This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File:                     ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier:          R9QRP+UXmC7XOKUvB6jyqzI99D1B5LDLKZsS2SgSxwU=
Subject key identifier:   3A:2E:2D:CA:08:EA:80:BC:EE:00:A3:55:33:E1:5B:B2:69:CC:2E:36
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       019C43900F420CF672660B026A451BAF8575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number:          1819
Signing time:             Mon 09 Feb 2026 18:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:40 +0000
Files and hashes:         1: 30h9dqpO2HTNFcZzXQCxUtNzDC4.roa (hash: 0sA/L/18FE59iFvAgUSimg7slW1i1d3kvvSKOu/WMqs=)
                          2: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (hash: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0=)
                          3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: EkHUXi7SW5Tl8XpI+QrluHzG+/E0+CdTR7MAuvpYX54=)
                          4: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (hash: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU=)
                          5: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (hash: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:0f:42:0c:f6:72:66:0b:02:6a:45:1b:af:85:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: Feb  9 18:00:40 2026 GMT
            Not After : Feb 10 18:00:40 2026 GMT
        Subject: CN=3a2e2dca08ea80bcee00a35533e15bb269cc2e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:37:b8:29:ce:d2:32:3e:03:23:f1:71:2c:
                    41:64:e6:ac:56:e6:b9:85:a6:3d:57:6a:ad:85:71:
                    da:37:32:88:a9:a3:a6:e7:83:b1:a1:fa:24:20:d2:
                    c5:1d:17:42:5e:99:f3:19:55:1d:68:3b:cf:d4:ca:
                    9f:44:7c:db:85:b3:33:96:e0:2a:0c:19:52:ba:b3:
                    71:2a:3d:fe:14:07:65:9b:0c:01:4a:f0:2b:67:97:
                    69:38:08:b1:bd:c5:e2:60:0c:5e:2c:e1:a1:b7:b6:
                    a3:f8:57:b6:2c:98:53:a4:68:6b:5a:96:c8:70:fd:
                    9d:64:1b:b6:84:22:8e:97:43:71:0c:c4:9a:37:b6:
                    3c:30:9d:a8:2b:ee:91:e0:77:47:6e:1e:03:5b:49:
                    9c:34:46:31:28:58:b1:c9:46:e0:24:bb:5e:4c:fd:
                    1e:e7:1d:f9:22:c4:fe:0d:e6:18:f3:b4:69:8b:a9:
                    fc:eb:e9:37:9a:05:75:1d:f5:e6:92:bb:be:94:7f:
                    d3:db:2c:b1:34:2a:50:42:ff:4a:0f:fc:6a:fb:55:
                    2f:7d:03:5d:d0:7d:f8:cb:73:e8:2b:80:80:15:90:
                    ac:93:58:63:22:89:4d:28:ae:58:75:3d:c4:e1:58:
                    65:8c:c3:c3:50:c7:ff:46:ed:00:dd:b7:a3:e1:6e:
                    96:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2E:2D:CA:08:EA:80:BC:EE:00:A3:55:33:E1:5B:B2:69:CC:2E:36
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:5f:0f:96:5e:52:21:cc:7d:98:4a:60:d6:4f:3b:66:dc:5b:
         db:66:94:c3:1f:d3:6f:2d:17:0d:8b:ff:d8:b4:a2:d1:43:db:
         45:85:22:82:90:ce:ad:73:aa:cd:86:10:3c:e8:f8:71:f5:5b:
         ba:04:23:a1:40:43:ca:d6:86:2b:be:44:e5:f9:29:19:b8:ba:
         3f:e6:12:54:9c:4e:5b:b9:4d:3c:eb:7c:e7:ab:9d:30:4b:6f:
         cf:6e:e3:5a:ce:d8:7a:58:9c:a9:25:47:e7:80:1a:56:e3:dc:
         aa:8f:73:c2:71:06:eb:ea:b6:98:d0:e4:d3:e3:b6:b9:c9:ab:
         72:53:bb:2f:42:d3:f9:25:b4:8e:3e:81:76:35:c6:c6:f6:76:
         a7:71:df:57:6f:bf:c6:02:eb:ce:9e:97:43:d8:87:ce:f0:f8:
         37:ba:38:c9:b8:29:ad:6a:ac:e6:23:cf:53:01:03:8e:ff:5a:
         ac:23:e7:bc:05:9e:36:e9:fa:e8:41:cc:ab:4a:35:ea:da:bb:
         b5:1d:3f:69:18:e5:a5:b5:79:7b:9c:09:b9:07:d0:3d:ef:5a:
         9c:42:70:0c:ac:99:01:17:1b:bc:02:70:36:f0:e0:09:cd:69:
         10:53:b3:58:a3:99:70:e0:0e:69:6e:6a:35:1f:41:ef:eb:fd:
         97:7b:92:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:24 2026 by rpki-client