This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File:                     IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier:          DUYDdpIhEuNRz+Yx7C5nH6bBLEUW0bXLFFzbDvTxvAQ=
Subject key identifier:   FE:27:97:77:E6:AD:C7:E4:A0:01:39:BE:44:82:F4:EC:80:B9:48:26
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer:       /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial:       019C4358E699D5067EBC958B0C2C7824ADEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number:          08BB
Signing time:             Mon 09 Feb 2026 17:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:25 +0000
Files and hashes:         1: AKrnC7ODjSOXMdeL8wrToif0Wj8.roa (hash: xAW6Xh8ZxCJiYIacyACrSRCzv0AulHAv512L4kczh4U=)
                          2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: caESYz5XTHtSc4gk1pOd1Mgu0q4zv9erqvYg42XDVuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:e6:99:d5:06:7e:bc:95:8b:0c:2c:78:24:ad:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
        Validity
            Not Before: Feb  9 17:00:25 2026 GMT
            Not After : Feb 10 17:00:25 2026 GMT
        Subject: CN=fe279777e6adc7e4a00139be4482f4ec80b94826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cd:13:1f:4e:b4:68:fa:ed:db:75:2a:95:74:
                    b8:8a:93:88:c8:90:79:ca:be:2a:85:af:1c:c9:a1:
                    1c:02:d0:c3:41:88:0b:93:da:b8:28:3d:01:84:78:
                    95:51:f1:01:cc:56:ff:a3:44:32:ff:e6:9b:1d:64:
                    22:50:80:47:8a:80:0f:2e:42:9b:ec:59:95:d6:c9:
                    df:7d:0d:b0:a4:35:14:4a:8c:15:0e:a6:e2:f7:54:
                    9f:0a:cf:a2:3c:ac:4f:69:3f:d8:b6:57:3e:38:1e:
                    cc:cd:78:3c:1a:dc:1f:8a:11:0d:d7:29:9f:1a:7f:
                    b7:66:2a:b8:4b:35:4f:11:00:d7:3c:db:21:05:7a:
                    e7:c1:c1:40:1b:c5:60:8d:c1:f4:c2:a7:1e:cd:e6:
                    90:ac:ef:38:30:35:29:48:19:de:02:2c:4a:6c:08:
                    cf:02:71:30:51:7b:32:b9:4e:62:0f:dc:aa:16:46:
                    36:e6:72:bb:b6:4b:89:85:bf:5e:a4:e8:dc:0b:1f:
                    5e:66:53:f0:5b:69:4b:d8:af:51:f4:ad:98:30:b9:
                    6b:65:c0:c7:cb:84:36:df:38:a1:c0:d4:c1:45:59:
                    04:c3:a2:9c:f6:22:83:55:9c:e6:a9:93:7a:00:7e:
                    6a:fc:d0:7d:88:76:17:e8:e8:0f:4e:b3:d6:55:4a:
                    9d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:27:97:77:E6:AD:C7:E4:A0:01:39:BE:44:82:F4:EC:80:B9:48:26
            X509v3 Authority Key Identifier:
                keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:38:71:ae:13:4f:3d:fb:2c:1f:1f:47:06:66:5a:b9:4d:8a:
         9f:d2:c4:4b:2a:86:1d:60:31:9c:8a:02:52:04:b0:f3:b3:74:
         3f:b7:81:f1:46:6e:67:f8:f9:7a:18:ae:e4:97:83:31:93:e5:
         8c:6d:a8:95:0f:bf:1b:75:64:03:0d:60:bb:63:8f:ed:cd:52:
         b1:1a:b0:9b:ca:5f:09:b8:48:e0:2e:72:cc:b1:f6:11:df:97:
         d4:9e:0d:21:8b:a1:c5:5b:a1:c2:56:22:25:1f:2d:4d:6c:d5:
         0c:f5:e8:1b:d4:05:a6:b3:bc:78:c0:72:89:5a:a8:dd:ae:47:
         80:87:29:14:49:10:72:86:79:a7:35:63:48:9d:ab:c4:52:05:
         1a:6c:02:05:0a:d3:24:76:e7:2e:03:de:51:55:22:64:c7:7e:
         17:80:54:42:ef:c6:c2:8f:58:c9:bc:72:0a:bf:1e:ec:48:92:
         5a:09:27:a8:44:82:06:b9:0b:b7:83:0e:74:ce:10:8c:7e:26:
         94:de:90:f8:0d:81:38:91:ff:e1:c8:4e:b2:85:2e:1d:7b:3e:
         45:df:b0:4a:06:73:5d:b3:e9:44:fd:df:e6:88:15:18:d6:12:
         e3:f2:4c:b4:a4:fd:03:fa:4a:93:10:e2:5f:b1:09:00:9c:19:
         ea:23:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:35 2026 by rpki-client