This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File:                     I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier:          Lp0uXHlNN4YdJOsFYQrWYowIuw1E+cRLpZJlx+gpg7I=
Subject key identifier:   D1:BE:24:AF:CE:BD:34:98:2B:FA:52:31:F3:9E:04:2C:18:42:56:60
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer:       /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial:       019C416A7EAABE46B68610C7406189201900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 08:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:24 +0000
Files and hashes:         1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: BqUC1iDUBfWfvEfNWBACoR0Oe7egSTvKCa3057IPNdc=)
                          2: di7BBo89yLvPzYRgI1CnXRkGKek.roa (hash: J2fGlbJBwYkKOrpnLxq93QttJnUWfvQ1tz5acXy/Cg8=)
                          3: jkcDTDZLfkPzj9uIRYp8UTnhwQI.roa (hash: uJEOU0bJFwdOC2+0d4gL/okHKs1T55lvZjr01PdnJqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:7e:aa:be:46:b6:86:10:c7:40:61:89:20:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
        Validity
            Not Before: Feb  9 08:00:24 2026 GMT
            Not After : Feb 10 08:00:24 2026 GMT
        Subject: CN=d1be24afcebd34982bfa5231f39e042c18425660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:f3:30:bf:0c:35:5e:74:fd:b6:cb:ee:ed:
                    aa:92:6e:dc:84:10:cc:ab:db:a5:fc:60:8b:75:ee:
                    68:36:a6:e1:25:f5:04:e7:c0:b7:71:20:1a:98:e2:
                    6f:4f:c2:10:34:12:ae:19:a6:7a:66:0f:ac:24:a4:
                    ec:6b:10:b6:63:e4:e7:e7:56:a3:d2:d7:ec:45:6a:
                    c7:90:31:36:5b:51:2b:88:8c:ad:d4:4f:eb:e9:59:
                    af:4c:c9:f2:d4:14:f8:28:ae:0e:56:0e:33:e9:ec:
                    20:98:db:6e:b7:d7:25:40:b4:79:ea:fc:f8:0d:ea:
                    62:28:2c:c6:6d:65:c9:59:d3:82:82:16:cf:d4:12:
                    f1:27:53:a7:c0:da:4e:ea:45:6b:1a:3c:02:be:70:
                    6b:81:51:cc:39:28:52:64:26:9c:2b:32:19:a8:96:
                    bc:f4:05:da:ec:07:96:1a:de:cc:f7:b3:35:b8:0a:
                    8d:91:d2:c4:f5:26:96:99:91:6d:98:f4:93:6d:51:
                    a8:63:e0:41:ff:4d:45:58:03:20:9c:7d:6f:3c:45:
                    85:ec:f7:a5:6d:ff:fc:84:4d:d3:f5:af:4a:f4:de:
                    a8:8d:5e:c4:f8:06:f5:fc:7b:66:c9:88:21:e6:d1:
                    28:36:53:3b:46:7c:6a:e4:8a:cd:97:51:52:63:60:
                    ac:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BE:24:AF:CE:BD:34:98:2B:FA:52:31:F3:9E:04:2C:18:42:56:60
            X509v3 Authority Key Identifier:
                keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0f:79:3e:0a:6f:e9:52:60:95:d6:ca:28:1c:53:f5:7d:1f:
         78:80:33:1b:0e:48:ea:3c:e5:21:8f:03:b7:56:4d:a0:18:51:
         3b:1e:05:de:aa:71:dc:39:64:a4:ae:67:6d:ab:20:32:f2:d4:
         07:2a:f9:28:eb:c3:0c:3b:94:2d:e9:4a:17:d2:29:9f:2e:f2:
         50:33:f2:b9:0d:a7:d8:24:b6:f0:01:aa:e2:7a:a6:8a:5d:a0:
         c7:38:34:37:84:a3:e3:bc:cd:e5:a1:62:0e:b9:de:35:30:e9:
         44:97:c9:43:96:09:56:e9:23:e1:4e:f1:b4:1c:c1:b3:3e:7f:
         1a:1a:36:a9:f7:72:36:be:24:96:35:c1:1f:73:a5:ea:10:72:
         4e:74:69:2a:9e:9e:f6:df:2d:0f:b0:0a:3c:67:ac:f9:04:04:
         ff:21:79:49:49:e3:f5:53:2f:89:72:46:da:52:24:1b:cc:a4:
         24:0f:91:c6:71:2d:0e:17:ce:57:d5:ed:6e:3d:d2:27:30:e0:
         81:5e:18:ea:74:34:a3:6a:9d:ab:a5:cc:4f:e6:89:ad:ca:37:
         92:c0:1f:3f:6a:13:ad:ac:3d:b6:fc:fa:e8:f6:4d:ce:c6:42:
         7d:00:67:5f:54:29:92:38:0a:5e:83:10:4d:ae:83:5a:62:d5:
         42:72:0b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:05 2026 by rpki-client