This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
File:                     itkoGq_vyDda2LS35gSJlVWVIjc.mft (raw, json)
Hash identifier:          Ci9hXLs4CjlkRtELXrfI0RpOXN3uRxpHzxUINiBcOAg=
Subject key identifier:   92:D9:4E:BB:19:B7:E7:C5:BB:0A:B3:1A:87:4B:33:E1:13:80:E1:0D
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Certificate issuer:       /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial:       019C4210101908FE58BE31CA26C57037ABB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 11:01:14 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:14 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:14 +0000
Files and hashes:         1: 3ysBshLGfFUkO4R9WFntyTKDLJg.roa (hash: o/4zJLtevorj8ig3Iu9MQ3MlmidPOIfdoU+Dc49NbUo=)
                          2: JS2489mFlOi4G0Iaxj0mdnNLk0A.roa (hash: yqQYhDx3bWMCxWl1C8xz31VqFsDsZivemXD/7Ay6NE4=)
                          3: KrSk2jRU2oEHfGvgx800e5GKxhA.roa (hash: Kyx+62+FYOcUJqo2tHJtaKxWwFEQu2NCl98mkWMufAs=)
                          4: RMVjby5XmGEGFEWAsZ-rMJCgUuI.roa (hash: 8V+ZY4rClYbDacZGSf5P4gTGWDrq9UPHV6tcofi/O1Q=)
                          5: TQRQUvnH1PO5qcuLM2kiPL408f4.roa (hash: 1Z+GYULrtYzOcdfSIr9RZ1XILJVYjGdvmENAEPPng/M=)
                          6: itkoGq_vyDda2LS35gSJlVWVIjc.crl (hash: /Eg8cx3wXtnpunlxGPa1vH9G04VE+HHnqad9VE6roqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:10:19:08:fe:58:be:31:ca:26:c5:70:37:ab:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
        Validity
            Not Before: Feb  9 11:01:14 2026 GMT
            Not After : Feb 10 11:01:14 2026 GMT
        Subject: CN=92d94ebb19b7e7c5bb0ab31a874b33e11380e10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:fc:f9:80:df:e2:4f:6b:92:f8:3d:43:6c:
                    4b:e4:89:29:08:33:e6:49:da:24:98:57:85:c3:26:
                    6f:e6:db:78:e2:81:98:ec:08:84:e2:c6:32:98:cb:
                    83:8b:35:cc:f5:cf:67:eb:fb:03:a1:9f:20:b5:ff:
                    7e:ba:61:ea:e2:82:56:e1:38:76:1e:48:62:31:4b:
                    fb:cc:02:57:27:4a:98:bd:c2:68:96:25:1e:cd:af:
                    b6:3d:22:3d:11:14:b5:4f:27:ad:88:3f:e7:39:98:
                    87:46:a5:71:ea:02:5b:3d:29:ab:c2:45:28:fb:fb:
                    79:2e:49:14:24:de:0f:a4:3a:39:c1:ab:fb:2f:25:
                    e6:3c:c8:b8:d7:c9:1d:02:b7:14:ce:0a:8b:0c:5c:
                    f3:b2:2f:c0:78:30:5a:db:4f:ea:39:e2:56:21:65:
                    52:e2:5d:ff:05:ab:03:56:47:c4:ef:20:76:0c:fa:
                    15:a5:99:70:e0:8f:36:99:bf:df:e5:11:55:50:5d:
                    c3:47:63:61:66:c6:ea:db:e9:c4:e1:77:41:5b:fa:
                    df:84:bc:53:08:f9:38:69:ea:b4:17:69:f0:cc:ab:
                    01:8d:35:d3:e5:96:80:1a:e6:49:3f:e3:e3:c8:00:
                    e6:a2:52:a2:ae:26:71:c5:8d:dc:dc:cf:0b:7c:45:
                    04:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D9:4E:BB:19:B7:E7:C5:BB:0A:B3:1A:87:4B:33:E1:13:80:E1:0D
            X509v3 Authority Key Identifier:
                keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c4:9f:33:61:71:ce:51:e5:65:ac:8c:46:4d:69:41:03:6d:
         3f:d7:0c:8a:80:91:29:73:0e:c7:8c:22:e0:a9:0e:06:62:90:
         05:74:28:bf:fa:3f:ee:3f:e8:c0:14:f4:db:0a:bf:8e:e1:68:
         e3:ee:75:2e:0f:e3:a6:d0:9d:a2:ec:9c:3d:d1:f0:09:6c:25:
         9f:83:48:18:c4:61:cb:7a:b1:21:26:45:9d:2f:3a:21:de:2d:
         3f:d6:17:03:bd:cc:0c:2e:b2:39:b4:83:4f:21:a4:17:b5:93:
         77:4d:0a:d3:1f:36:ab:d5:db:2f:08:03:d2:98:c2:05:55:10:
         e7:8e:75:d0:b6:95:33:d3:6f:ef:3d:09:0d:71:b9:9f:32:f2:
         fe:c4:ee:a2:84:96:de:1c:10:1a:91:e6:08:d6:e8:e9:b4:32:
         21:71:09:4d:c9:b8:c7:b2:dd:68:dd:78:5a:0a:1f:fa:d0:e6:
         e7:98:89:48:cf:62:67:21:50:3c:cc:70:13:63:49:57:73:c2:
         3d:58:d4:24:51:96:66:3b:c4:99:24:81:98:fe:b8:91:85:c1:
         4c:cd:af:4a:2a:db:5a:ec:31:18:76:64:b7:eb:a3:f7:48:a4:
         04:64:02:c2:77:76:db:f2:6b:b9:f8:7e:06:df:49:a3:b0:7d:
         46:6a:b5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:36 2026 by rpki-client