This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
File:                     I3ikqcUjJahZIICboaTYniHALxc.mft (raw, json)
Hash identifier:          /nVWhAq9KJY5kltXKaA33LyKgUKT0cMI3Q4nq6QOR/A=
Subject key identifier:   7D:56:65:B6:66:42:92:C0:24:91:6D:AD:E2:DF:8B:D2:C4:14:94:1C
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Certificate issuer:       /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial:       019C43FDCB67B050D11407E9C67C8FAC1FC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
Manifest number:          1560
Signing time:             Mon 09 Feb 2026 20:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:32 +0000
Files and hashes:         1: E6053yR1CqVaJr7LtSIy8wHoaGg.roa (hash: YpgpJxbI9F9bF2mcDpVeWkbBTRfl6cIoKyEc+QXfAaA=)
                          2: I3ikqcUjJahZIICboaTYniHALxc.crl (hash: 0KUlB+/oPmOI+4H9o/JU2F3QLmhGzeVKBjGm7rJiM8c=)
                          3: VdgeZDIeVNPfFDruPnZ1hu3S9e0.roa (hash: Qq2NngHafLIvO2R0hWPLxLIlO+UaWWV0xfhSeKiG+84=)
                          4: WfRMYNgnDvdxhv_OgYStuN6FqCQ.roa (hash: uHLuQi8KJbVs5VqNtZkcp+fIJy6HLJbaJ1btjtIY4cM=)
                          5: XgZUWF_JY2HTJzbvU6Cnd5y6OTQ.roa (hash: xDb3dtwGlNAHcmXCM8UYUqhwZfzy/vemU3ULkTqFlkw=)
                          6: vfUbYO5TjUkdIqbIG77eYeU-n-U.roa (hash: 0e4c1Mw99PsTD71HBuC9Z/Vb3JqYveh6VUI81e17S8s=)
                          7: vvUMzJMS3YN2PdWIsXTg73pWUMU.roa (hash: jqHmBZCizBRZOJ6dgt21LSpJ/Vl6QvBloIY8Xls6yuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:cb:67:b0:50:d1:14:07:e9:c6:7c:8f:ac:1f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
        Validity
            Not Before: Feb  9 20:00:32 2026 GMT
            Not After : Feb 10 20:00:32 2026 GMT
        Subject: CN=7d5665b6664292c024916dade2df8bd2c414941c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:a7:b2:26:3f:8b:5f:2d:16:d2:77:8d:ce:
                    ed:01:35:81:b9:33:2b:d9:b8:9c:0e:03:21:1a:04:
                    46:26:f8:39:46:0d:43:6c:7a:7c:83:af:2d:30:8b:
                    34:ba:be:7c:cc:31:6d:d3:d0:3c:68:6d:4b:56:26:
                    1e:92:07:3e:0c:45:f2:95:dd:75:5b:9a:55:78:dd:
                    b2:c7:9e:4f:d2:21:ed:61:6e:fc:0f:b3:1a:5c:11:
                    0e:a5:81:63:36:ec:46:f6:b7:96:92:eb:ca:f3:dc:
                    da:ed:46:ab:37:09:08:fa:8c:7e:03:cd:f5:bf:7d:
                    23:f8:59:eb:4a:30:8e:c4:d9:57:96:5c:41:d1:22:
                    a8:c5:88:7e:e9:b5:4a:2b:f7:48:a7:f4:e8:ea:54:
                    41:a6:93:b1:19:66:bd:7f:23:8e:f3:ae:26:ab:7f:
                    a0:39:36:2d:be:e9:8f:39:f9:a0:0f:4f:e5:af:5c:
                    89:34:2f:bb:2c:f0:eb:9e:ae:41:66:ae:26:5b:55:
                    eb:66:2a:74:fe:9a:f4:c8:99:5c:57:22:48:e6:8c:
                    aa:91:a8:a9:35:6d:8f:0e:6f:d0:7d:8d:e7:72:87:
                    d5:d2:51:e7:90:c2:a9:82:4b:75:62:69:7f:9a:79:
                    ed:92:d9:3a:40:2c:24:82:b5:9b:d5:0b:29:8d:42:
                    ab:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:56:65:B6:66:42:92:C0:24:91:6D:AD:E2:DF:8B:D2:C4:14:94:1C
            X509v3 Authority Key Identifier:
                keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:f6:14:7a:85:25:77:ea:85:40:b3:d5:55:d1:09:40:52:72:
         f0:3a:94:c7:24:c9:dd:54:b3:07:5f:db:3e:6d:a1:6c:dd:ba:
         63:e2:a1:53:a9:8e:6a:5d:f1:67:7c:d2:0e:67:af:cc:2f:16:
         c7:5f:e2:ff:dc:55:9e:10:07:ea:d9:f5:19:d9:4f:e8:96:5f:
         4a:ad:c4:24:4c:58:22:17:70:d5:40:20:c8:b5:7a:5f:9a:b5:
         a6:32:5b:f1:d4:72:14:ca:c5:1e:4d:03:31:11:22:7c:4b:71:
         8a:95:cf:2a:9c:0f:eb:02:a4:25:4b:05:8d:2d:64:33:a1:a2:
         91:dc:bc:17:dc:12:99:76:ef:97:91:73:c2:6a:56:de:20:17:
         25:57:79:5d:50:b2:11:52:53:7f:33:77:ce:47:b3:83:e2:c7:
         af:95:1a:2a:b1:99:19:96:7a:bd:d5:9b:65:d5:ac:a6:2c:dc:
         7f:b2:22:89:8d:7b:ba:41:6a:f7:e4:79:1b:95:eb:05:98:c6:
         a7:e3:59:c7:19:92:44:40:30:fe:e7:6e:0f:4b:11:43:af:2b:
         70:4d:1a:d1:b4:67:0b:24:ad:96:2f:9c:0b:63:37:da:0b:94:
         07:49:bf:9f:46:46:14:b0:e6:1d:40:02:39:1d:39:2b:cd:3b:
         65:12:db:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:18 2026 by rpki-client