This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
File:                     I0AYtVE7d50uHjrBqGpZO92XTKc.mft (raw, json)
Hash identifier:          BiQW/ZTUy4EY4zDbIj4CmasIljIzhR/CrK7L2/D6AYw=
Subject key identifier:   56:B9:83:C1:D2:04:33:F9:AC:9E:8C:96:3E:18:F5:DC:AF:04:14:A7
Authority key identifier: 23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
Certificate issuer:       /CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Certificate serial:       019C41A1A7DFA25ECD2E3A0FC2608256CF65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
Manifest number:          03F0
Signing time:             Mon 09 Feb 2026 09:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:39 +0000
Files and hashes:         1: I0AYtVE7d50uHjrBqGpZO92XTKc.crl (hash: zXsNlb3Fvm+hr3KrULYR1+3oZdKwKbQBfS8B4PmJ2Dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:a7:df:a2:5e:cd:2e:3a:0f:c2:60:82:56:cf:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
        Validity
            Not Before: Feb  9 09:00:39 2026 GMT
            Not After : Feb 10 09:00:39 2026 GMT
        Subject: CN=56b983c1d20433f9ac9e8c963e18f5dcaf0414a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:6e:b1:b0:6c:6b:8f:ec:f4:d4:e8:b9:d3:
                    9f:d2:14:78:65:78:b1:87:85:99:0b:81:4f:3c:9f:
                    39:8f:d4:52:40:40:b2:64:8d:0f:ec:35:e3:8c:36:
                    c5:cd:77:1a:93:91:1c:4a:19:6d:7f:42:27:cf:ba:
                    da:95:cc:78:ec:39:06:c1:28:fa:45:2d:48:86:fe:
                    75:e4:2b:50:80:a3:69:38:23:19:cb:60:30:35:a6:
                    5c:1e:80:67:9d:ed:e5:82:cc:f4:38:51:21:2f:34:
                    ab:13:2c:74:ff:a8:98:dc:1f:dd:78:46:f4:48:ff:
                    ff:0f:0d:3b:6a:34:99:20:b6:6a:ff:b4:10:49:b6:
                    48:cc:8e:89:6d:3c:61:40:03:e2:60:4b:de:a4:8b:
                    59:56:b2:d1:7c:f6:32:ee:e1:75:d7:e3:b6:3c:4c:
                    5c:e5:c1:30:09:8b:58:f0:0e:3b:08:89:98:e1:02:
                    71:98:b9:60:eb:01:e7:dd:b2:28:d6:b0:7b:9f:0a:
                    f0:5d:f2:33:d8:d3:8c:d1:c9:9d:44:94:b3:57:43:
                    be:83:d5:29:f3:3b:1a:68:96:64:c4:f0:16:41:35:
                    b6:74:51:0e:b0:5c:d2:77:4c:5d:9e:7e:a6:71:e9:
                    81:77:39:ac:f3:c0:f5:3d:da:af:84:3a:0f:34:90:
                    ea:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B9:83:C1:D2:04:33:F9:AC:9E:8C:96:3E:18:F5:DC:AF:04:14:A7
            X509v3 Authority Key Identifier:
                keyid:23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:14:01:a4:4b:5e:1e:77:e5:ca:79:81:67:8e:cf:f2:67:f4:
         7d:f7:8d:48:ba:46:79:23:6b:01:81:93:bc:6b:d4:4d:7f:b6:
         6b:3f:bb:08:c1:08:76:3c:4b:1c:03:9a:79:e6:6d:51:3a:23:
         6d:1b:85:fb:42:13:24:0e:02:89:99:a6:5e:6a:c4:2e:f2:7e:
         d9:d3:94:2b:08:28:33:9e:9c:fc:e3:c9:48:7c:b6:2a:7c:bd:
         74:90:fe:50:eb:db:88:75:cf:bc:b2:9c:9d:c9:ef:84:6f:f1:
         b9:51:44:71:07:5f:37:34:2b:df:bc:1c:fb:18:10:ec:34:7c:
         b1:47:31:7e:e1:21:73:09:a5:e7:ad:de:53:32:f3:4a:da:ac:
         24:9c:e8:2f:d4:0d:cb:f4:5b:3e:7d:79:74:b1:e3:8a:06:ef:
         b8:c3:5c:dd:5d:5d:cf:af:ef:de:8a:8b:a8:4b:a5:f5:50:01:
         c3:b6:2c:2d:83:c2:01:ad:12:8a:67:fe:c2:15:fc:07:56:3a:
         3b:49:fc:67:1d:fb:a5:fb:ea:6c:0c:e4:ba:4e:db:99:86:92:
         0e:7f:b1:b7:46:4a:76:34:18:2f:d6:11:50:e4:b2:fd:98:44:
         3e:61:28:b8:dd:64:1b:e8:1f:fa:f4:d8:51:cb:dd:d8:ca:e1:
         bd:43:b3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:38 2026 by rpki-client