This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
File:                     IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft (raw, json)
Hash identifier:          y4npVbSIg31ZmWMKUFfebZozWARV3DVEWujpRCJhGVA=
Subject key identifier:   FC:8B:25:BE:96:4E:2C:75:92:DB:3B:8C:37:E5:23:BA:05:48:5B:76
Authority key identifier: 23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4
Certificate issuer:       /CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
Certificate serial:       019C416B1002A7599BF6966D00E00A8984BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
Manifest number:          0743
Signing time:             Mon 09 Feb 2026 08:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 08:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 08:01:01 +0000
Files and hashes:         1: IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl (hash: KCcl8Bcq1W4+o42/9i3DO+3yx+koQpFYyKQxmFcDGlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6b:10:02:a7:59:9b:f6:96:6d:00:e0:0a:89:84:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
        Validity
            Not Before: Feb  9 08:01:01 2026 GMT
            Not After : Feb 10 08:01:01 2026 GMT
        Subject: CN=fc8b25be964e2c7592db3b8c37e523ba05485b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:f5:1a:89:c3:e2:c7:3d:00:f5:56:03:e8:
                    d8:3c:b1:5a:7f:56:09:44:9e:8d:79:44:32:16:9f:
                    af:71:d6:c1:12:72:c6:e7:f0:5e:e2:c7:ae:84:11:
                    3e:b7:4a:ec:89:7c:b6:46:af:c3:ab:35:89:3b:01:
                    fe:e7:3b:3e:43:df:78:69:54:14:15:6b:db:6e:44:
                    78:cd:bd:cb:93:c5:23:cf:9c:bb:3c:45:2a:e7:ad:
                    ce:64:cc:a4:be:be:97:4d:cc:aa:3a:7a:e7:8a:11:
                    cf:55:79:85:37:bb:8b:ab:47:77:eb:c1:41:ed:a1:
                    5a:e8:b1:3f:00:11:31:48:56:25:dd:87:01:7f:b5:
                    fe:a3:14:7e:f1:8d:03:a4:bc:59:39:92:b6:ba:39:
                    61:47:fc:26:5d:c8:9a:14:a0:b3:2c:1c:1a:73:c2:
                    65:db:a0:36:39:a1:b1:73:4d:b4:17:17:a3:0b:5b:
                    c7:12:3d:3f:9b:9a:7c:4e:c4:7b:85:dd:70:17:3f:
                    b6:31:c4:cc:02:03:e0:85:81:4d:68:bc:43:22:d8:
                    0e:f1:27:2b:3e:7c:53:1b:35:fd:ad:f5:3b:51:6d:
                    38:77:3b:4c:5e:fd:d3:c7:8d:a2:06:45:4b:d1:c5:
                    4f:e7:e5:33:84:cc:e7:5a:e6:c3:7f:1d:20:ec:40:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8B:25:BE:96:4E:2C:75:92:DB:3B:8C:37:E5:23:BA:05:48:5B:76
            X509v3 Authority Key Identifier:
                keyid:23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:26:46:4f:ee:11:89:b2:eb:6e:38:07:84:cb:23:3a:aa:b1:
         33:39:79:71:e0:34:3a:09:ab:f7:70:f6:61:19:df:8e:54:5b:
         38:af:2a:3e:81:1b:fb:57:04:2d:db:be:81:d2:33:5e:91:64:
         14:dc:49:7c:85:42:7d:eb:e9:bc:1a:57:2c:22:00:b1:b8:e6:
         99:1d:6b:87:16:21:38:7b:78:1c:f4:40:69:a4:7f:d6:f4:fa:
         98:1b:b2:a9:fa:7b:e1:02:af:e5:88:26:2b:8b:e2:9c:a9:7f:
         a4:24:57:38:b1:c9:ad:c6:9f:ae:2f:ee:24:33:46:86:3b:e4:
         98:46:20:09:52:b6:17:1e:93:7c:e3:e6:d3:4e:42:52:e9:6b:
         d6:80:78:93:86:11:6c:c2:09:6f:3d:f6:f1:59:f4:d0:b8:49:
         ff:eb:c4:40:3c:19:fa:2f:17:02:37:99:8f:5c:92:8f:74:e5:
         6d:57:b4:13:7a:83:58:cf:9c:28:0b:21:08:d5:6b:03:95:ec:
         8c:bc:8e:80:1d:53:b7:1a:4b:24:74:2a:32:9b:c1:a5:7e:67:
         2a:40:59:33:87:30:fc:45:e5:d7:1e:9b:6a:77:2d:0b:e6:18:
         07:3b:30:73:40:be:38:98:c8:b5:23:40:7d:1d:7c:24:5f:b3:
         3c:b5:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:39 2026 by rpki-client