This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
File:                     IxG6LbhgGYJqsQLhnyyoogkxaFI.mft (raw, json)
Hash identifier:          FxMyiGHe+3LsQ6YP0Mo83e6g9AyFE/sHEwX3vPy+cEg=
Subject key identifier:   E6:69:50:B9:F7:1F:F5:C3:B7:B3:31:26:63:95:18:FB:4C:FF:E8:DA
Authority key identifier: 23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
Certificate issuer:       /CN=2311ba2db86019826ab102e19f2ca8a209316852
Certificate serial:       019C42461855FAD0D6F28DCA54FF31A5E6C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
Manifest number:          030D
Signing time:             Mon 09 Feb 2026 12:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:15 +0000
Files and hashes:         1: IxG6LbhgGYJqsQLhnyyoogkxaFI.crl (hash: /JtsVBeTyCoH6rZqzknBJGucCcLCE6d12F/Jj7KDLk4=)
                          2: ths8OXX3QSMsj9e29cfZdF76uD8.roa (hash: aGHUmAejD8Fr+WhhhtcNvvY0gSQE1mI1EhqqEc3+N9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:18:55:fa:d0:d6:f2:8d:ca:54:ff:31:a5:e6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2311ba2db86019826ab102e19f2ca8a209316852
        Validity
            Not Before: Feb  9 12:00:15 2026 GMT
            Not After : Feb 10 12:00:15 2026 GMT
        Subject: CN=e66950b9f71ff5c3b7b33126639518fb4cffe8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:98:5c:e1:bf:9d:06:9a:52:3d:a7:55:b9:
                    d2:88:3b:bd:57:95:c6:a7:47:48:0e:66:a2:6a:a1:
                    15:02:71:ce:ba:34:e0:d8:21:0b:0f:ab:f0:66:64:
                    8e:a2:48:d7:51:b9:39:30:7a:ec:fc:94:69:c2:e2:
                    bc:4e:31:80:0f:71:91:ec:ce:81:b4:8b:d9:2a:83:
                    84:8c:6a:5a:ee:7a:d7:d4:3e:8e:d1:85:49:51:aa:
                    e9:9e:e7:9d:f7:b6:13:46:43:9c:ca:42:87:dc:58:
                    4d:de:25:c4:ea:e4:19:1c:fb:5c:c4:68:f8:29:29:
                    08:10:e5:10:70:b4:c6:a5:df:cc:61:7a:84:f4:43:
                    8d:55:7b:6f:f9:96:98:35:fc:01:68:7b:c3:73:32:
                    c5:dc:c9:b2:9a:c1:62:d0:34:08:cc:3a:f0:d6:45:
                    02:d4:cf:ef:ee:36:91:53:f1:19:06:ae:1e:ce:fe:
                    0a:6a:19:08:07:d4:17:7d:9a:74:23:a7:bd:d8:86:
                    6e:8c:6d:a8:81:cb:e1:38:aa:c8:48:26:03:1f:36:
                    03:5a:77:7a:78:30:6c:3b:8d:1c:50:59:38:46:c0:
                    ad:14:4a:a3:01:5c:2d:f6:16:94:63:3e:40:eb:02:
                    1e:14:ef:d9:e3:c0:f4:69:33:f6:fc:8b:f1:b5:c8:
                    f0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:69:50:B9:F7:1F:F5:C3:B7:B3:31:26:63:95:18:FB:4C:FF:E8:DA
            X509v3 Authority Key Identifier:
                keyid:23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:51:4a:2f:c2:a6:f7:28:50:03:29:f1:38:1c:d0:a3:f1:a7:
         ff:f8:06:57:5d:01:3e:09:a3:1f:cb:15:8d:6f:b9:de:56:a7:
         1c:84:d5:6c:ec:ab:7e:26:36:62:c7:86:51:ce:ec:14:ac:cd:
         01:6b:0f:36:3e:4d:c2:5c:6f:29:d0:5d:ed:d8:ff:5c:06:1b:
         f4:44:66:ba:9e:2c:7d:54:4b:ec:f2:6d:f6:93:f8:b9:99:e8:
         7d:61:55:f3:d9:7c:43:b4:77:21:02:bc:65:99:59:20:6c:e6:
         a3:4a:6c:ba:a8:15:87:dd:14:93:ab:00:48:68:4b:fd:fb:d8:
         e3:84:35:c9:71:9f:31:ea:db:60:98:ed:7e:2f:76:bf:fc:92:
         8c:32:a9:8e:5d:3e:3d:9a:43:f5:d6:78:b1:83:cd:c2:38:b7:
         7c:78:25:91:0d:b0:db:4c:07:26:8f:ff:94:d8:b5:92:22:81:
         23:00:f2:49:d2:57:81:c6:96:8c:47:89:c9:0a:c6:d3:6c:b2:
         c8:d9:a6:ef:ff:44:9a:54:39:35:ac:9b:c2:0e:c5:21:4a:a2:
         d8:ae:b2:bb:2e:6a:9f:e7:6b:d0:d8:9e:b5:e4:79:7c:2f:6b:
         67:43:40:ee:5b:8e:30:a8:c4:cf:a8:b8:fb:6e:cb:4c:8d:df:
         fb:4b:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:38 2026 by rpki-client