This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File:                     Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier:          ajZHeiLIP3CWWvYLlUOwg/U0Zt5b0zZ6ZBGXc5BKU9c=
Subject key identifier:   B9:59:ED:E6:B9:01:A8:65:8C:0F:3E:00:24:A3:C2:93:AB:5B:D9:E4
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer:       /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial:       019C2D3F570A5F9B7F8A478A46CAE65D908D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number:          149A
Signing time:             Thu 05 Feb 2026 10:00:51 +0000
Manifest this update:     Thu 05 Feb 2026 10:00:51 +0000
Manifest next update:     Fri 06 Feb 2026 10:00:51 +0000
Files and hashes:         1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: Z8bhq9OWeNV0Zg3hU0EFcVEU3Fg/MOkzDBxSnFX0X9k=)
                          2: Jc3bkiFIpTCnI7iepJAdAbekabs.roa (hash: NwsftHfqSo5igUnmJFDaLhMgga9JlSbY/WwsognqQyI=)
                          3: e3q1V2fD2QBr302Nmb_jtOVn5-M.roa (hash: kNGhLH15D9N/CBFSD4P6hJtpDjbOe8kg0SMmM1H5/j0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 10:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2d:3f:57:0a:5f:9b:7f:8a:47:8a:46:ca:e6:5d:90:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
        Validity
            Not Before: Feb  5 10:00:51 2026 GMT
            Not After : Feb  6 10:00:51 2026 GMT
        Subject: CN=b959ede6b901a8658c0f3e0024a3c293ab5bd9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:bb:f2:df:0a:df:92:90:5d:fb:02:e8:49:
                    e0:53:66:ae:d2:a0:39:22:32:ae:aa:8a:9b:1a:a0:
                    02:14:c4:79:57:3d:8b:7f:1c:83:a2:57:60:ce:50:
                    ab:76:01:b6:b7:fd:6d:cf:c5:71:74:50:72:05:93:
                    c7:38:f3:0b:5a:d4:a6:07:46:5b:69:e8:00:f1:18:
                    cc:dd:75:cb:04:28:4d:94:a6:8c:c0:fb:5b:ae:a9:
                    1b:07:0f:fc:59:74:f3:d0:24:60:77:34:00:54:34:
                    82:9f:a0:e6:bf:e1:65:94:93:b8:18:42:e5:a5:25:
                    de:24:7f:9b:e2:04:91:b2:7b:ed:20:bf:40:ec:0d:
                    f7:db:77:27:4b:19:7f:0a:2b:54:4f:fa:33:d9:5d:
                    93:69:21:6a:0f:f9:a5:37:4e:1c:c1:7a:92:b4:5c:
                    cb:a8:d1:a5:b7:80:c9:38:ed:77:ac:e4:56:10:18:
                    29:b1:ec:37:89:b7:61:f1:55:84:7a:f7:e6:4e:91:
                    0e:5b:7f:3f:7e:89:8a:0a:2a:00:a3:c8:5a:4f:f9:
                    cb:d4:16:1b:f2:5d:d1:c9:12:d1:85:3a:b4:55:ea:
                    8a:d2:a7:d9:f5:db:a3:46:23:e0:e1:49:89:78:8f:
                    6a:6e:49:29:7d:ea:3b:ba:f5:0f:46:ce:01:a3:6c:
                    7c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:59:ED:E6:B9:01:A8:65:8C:0F:3E:00:24:A3:C2:93:AB:5B:D9:E4
            X509v3 Authority Key Identifier:
                keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:03:b8:f6:2d:74:3d:4b:5e:d1:c5:58:dc:81:e6:fa:8d:90:
         49:c2:75:d4:27:db:59:d0:67:c7:af:58:fc:c1:4e:4d:f7:9b:
         ba:d6:c7:a1:88:98:9e:fe:73:1a:79:5d:67:20:c8:7e:53:c5:
         d8:f4:c3:1a:48:1e:c8:e0:74:b9:94:1d:a5:89:4f:2b:41:19:
         0b:be:04:7e:00:1c:76:0b:23:40:2e:6a:33:41:43:b7:db:7a:
         52:44:05:97:65:1f:80:2d:94:56:0a:48:f7:8f:81:27:d1:dc:
         8c:8c:46:02:4e:22:98:76:13:db:0f:4e:33:4b:e5:fb:f1:f5:
         37:21:f2:c9:cc:20:2f:9d:25:21:57:68:b5:f8:9d:05:64:3a:
         ec:e0:4b:b2:4d:f4:5f:2e:61:cc:21:ff:f6:16:e7:87:1b:b9:
         88:29:68:c9:4b:83:c1:19:70:a6:12:da:09:ee:ab:2c:d7:0b:
         1d:1e:5a:19:f6:ba:76:79:33:f7:be:52:a8:d7:90:f0:2e:3c:
         d2:ab:4f:1b:56:32:f2:b1:8a:58:83:31:8b:93:b3:9b:2c:61:
         71:49:3e:c1:11:ff:c4:a2:4e:64:cc:22:d0:da:20:00:4e:c9:
         7d:2f:64:07:46:79:12:97:db:7d:03:d6:f8:e0:b8:91:86:ff:
         8e:61:64:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwtP1cKX5t/ikeKRsrmXZCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGU5YWM2NDUxMGZhMzkxODQ2YmIxMzlhYjUyYjgwMDFk
NTgwMzgwHhcNMjYwMjA1MTAwMDUxWhcNMjYwMjA2MTAwMDUxWjAzMTEwLwYDVQQD
EyhiOTU5ZWRlNmI5MDFhODY1OGMwZjNlMDAyNGEzYzI5M2FiNWJkOWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuka78t8K35KQXfsC6EngU2au0qA5
IjKuqoqbGqACFMR5Vz2LfxyDoldgzlCrdgG2t/1tz8VxdFByBZPHOPMLWtSmB0Zb
aegA8RjM3XXLBChNlKaMwPtbrqkbBw/8WXTz0CRgdzQAVDSCn6Dmv+FllJO4GELl
pSXeJH+b4gSRsnvtIL9A7A3323cnSxl/CitUT/oz2V2TaSFqD/mlN04cwXqStFzL
qNGlt4DJOO13rORWEBgpsew3ibdh8VWEevfmTpEOW38/fomKCioAo8haT/nL1BYb
8l3RyRLRhTq0VeqK0qfZ9dujRiPg4UmJeI9qbkkpfeo7uvUPRs4Bo2x83wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlZ7ea5AahljA8+ACSjwpOrW9nkMB8GA1UdIwQY
MBaAFCMOmsZFEPo5GEa7E5q1K4AB1YA4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXc2YXhrVVEtamtZUnJzVG1yVXJnQUhWZ0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTY4ZTgtNTE1Ny00NmI2LWI1ODQt
ZWE5MmQ4MGFiMTg4LzEvSXc2YXhrVVEtamtZUnJzVG1yVXJnQUhWZ0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYTY4ZTgtNTE1Ny00NmI2LWI1ODQtZWE5MmQ4MGFiMTg4
LzEvSXc2YXhrVVEtamtZUnJzVG1yVXJnQUhWZ0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwAO49i10
PUte0cVY3IHm+o2QScJ11CfbWdBnx69Y/MFOTfebutbHoYiYnv5zGnldZyDIflPF
2PTDGkgeyOB0uZQdpYlPK0EZC74EfgAcdgsjQC5qM0FDt9t6UkQFl2UfgC2UVgpI
94+BJ9HcjIxGAk4imHYT2w9OM0vl+/H1NyHyycwgL50lIVdotfidBWQ67OBLsk30
Xy5hzCH/9hbnhxu5iCloyUuDwRlwphLaCe6rLNcLHR5aGfa6dnkz975SqNeQ8C48
0qtPG1Yy8rGKWIMxi5OzmyxhcUk+wRH/xKJOZMwi0NogAE7JfS9kB0Z5EpfbfQPW
+OC4kYb/jmFkFw==
-----END CERTIFICATE-----
Generated at Thu Feb 5 19:47:56 2026 by rpki-client