This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
File:                     IqyN_06Z0-IomvY7FdVdJFDIQsM.mft (raw, json)
Hash identifier:          LfbNwfAFpekGHWv+oxZAj5Pd9ybUwt/dvzr0tKyvjC0=
Subject key identifier:   75:DA:5E:0D:A9:09:F3:87:F5:8F:84:94:5B:66:BA:2E:CA:21:4F:9D
Authority key identifier: 22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3
Certificate issuer:       /CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
Certificate serial:       019C44A28C643FAC5090AC571763C7A5F1CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
Manifest number:          0732
Signing time:             Mon 09 Feb 2026 23:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:29 +0000
Files and hashes:         1: IqyN_06Z0-IomvY7FdVdJFDIQsM.crl (hash: gPZNBFVdzySzs4VQ0PAMHinS+yL80IfcLaico+iht9Q=)
                          2: vrES8ZRPn5zCw67vXGrWdsUrlYU.roa (hash: SIvQo4/UCnsgnMUPzKF2UlSpxTrczb6UXhWdfVUU1JA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:8c:64:3f:ac:50:90:ac:57:17:63:c7:a5:f1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
        Validity
            Not Before: Feb  9 23:00:29 2026 GMT
            Not After : Feb 10 23:00:29 2026 GMT
        Subject: CN=75da5e0da909f387f58f84945b66ba2eca214f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:a8:c9:81:8b:13:51:40:18:8d:f4:17:82:
                    3a:eb:8b:25:b4:c7:30:3d:c1:f2:97:23:f6:e9:92:
                    78:06:af:49:2c:33:97:de:15:ce:a9:06:6b:55:72:
                    73:f5:12:e2:cc:cc:ee:e4:8c:81:48:d1:63:c3:1d:
                    f2:68:b2:7b:b6:f5:f4:19:e2:ba:54:e6:dd:b1:41:
                    09:43:15:bf:8c:06:54:b4:1e:3d:13:2a:68:e6:1b:
                    96:59:51:c4:38:46:67:44:af:31:c2:84:87:ef:37:
                    84:29:a3:60:4f:d1:92:5e:45:2b:32:1b:33:c0:b1:
                    26:9c:0d:3b:2c:75:ba:b2:88:65:e8:c9:b7:d0:58:
                    7e:83:89:17:b9:da:b0:60:66:cb:e6:36:28:f4:12:
                    b8:8e:6c:6b:42:12:64:5d:e5:b5:fb:63:7d:cf:2b:
                    5f:f5:49:06:fc:9d:ef:1c:63:d4:fa:be:d9:8a:73:
                    18:5a:74:61:d6:ee:62:1e:8e:56:87:c2:fa:0d:79:
                    60:3d:28:82:86:72:6f:78:a2:1b:83:fe:cb:6b:76:
                    23:b6:1b:d0:53:e1:f1:fb:9a:57:cf:5d:89:fe:15:
                    c6:12:15:f4:7c:80:d3:26:ae:84:aa:5f:42:31:18:
                    12:39:ad:5d:da:dc:be:c8:89:a5:45:b7:dd:30:3e:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DA:5E:0D:A9:09:F3:87:F5:8F:84:94:5B:66:BA:2E:CA:21:4F:9D
            X509v3 Authority Key Identifier:
                keyid:22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:04:39:ad:15:6f:60:1c:c9:89:62:8b:0b:ec:e7:26:00:8d:
         7f:f2:0e:f7:db:6c:51:71:d4:93:11:be:67:2b:3c:c0:61:db:
         22:e5:82:76:a7:c3:52:80:a3:a3:bd:44:05:21:d6:7b:a5:23:
         aa:e7:b5:fd:57:9b:b1:a4:8b:2a:03:72:14:c6:2c:2d:e6:c7:
         af:0e:3b:51:63:9d:28:7b:f0:d6:d3:6b:9f:21:8f:55:0f:f4:
         04:c6:02:38:46:f3:68:5e:9e:0a:70:30:2b:6b:1c:ac:0f:e0:
         64:e5:0d:a0:e1:b6:9a:28:98:43:e9:b9:c0:20:d7:c7:57:05:
         bd:99:70:9f:5c:8f:e1:9b:99:88:d7:8e:09:6e:b3:f2:ac:c7:
         d0:e1:ca:df:a5:bc:d1:1c:c9:00:64:8d:aa:b6:7d:48:7f:a8:
         6d:e9:28:72:aa:d5:3f:d5:ea:99:b7:bf:8d:08:0f:2a:eb:fa:
         85:00:aa:92:d6:df:3e:98:a3:4e:37:1c:ec:3d:1a:48:31:4d:
         bc:7a:25:09:19:77:7d:ad:e7:cf:51:47:5d:e4:68:b6:8a:f7:
         2a:ca:9d:8f:04:b5:3c:3e:c6:fd:a4:19:86:10:c3:69:0d:22:
         16:e6:0b:82:d0:b3:4e:6b:cb:4c:a6:ca:20:6c:5f:8c:cf:b3:
         66:5b:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:40 2026 by rpki-client