This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File:                     mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier:          HunDf+a1v0ECYOwy8kbh0opIQ2ph5pNK005+RVAGP/4=
Subject key identifier:   9F:97:F0:4D:81:76:DB:91:90:3F:0D:92:B9:37:D0:8C:88:C4:8D:39
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer:       /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial:       019C40FD1FCEE0B4AD311974669C6CB7D5B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number:          1454
Signing time:             Mon 09 Feb 2026 06:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:56 +0000
Files and hashes:         1: TnxLiTU4N8IxRzgKudiN6lBfkB0.roa (hash: 84h5erlaI1tFTllY8zVF7aYQ8Di+2iwxgRfjK8j6Kko=)
                          2: WlLOTRCWvlIYiS-TgTY4hAdHm7Y.roa (hash: bxPUG4RUFxYGi4wK66fAhQIJ42FQsayg/q85b6OoGU8=)
                          3: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: oXWnnA6BH1aN40Vtzl4wYSdhZlEnWJU5pthZypxg7So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:1f:ce:e0:b4:ad:31:19:74:66:9c:6c:b7:d5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
        Validity
            Not Before: Feb  9 06:00:56 2026 GMT
            Not After : Feb 10 06:00:56 2026 GMT
        Subject: CN=9f97f04d8176db91903f0d92b937d08c88c48d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3d:c0:66:de:a7:35:16:d6:18:3e:dc:b0:7f:
                    d5:58:94:f5:86:2b:b0:b1:33:27:a8:6c:ea:c9:96:
                    f6:43:ce:a4:7b:3e:7e:b4:26:15:ed:a4:b3:54:45:
                    cc:50:4d:aa:b5:eb:d2:5e:81:f7:cb:00:94:78:ed:
                    a1:00:c8:25:8c:5b:6d:4b:82:3f:95:62:67:79:7d:
                    4a:79:c4:8d:16:96:82:4e:1c:a0:75:a3:8c:e5:b3:
                    ec:94:30:37:98:3a:82:0e:c2:8e:93:c3:79:06:aa:
                    44:08:ea:ee:47:01:6f:36:95:40:77:c4:3d:af:f5:
                    b2:a5:23:36:6d:ae:ca:f3:1e:ff:0a:b6:17:ae:28:
                    d5:57:25:b6:21:17:da:d7:3e:3d:fb:27:bb:49:24:
                    5f:f8:3e:3e:fd:13:9b:07:7d:a2:12:c6:ef:66:d7:
                    aa:89:35:05:a0:e4:e9:84:4c:c7:c9:7b:78:c6:be:
                    77:ec:57:f9:36:5d:f1:f1:15:0e:21:4f:36:49:21:
                    c5:1f:da:d6:e5:ce:ea:e1:9c:b1:cf:03:e7:94:75:
                    2b:9e:22:43:e7:9b:70:70:25:09:57:f0:f4:d0:b5:
                    74:63:6d:78:a1:5e:86:51:49:9b:c5:5b:d0:04:45:
                    45:0b:55:5d:a6:e1:63:24:d7:10:15:2b:f4:af:e2:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:97:F0:4D:81:76:DB:91:90:3F:0D:92:B9:37:D0:8C:88:C4:8D:39
            X509v3 Authority Key Identifier:
                keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b6:0d:d1:58:cf:c1:4a:71:bf:ef:dd:bc:25:d2:03:04:d8:
         0e:1a:5f:b8:1c:63:5e:b5:08:95:44:45:24:7e:5f:ba:e3:b7:
         8e:43:07:79:d7:5a:c8:a8:45:19:ec:86:1a:8b:40:86:28:01:
         94:ce:69:a6:01:6b:0c:1a:1d:bd:fa:99:64:fc:59:49:19:cd:
         84:8a:de:03:3b:9c:84:68:60:22:62:69:0c:9b:05:53:84:cf:
         28:3f:62:34:5f:6f:bf:ff:ca:d2:c9:a5:81:72:aa:3d:5d:2c:
         78:b7:70:8d:0f:29:ba:be:b7:ad:7f:e6:e6:9d:33:2f:ec:74:
         c0:bd:3d:f6:65:56:15:ef:9d:c8:ed:c0:66:8c:e1:1e:1c:8d:
         8f:93:78:35:01:ab:be:04:c5:bd:70:68:1c:46:51:68:45:ff:
         c4:01:44:bd:9d:5b:96:c0:7f:4e:da:51:80:1b:78:6d:7e:33:
         b4:aa:2d:6f:16:a8:41:a3:fb:8b:2d:84:c5:2b:51:2a:69:33:
         5a:4a:b7:e1:0f:a8:fb:97:0c:f1:1b:aa:52:1f:f3:c7:1e:6f:
         30:44:39:9e:07:7e:77:27:ab:11:af:7f:84:de:0c:31:1e:f4:
         45:33:4d:6e:30:cd:e1:9d:f1:23:d2:49:0f:b9:8e:fa:b1:5a:
         5d:57:c1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:34 2026 by rpki-client