This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File:                     IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier:          2hMQFsZ2mOxnl8fviFz5sTUrHYUaJQCh3O2j1iRdcxA=
Subject key identifier:   8A:4F:F1:AC:EB:9C:6E:C2:27:55:FB:1E:3F:C4:28:66:CF:B0:08:72
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer:       /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial:       019C41D8F3109F8BF5E2A00E36624B382EBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number:          181E
Signing time:             Mon 09 Feb 2026 10:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 10:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 10:01:02 +0000
Files and hashes:         1: 5qHp_Qvizx1e_r_vv8Me8swsJF0.roa (hash: EVdPpBQJMJNTi09VFkHGGdZrOzkZ9IM2pChk9wVwdDA=)
                          2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: /uvW7mRzTXFAMaLeZv5VJEu/aVNGF6/bce6TWTm2yZk=)
                          3: nWANyekwMN1ajseL7l03yPyYN6o.roa (hash: J50Y1+ShAOFy3i/le2uIAvMIPMam//PGPnyLFegYOaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:f3:10:9f:8b:f5:e2:a0:0e:36:62:4b:38:2e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
        Validity
            Not Before: Feb  9 10:01:02 2026 GMT
            Not After : Feb 10 10:01:02 2026 GMT
        Subject: CN=8a4ff1aceb9c6ec22755fb1e3fc42866cfb00872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:66:69:8e:7e:0e:65:67:9d:ba:4e:42:b1:
                    ea:94:9c:cd:73:de:7b:a3:ee:23:46:1c:63:74:84:
                    80:ab:c8:f2:d9:ef:bd:0b:64:97:f7:d6:b1:a5:fb:
                    f1:6f:43:6f:4a:36:45:64:d9:6b:0f:80:49:4c:a2:
                    35:f7:bd:05:b1:7f:96:34:0d:22:4d:35:a6:28:80:
                    1e:6e:c5:8a:ea:7d:2d:67:01:87:b4:c3:72:df:cc:
                    2e:6e:a1:31:05:b8:2a:4e:bb:84:1c:d3:5f:d1:8d:
                    48:84:15:06:c6:9f:d5:af:8b:31:5e:00:c3:6f:49:
                    57:b0:40:03:f1:73:0c:30:80:50:49:9a:61:bb:ca:
                    b3:e2:9e:76:23:8d:92:4c:d0:d8:5a:72:3f:77:46:
                    4a:c9:06:ae:83:4f:45:e4:2f:91:b5:f2:6a:c0:41:
                    b5:22:7c:1f:ed:a1:a2:d9:9b:b4:60:30:47:4f:07:
                    ae:a2:66:74:e4:fe:a1:17:48:16:91:07:00:c3:33:
                    d4:f0:14:b2:5a:df:61:f1:ad:a4:43:a6:56:88:d7:
                    26:5e:1b:fe:eb:8d:c0:3f:e9:19:ef:b1:d3:79:35:
                    70:d0:92:d4:75:7d:5f:d6:3d:fc:32:db:2a:40:49:
                    a0:0d:d8:d5:97:4c:c5:d0:bd:da:e8:bc:39:fd:7f:
                    8c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4F:F1:AC:EB:9C:6E:C2:27:55:FB:1E:3F:C4:28:66:CF:B0:08:72
            X509v3 Authority Key Identifier:
                keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:de:8c:12:49:00:a1:94:4d:82:d2:1a:08:a6:a6:e1:2c:38:
         25:c5:e2:13:f4:61:70:28:88:9b:1b:9c:df:d6:20:f2:c1:91:
         30:41:b9:ee:3c:8a:20:25:4c:30:74:9c:04:1f:62:d1:b5:7a:
         34:b5:8a:d5:05:c3:37:29:1f:bc:44:33:20:df:42:69:75:93:
         4f:b7:d2:48:67:df:91:c7:e7:46:a2:f4:ff:ea:c4:01:32:51:
         91:bd:80:c1:d2:ab:f0:9f:ab:ee:7b:f1:83:ac:b0:ad:85:b8:
         34:1d:3d:06:bd:da:84:77:37:2a:81:79:fe:a8:8c:5f:e8:b1:
         15:de:f9:90:bf:31:38:b8:cc:bb:dc:65:f4:a4:5b:83:05:cb:
         3c:73:08:c2:b9:df:75:2e:b8:98:c1:c4:b2:5e:cb:c6:19:a0:
         82:06:4b:18:de:0e:fb:c2:91:1f:21:f5:73:f2:bd:ca:37:b5:
         b6:a3:c4:48:6f:7e:14:6f:ae:f8:27:c0:66:28:ac:12:b0:f1:
         1a:db:6d:3b:53:52:cf:97:40:ca:a7:4c:b0:da:1c:df:05:66:
         31:e1:6f:fd:52:d7:87:05:2e:42:30:db:0f:fa:29:82:65:60:
         9e:7a:17:b6:d0:90:81:7e:d0:23:58:7f:60:5c:0f:00:e2:41:
         9f:d9:3e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:14 2026 by rpki-client