This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
File:                     lISBYokoMa3VoH1DAuf8__UvAv0.mft (raw, json)
Hash identifier:          0Gg2ChkXyxP1E2qK+9W86jNSd0KfnlzvhGqqNOPKOf4=
Subject key identifier:   72:FD:D8:8C:99:F6:EB:12:1E:DB:BB:46:C0:EA:CD:AE:F9:31:EE:10
Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
Certificate issuer:       /CN=94848162892831add5a07d4302e7fcfff52f02fd
Certificate serial:       019C41A1B0DA24600360B4278C7CB79EFD6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
Manifest number:          1080
Signing time:             Mon 09 Feb 2026 09:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:41 +0000
Files and hashes:         1: XZmCghwXS5uO6-nI0o-431gsq24.roa (hash: GdgInPSubyNcuUo9FhLcvzIGt3WuqRSexXnkp42MAmI=)
                          2: lISBYokoMa3VoH1DAuf8__UvAv0.crl (hash: HFzlrS4DRx4IXJA103QlBQx7MpdEKcmreFGwPCz3yys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:b0:da:24:60:03:60:b4:27:8c:7c:b7:9e:fd:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd
        Validity
            Not Before: Feb  9 09:00:41 2026 GMT
            Not After : Feb 10 09:00:41 2026 GMT
        Subject: CN=72fdd88c99f6eb121edbbb46c0eacdaef931ee10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:93:d4:1c:9f:e2:a3:62:54:ce:54:c4:79:d2:
                    d9:55:34:97:f9:af:29:45:d9:81:58:60:92:25:61:
                    f4:8e:b6:c8:20:a4:15:94:41:12:36:eb:7b:96:60:
                    45:c7:f5:c8:46:1b:9f:ea:50:a2:7a:4a:fb:91:42:
                    1f:e2:fe:5b:64:03:1a:95:42:39:04:df:87:52:74:
                    f6:33:6f:3f:b8:0b:64:12:8b:f9:4e:f8:20:44:12:
                    9b:98:9a:83:b0:dd:ce:d3:5d:64:7a:d4:6d:cb:8b:
                    b2:7e:be:1b:8a:16:72:4a:dc:c9:9f:a2:55:36:95:
                    49:03:0f:30:9b:1a:04:0c:1e:8b:63:40:06:fe:0d:
                    2f:2e:df:d2:87:78:c7:0c:e0:31:53:10:12:e4:6b:
                    26:f9:a2:e7:fd:bf:09:4f:65:85:88:85:b9:28:f1:
                    f2:94:97:72:f3:36:85:22:6d:c2:29:07:af:c8:0e:
                    c2:9b:c9:17:8c:72:8f:7a:31:ee:63:7b:d0:b0:fe:
                    17:a0:b3:70:d6:d7:4f:b1:9a:78:e5:bc:03:4c:83:
                    1a:06:e2:1a:7c:ef:cd:8c:c0:41:49:ce:46:d7:3f:
                    bb:5e:c8:88:99:4b:d9:9d:29:d2:fc:a3:ca:d1:13:
                    a1:22:58:61:01:ad:f5:ec:ef:37:c8:c4:f1:c8:7d:
                    f1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FD:D8:8C:99:F6:EB:12:1E:DB:BB:46:C0:EA:CD:AE:F9:31:EE:10
            X509v3 Authority Key Identifier:
                keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:cc:ed:2a:88:1f:56:48:fc:8e:27:f1:7d:ef:15:bd:15:46:
         fe:3e:82:00:10:b1:41:03:15:1d:83:70:a5:4a:7b:ab:31:f3:
         ad:16:9f:d5:ea:af:2a:cb:3a:f3:dd:4e:af:1a:0b:f3:8e:98:
         91:a9:eb:7b:cf:3f:e9:58:6a:f6:b8:6b:9f:53:da:fc:97:e8:
         6f:aa:c1:e3:bb:1a:11:44:81:97:91:90:5b:20:f0:bf:a2:aa:
         91:04:32:7a:a2:15:16:7b:49:64:cb:7a:b3:78:07:a7:3a:4b:
         94:9d:f8:c9:ac:a3:fa:92:ee:f0:71:52:07:c8:46:a6:11:8e:
         8f:18:28:b6:f7:e2:cd:9f:58:62:c0:97:15:6f:00:f8:b9:ab:
         ed:40:09:9f:1d:7a:07:23:2d:f5:32:2d:83:41:79:34:25:fc:
         27:d2:36:73:c5:79:8c:e4:8b:fa:11:72:da:38:02:34:df:30:
         3d:3b:b5:2c:e2:03:43:29:b4:1b:8a:78:c0:c3:49:3f:db:eb:
         87:99:22:de:b7:9c:f3:cc:a2:c4:46:81:fc:49:2f:f3:52:ac:
         b0:2e:88:c9:39:8d:6f:5b:a0:4c:cd:95:df:de:98:57:09:f0:
         f5:52:e9:82:fe:a9:4d:53:95:7e:d3:7a:fa:ce:f5:23:11:da:
         7a:9f:92:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:04 2026 by rpki-client