This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
File:                     iBLpJPysuGLPO2T1bnZ7wybyf8o.mft (raw, json)
Hash identifier:          Vs3wlZv0vwIzNDyK3TjnEH92cLHX/lqRFZbcPYvtx6o=
Subject key identifier:   60:1E:57:82:AE:DC:B9:90:E3:4D:5E:FA:A1:EE:1B:D7:B0:78:CB:49
Authority key identifier: 88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA
Certificate issuer:       /CN=8812e924fcacb862cf3b64f56e767bc326f27fca
Certificate serial:       019C4358D61355232BFB1140BFC7AE9733A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 17:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:21 +0000
Files and hashes:         1: iBLpJPysuGLPO2T1bnZ7wybyf8o.crl (hash: 7GFxGqdcJCgbUm9K6WMpEChKdIWKRZpEfhkFXOsKlq4=)
                          2: tZEur65DZRQxS8J-3HPiT7ZHHZQ.roa (hash: QH0sRva7RS+lctZ8onEh+mUTqcR1lWAI/dUY/rIRqdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:d6:13:55:23:2b:fb:11:40:bf:c7:ae:97:33:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8812e924fcacb862cf3b64f56e767bc326f27fca
        Validity
            Not Before: Feb  9 17:00:21 2026 GMT
            Not After : Feb 10 17:00:21 2026 GMT
        Subject: CN=601e5782aedcb990e34d5efaa1ee1bd7b078cb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:67:20:82:6a:61:41:b1:db:2e:e2:e2:fc:
                    f1:87:bb:d4:d7:1f:c4:9a:3a:ab:12:d8:0e:5d:cd:
                    8f:5b:02:6e:a1:ee:fa:24:22:da:41:55:45:73:b1:
                    c3:8b:de:d4:bc:13:01:29:78:23:18:e8:4a:18:4e:
                    57:3e:85:ee:7e:8e:ee:1b:ae:fe:94:b5:10:9c:50:
                    b5:24:b0:06:df:16:fd:83:8a:9b:08:1a:3b:a8:7f:
                    d3:63:f4:6b:0d:18:2a:cd:4c:86:5b:10:d3:ee:2d:
                    67:09:4c:10:c6:e4:a2:ca:62:9f:1d:9d:22:9c:f9:
                    39:90:11:4a:69:66:80:25:48:4d:7b:38:dc:61:65:
                    ea:b3:1c:39:b1:9b:3d:7e:1b:ad:ba:bc:6a:08:22:
                    8c:51:5a:05:fc:49:bd:e1:08:87:a1:70:a1:2a:ae:
                    f2:5c:4d:2c:76:3c:ec:ff:5b:f4:cc:ba:41:75:68:
                    3f:a1:cc:09:70:2d:75:79:52:10:df:f3:d5:f2:9c:
                    c2:9b:4a:a6:7f:d0:c0:52:d2:9b:6a:39:70:26:8c:
                    59:2f:ec:22:26:08:00:bc:9d:d6:1d:43:13:29:19:
                    f1:bf:4c:e1:1a:41:2d:97:96:d2:05:8f:12:08:8b:
                    b9:f4:8a:9a:d6:aa:82:94:a0:1b:93:15:61:ed:c2:
                    ba:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1E:57:82:AE:DC:B9:90:E3:4D:5E:FA:A1:EE:1B:D7:B0:78:CB:49
            X509v3 Authority Key Identifier:
                keyid:88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ed:10:68:d3:21:ec:69:d0:d3:c7:19:1f:05:9d:f2:19:35:
         87:0d:26:e1:a1:37:34:35:d7:8c:52:4e:3a:7e:4e:f5:b7:c6:
         cb:de:56:a0:a3:ea:23:fc:09:34:08:b4:31:42:0b:c0:09:40:
         de:f0:82:19:f0:e1:70:c1:b5:26:20:39:e5:38:81:2a:3f:07:
         12:7b:26:27:ea:3e:dd:ce:57:3d:67:3f:60:32:7a:66:2f:8e:
         f3:0f:ef:4e:3e:fd:e8:57:d3:8b:7e:cd:a8:47:9a:ad:b9:11:
         49:c9:a4:9c:18:86:55:0b:15:89:3e:70:49:c6:10:98:93:c9:
         9c:b0:92:d1:e3:5c:af:3f:a4:e6:93:ca:b8:e8:4e:c8:fb:c3:
         ae:df:db:28:d0:8b:ee:80:53:c2:02:1c:24:28:9f:0d:88:02:
         73:72:78:e1:91:81:c7:c7:6a:66:2b:f2:80:78:8e:bd:fa:fe:
         a6:f8:a9:bf:c3:4b:1c:a5:05:0c:e5:20:10:bc:cf:e4:f0:32:
         dc:eb:35:51:d4:4c:0d:7b:d5:36:1c:92:a4:ac:c7:57:ef:e0:
         a8:8a:ab:94:fe:23:bd:cb:3a:46:fc:f3:4c:88:51:29:2c:f2:
         53:8e:6e:e9:a1:8e:39:4b:26:14:8b:b2:a9:30:12:60:e5:be:
         40:02:63:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:50 2026 by rpki-client