This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
File:                     ijSno_66-8hACr4dwS8ixsHopb4.mft (raw, json)
Hash identifier:          2Jqa3yPS0w8s/JtqUBmTZb2dXLvkKGffRCa7BfdTdFM=
Subject key identifier:   4B:DF:C7:5C:DB:3E:6F:23:9B:23:63:58:3D:6C:EF:03:AB:B9:3A:32
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Certificate issuer:       /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial:       019C43FE1B79050D05407F11FE7B2F1A6CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
Manifest number:          0883
Signing time:             Mon 09 Feb 2026 20:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:52 +0000
Files and hashes:         1: DrNj16KdHBydg-pgyLTL6B45LSk.roa (hash: aO4vG1Y0PWHmNb5jF8du/ccBdv9Na2OGncKoGutGl4g=)
                          2: ijSno_66-8hACr4dwS8ixsHopb4.crl (hash: hdwoEmwxqgdibkS3vyKhFZgaeiV6RgW9elRfPtshdYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:1b:79:05:0d:05:40:7f:11:fe:7b:2f:1a:6c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
        Validity
            Not Before: Feb  9 20:00:52 2026 GMT
            Not After : Feb 10 20:00:52 2026 GMT
        Subject: CN=4bdfc75cdb3e6f239b2363583d6cef03abb93a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:eb:08:70:e5:de:14:2b:9c:f2:0e:5e:01:
                    a1:ea:45:af:c6:9c:c4:4a:23:1e:97:11:e3:f7:12:
                    e9:f5:53:8d:89:8a:3d:e5:43:ac:59:f3:3e:43:68:
                    08:48:a2:9a:ba:fe:88:ce:05:2e:06:c4:77:f5:11:
                    56:ae:83:b6:d3:02:71:0e:3c:98:e3:1d:a9:68:de:
                    73:54:6d:aa:26:30:e0:6a:c2:0b:d4:c7:9b:ec:e6:
                    ff:8c:c9:72:cb:db:2a:fe:03:04:51:25:5e:6c:2c:
                    6f:07:d5:c0:8c:49:6d:60:f6:ff:2b:c9:1b:ed:9f:
                    d0:a4:5a:fc:7a:cf:ee:5a:0b:97:8d:40:54:93:1e:
                    ab:1f:4b:b7:a9:5e:f1:5b:39:bf:df:ba:86:6b:15:
                    f6:28:c5:0a:cc:f3:90:ca:0f:e2:5a:0a:11:90:99:
                    da:f6:89:85:2a:ab:61:ba:a2:17:d7:87:80:95:93:
                    ff:29:be:70:bb:a4:ba:c1:b4:07:9f:2c:dd:66:a2:
                    59:dc:42:7b:c7:29:f7:66:d6:33:d7:f9:9c:f9:11:
                    ce:f9:40:9e:ef:a4:e8:d1:b8:6c:2c:5c:53:d3:fd:
                    7d:cc:9c:cb:cb:d2:d7:ed:d0:cd:77:aa:ff:87:9c:
                    9f:ec:df:93:bc:67:49:3f:c4:cc:f9:a6:47:4c:59:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DF:C7:5C:DB:3E:6F:23:9B:23:63:58:3D:6C:EF:03:AB:B9:3A:32
            X509v3 Authority Key Identifier:
                keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:44:c9:fb:5e:c8:8c:52:56:3b:24:13:a1:e2:f0:3d:2f:3c:
         f1:6e:d5:c0:dd:3d:36:95:58:13:ce:2a:a5:f3:49:30:7c:7c:
         57:dd:64:38:c4:da:82:97:c8:ec:c9:67:f4:da:bb:f5:b1:33:
         e5:79:dc:3e:e1:20:38:84:0c:19:82:be:2b:02:5f:0c:d7:fb:
         67:3b:ba:3e:ea:82:ed:06:57:a4:a6:a4:14:30:68:5d:41:93:
         30:0e:fb:a7:9e:0e:3d:03:1c:e7:aa:6e:77:e1:1a:32:84:c7:
         9a:a8:b4:2b:63:e5:93:17:88:a9:47:b1:49:cd:30:6f:1c:66:
         f1:b6:0d:97:4c:57:f0:d9:79:4e:1c:ce:ca:fd:57:19:3e:73:
         fe:26:7d:c2:32:4c:be:b4:a7:97:7b:14:11:c5:60:97:09:48:
         84:64:29:24:40:39:ae:da:b4:e4:b1:45:7c:73:9d:4b:fa:7f:
         70:e0:0f:46:c6:54:61:15:be:fc:0b:cc:fc:b6:ea:0b:97:d8:
         33:81:bb:b2:ca:8b:03:7c:15:37:d3:2d:33:7a:50:78:1d:8d:
         0e:d7:cd:e9:ac:4e:44:d1:7e:cb:44:13:e5:a4:69:19:83:58:
         32:82:64:63:28:12:d0:fd:ba:30:94:b1:56:53:a8:c7:d8:67:
         e6:ab:cc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:19:29 2026 by rpki-client