:12:fc:c5:fe:8b:ef:06:d4:c1:02:7c:c4:c0:85:dd:
         81:9f:e6:dd:14:8e:43:57:5f:75:af:17:34:c8:04:f3:0f:f6:
         72:44:81:0f:9d:1b:cf:f8:ab:ce:99:3f:8d:4b:5d:44:8a:fa:
         1e:cd:e1:1d:73:b9:2a:9e:66:fe:69:e2:32:07:db:bb:d0:4a:
         d4:55:4d:2a:4d:6a:cc:3b:dc:49:41:7f:98:a7:41:77:80:0c:
         dd:91:9f:40:f5:6c:90:bb:dd:9b:d3:f8:32:5f:45:cf:d4:b6:
         42:f8:ee:17:4b:ea:fe:5e:29:89:b0:a4:ac:b8:da:62:c5:5d:
         1a:d7:b6:de:09:45:d4:c9:be:04:5f:d9:41:45:c8:4f:61:1e:
         3b:11:7c:14:f3:25:0f:5b:76:c6:e2:08:51:c3:09:b5:a4:eb:
         4d:f5:0e:c1:b1:a2:d8:b0:a4:31:bc:7c:d5:4a:d6:f3:90:15:
         08:a0:35:de:ad:7b:da:31:c0:48:ad:8d:6d:19:b5:01:18:7d:
         09:44:85:b4:b2:45:10:64:27:17:97:2b:69:4f:ba:b8:e6:dd:
         79:90:0a:42:e1:3d:f6:92:40:b8:e7:d2:1b:93:7d:21:d4:c6:
         a6:ae:38:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:47:05 2026 by rpki-client