This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
File:                     IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json)
Hash identifier:          RQo65OFmwMS5NBo+xUZCuk9sYUrekpnkQL8X9dRo4uM=
Subject key identifier:   54:DB:39:A9:CD:F6:F5:2D:CB:BF:B4:7B:AC:75:E8:B1:5D:38:0D:34
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Certificate issuer:       /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial:       019C424662C46EA22F248D513ADC04978E67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
Manifest number:          0516
Signing time:             Mon 09 Feb 2026 12:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:34 +0000
Files and hashes:         1: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: 30RyRqrqnTND0gGpxIV+5i55pDGj6J+iZibbJmtD7kI=)
                          2: wyv5vBa47PAsnMwdHNximNKw3Uk.roa (hash: 7tiep6Gb67cUku8Kl/ICbKHtHb5PWFafeqQ40Zk2Vqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:62:c4:6e:a2:2f:24:8d:51:3a:dc:04:97:8e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
        Validity
            Not Before: Feb  9 12:00:34 2026 GMT
            Not After : Feb 10 12:00:34 2026 GMT
        Subject: CN=54db39a9cdf6f52dcbbfb47bac75e8b15d380d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:94:0c:f1:67:da:ad:24:aa:22:c1:77:07:
                    c7:3f:a6:68:e4:57:1c:6d:b1:a7:8d:ef:94:e5:35:
                    db:73:eb:0a:28:f5:62:3f:af:d8:87:13:e7:56:33:
                    82:3a:f6:b1:fb:ee:50:30:de:97:9f:87:68:86:c4:
                    f5:8c:99:50:db:30:0e:8e:e3:b4:d6:80:a6:3a:55:
                    16:db:7a:40:0f:42:e0:98:0d:8a:6d:67:89:c4:e8:
                    d3:77:99:fe:f5:39:50:9f:59:32:03:72:14:dc:88:
                    ec:8c:2b:5c:bd:87:1d:6e:1e:d2:a4:31:27:41:74:
                    ca:9b:46:86:0c:21:47:ac:8f:b5:07:7f:d9:63:4a:
                    1a:8b:2b:09:0a:6d:2a:15:73:9c:ae:e8:a1:8d:89:
                    8c:c3:8b:e6:2d:b7:05:87:00:ef:ed:73:b1:13:5f:
                    61:12:51:2d:c4:14:eb:d8:8f:e2:e0:7d:4e:fd:57:
                    23:c9:18:93:46:be:d9:52:78:fe:b7:e1:17:ec:39:
                    19:e1:52:ea:fe:71:6c:b7:aa:b8:2b:8c:62:65:43:
                    9a:7a:57:58:32:bf:5b:8a:13:0e:49:64:00:17:be:
                    b2:ce:6d:ca:88:6a:f7:e3:cc:ad:fb:7a:3d:da:68:
                    6f:a4:83:06:c8:4b:20:13:2d:9f:07:5e:b6:33:b7:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DB:39:A9:CD:F6:F5:2D:CB:BF:B4:7B:AC:75:E8:B1:5D:38:0D:34
            X509v3 Authority Key Identifier:
                keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e2:51:82:a7:bd:65:f5:22:f0:53:a2:59:b6:00:00:a9:c9:
         63:27:2b:8a:2b:36:23:40:24:7d:02:13:f7:f2:ce:f3:80:9d:
         87:c6:59:80:e4:fb:84:7b:6d:e4:04:97:f2:7c:33:23:7b:a4:
         24:fd:5f:f2:c0:44:fa:6f:92:e2:3d:89:66:63:66:76:74:d9:
         fe:ea:6d:68:22:49:6a:42:01:24:6a:2b:82:b1:f0:3d:14:ba:
         7c:7f:37:cb:3a:31:eb:e2:9a:ef:8a:db:11:e4:a4:7f:1b:1b:
         ea:0d:01:96:dc:91:40:c3:f8:6f:3d:2e:be:a0:eb:65:52:0d:
         e1:0f:3f:39:32:2b:66:57:a7:22:15:08:75:f7:03:f3:ff:24:
         17:2e:8c:c5:69:bf:68:d8:31:5b:bc:49:f1:d5:b1:a7:34:35:
         bc:c0:4e:fd:da:5a:71:4d:f6:d9:b4:e2:5d:29:e9:a4:7c:fe:
         1b:a9:fb:bc:65:48:e8:fc:e1:01:b1:c2:89:52:ba:4f:a7:3d:
         4f:a3:92:12:4f:f5:bd:e2:9a:1c:71:c8:7d:12:ea:95:f1:32:
         2d:70:30:d1:10:e6:8c:d8:e6:85:b6:87:df:e2:8f:f6:65:d5:
         20:de:28:ef:20:c0:e1:1d:be:c1:b1:57:bf:c1:03:be:28:28:
         00:1c:db:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:17 2026 by rpki-client