This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
File:                     Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json)
Hash identifier:          hA83iO0ZZJlz6ntvRVFgtZbkKYO9D3Ce0NIRGuIhbtg=
Subject key identifier:   EF:64:31:2D:CA:3B:E1:D6:1C:94:5B:9F:63:66:70:3D:2A:B3:41:32
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Certificate issuer:       /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial:       019C44A2E2B5B78C8EA2086711DC03B49C8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
Manifest number:          14E5
Signing time:             Mon 09 Feb 2026 23:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:51 +0000
Files and hashes:         1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: 460klO/YPo8g2ebMKKaOdPNqlbZ+l4AyafzQFoAqevg=)
                          2: c9DEUEWEQPqrGgYUimiiQviSMgM.roa (hash: wakxrbqHUtPpN1M0QZFEdKnthWi1t40kvnk8QYdL7EU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:e2:b5:b7:8c:8e:a2:08:67:11:dc:03:b4:9c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
        Validity
            Not Before: Feb  9 23:00:51 2026 GMT
            Not After : Feb 10 23:00:51 2026 GMT
        Subject: CN=ef64312dca3be1d61c945b9f6366703d2ab34132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:5d:34:6d:47:11:16:14:06:f1:ae:8b:78:
                    1d:24:74:b2:81:e5:25:6c:c1:2b:3e:96:d8:6b:80:
                    f2:8b:3f:c6:ef:1f:a1:02:a2:65:85:de:64:75:a0:
                    a8:71:ee:ad:ad:45:22:f9:a4:8d:9e:59:ec:d5:48:
                    fb:7c:72:7e:8a:5e:9f:ac:bb:21:fa:d0:50:50:34:
                    cf:ca:12:84:52:fd:78:42:0f:aa:b0:8d:b1:af:0f:
                    43:f5:e7:6d:f9:ce:ce:c4:70:5c:50:5a:c7:3b:99:
                    e6:68:73:2f:82:95:92:75:23:db:63:d7:67:78:81:
                    cc:d7:70:c3:cf:45:7c:8d:37:e1:d2:24:9d:7c:1f:
                    fe:f6:76:b1:49:ad:38:22:43:34:87:47:ec:4c:71:
                    63:15:ef:25:20:c6:29:96:29:fc:a7:38:97:3c:e3:
                    34:fb:fb:0f:7a:55:dd:d3:5f:76:fc:55:6f:9e:c3:
                    b2:94:61:1d:37:f1:d9:b9:b4:e7:c5:4e:5c:ff:33:
                    99:68:5f:23:4a:6a:62:a9:b4:da:64:c9:0c:a7:3c:
                    3a:37:d1:b4:b4:95:bf:98:62:8b:f2:f1:97:aa:f4:
                    15:bc:f1:59:d0:69:ea:9c:27:70:eb:9a:49:55:b3:
                    fe:df:57:a8:9b:ef:78:6f:8c:0b:40:d4:88:f2:8f:
                    b0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:64:31:2D:CA:3B:E1:D6:1C:94:5B:9F:63:66:70:3D:2A:B3:41:32
            X509v3 Authority Key Identifier:
                keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:95:5f:c8:11:73:84:d5:1c:d8:3d:b5:7a:31:ca:f1:06:a9:
         36:39:04:c0:a9:d6:84:6b:3a:f2:a9:ad:e6:41:31:59:d0:77:
         32:6f:ba:d7:52:62:aa:b4:9b:ba:f1:9c:f5:2b:ca:d6:35:b7:
         8d:bc:16:e1:24:9e:a3:94:93:dd:23:8c:5c:84:ee:94:36:11:
         fc:d6:ee:38:af:6e:5a:9d:77:03:bd:e0:9a:59:28:c9:5b:c9:
         6d:f3:35:71:69:89:62:46:6e:e9:46:5c:90:14:83:db:72:ef:
         b8:81:ef:c1:1a:a0:b0:0a:58:5c:72:49:2f:ae:e9:95:31:10:
         34:b3:ad:80:a9:2e:ee:24:da:ce:98:72:37:1d:64:ab:f4:0b:
         7f:be:d6:b4:a1:71:14:c3:95:6c:17:0b:ed:58:96:75:78:72:
         c2:16:bd:91:80:10:ce:33:b9:d5:e6:6e:56:7a:3a:e5:bd:f2:
         e6:9d:a5:02:71:a9:4a:6c:0b:e6:7f:09:88:e0:3d:1d:79:7e:
         d9:97:1c:7f:d1:de:87:42:0c:56:45:16:4b:04:a0:eb:e7:b8:
         8d:6b:e2:1a:0b:a0:30:1c:17:45:39:74:e8:d4:e1:ab:41:98:
         b9:95:fb:77:5f:87:92:1c:29:16:25:fa:bd:02:d3:e0:7c:e0:
         2d:65:0e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:38:44 2026 by rpki-client