This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
File:                     IYssahphoXurfAMggKo78kR4tt0.mft (raw, json)
Hash identifier:          tPxhk/The+3v1lJkTRxBCHuUXDdTqJZWeQ4mOsHieEM=
Subject key identifier:   B6:E8:35:C5:C1:7F:F2:B5:D2:40:83:08:35:4F:6E:3A:72:56:BA:39
Authority key identifier: 21:8B:2C:6A:1A:61:A1:7B:AB:7C:03:20:80:AA:3B:F2:44:78:B6:DD
Certificate issuer:       /CN=218b2c6a1a61a17bab7c032080aa3bf24478b6dd
Certificate serial:       019C4322F7FAD61AB995BB7DEB7BBBDCB129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYssahphoXurfAMggKo78kR4tt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
Manifest number:          0ECB
Signing time:             Mon 09 Feb 2026 16:01:30 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:30 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:30 +0000
Files and hashes:         1: IYssahphoXurfAMggKo78kR4tt0.crl (hash: FsOqJpKnpJRUE+jEdRnAmTyuKTunJbaxZZLOkXDy1wQ=)
                          2: dCLnn7sgK5v7oJDUJbrjvWO6u5U.roa (hash: BC/yFL0CMfvt5OiaE+u7P/nSsti8Z5g8EroFC8bwyK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYssahphoXurfAMggKo78kR4tt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:f7:fa:d6:1a:b9:95:bb:7d:eb:7b:bb:dc:b1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218b2c6a1a61a17bab7c032080aa3bf24478b6dd
        Validity
            Not Before: Feb  9 16:01:30 2026 GMT
            Not After : Feb 10 16:01:30 2026 GMT
        Subject: CN=b6e835c5c17ff2b5d2408308354f6e3a7256ba39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:16:34:75:7a:9f:61:dd:26:eb:63:38:c1:
                    73:5b:b1:ce:1a:f5:e5:7e:5e:b7:a3:d8:4a:2b:e0:
                    0b:b6:1f:11:bb:c9:92:28:1c:8f:4f:2c:62:ac:93:
                    cb:4f:e1:56:6c:83:c2:e2:28:c8:c0:7e:7c:38:46:
                    50:15:92:4f:7c:0d:31:cb:b5:54:66:25:2f:7e:5f:
                    ea:50:54:33:b4:52:16:cf:25:09:96:df:cf:98:24:
                    cd:30:ef:e9:0b:7d:07:28:82:ad:39:63:dc:b9:63:
                    ee:b4:a9:8c:fa:63:c4:67:d7:93:a3:51:67:ee:4b:
                    3a:18:5e:68:59:38:df:f5:30:d9:22:bf:cd:e7:02:
                    b1:30:f1:f0:3d:98:22:62:c4:ba:c1:c3:30:6a:bc:
                    00:37:58:70:49:42:a0:04:60:f2:52:a1:92:6f:3f:
                    ba:2c:3c:16:66:05:3c:ed:70:3e:9b:fb:64:bd:e6:
                    b0:92:bc:20:29:7a:58:2e:db:4e:a1:d0:af:b8:14:
                    a6:b2:1f:39:ff:aa:ba:89:65:4f:87:b4:0b:21:25:
                    a4:12:f2:6f:11:e6:c6:98:91:16:9b:86:78:9d:f8:
                    7a:1e:c4:04:c4:50:c0:6b:e1:32:15:ae:4a:33:0e:
                    35:71:46:63:85:7e:b8:31:7f:34:7c:12:1b:65:4f:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E8:35:C5:C1:7F:F2:B5:D2:40:83:08:35:4F:6E:3A:72:56:BA:39
            X509v3 Authority Key Identifier:
                keyid:21:8B:2C:6A:1A:61:A1:7B:AB:7C:03:20:80:AA:3B:F2:44:78:B6:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYssahphoXurfAMggKo78kR4tt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f8:6b:44:d2:e5:34:fc:d8:bf:8f:8d:0c:34:2d:7a:5a:d3:
         d1:f7:5f:8b:ba:0d:ee:98:88:68:35:f9:fe:f0:90:99:6c:28:
         1f:ce:b3:a3:5d:01:55:73:d1:66:94:e1:5c:95:05:ab:95:1c:
         cf:0e:88:2d:05:de:80:ea:4a:8a:ea:e5:6d:96:e2:09:e9:b6:
         8a:f6:ff:1c:8b:da:2b:b5:53:00:d4:f4:c5:25:9c:d4:30:ea:
         67:36:7c:c5:eb:e4:bd:00:8a:90:d4:b6:16:56:3c:8b:6d:56:
         37:e8:c0:40:f0:1b:b9:21:3b:52:f3:b7:4c:0d:4b:13:3b:cb:
         6d:a8:df:21:6a:49:81:a9:30:8f:f3:ec:23:01:4e:fd:a4:2a:
         05:66:7b:f4:6f:6d:9b:f7:3a:d4:db:3b:ca:1b:9f:3d:cc:54:
         8c:2a:70:4c:7f:3d:ce:0c:70:e8:90:fa:b6:77:49:a4:f4:04:
         64:46:06:4c:f3:65:9c:bc:78:a1:0f:de:24:fb:3b:5a:e1:4b:
         74:a3:10:92:b5:5a:7d:72:d8:8f:74:7a:2d:f5:44:bd:22:de:
         0e:e3:7f:df:e3:7e:5e:fb:20:78:85:91:8f:e8:7c:08:92:ba:
         16:93:91:31:9b:3f:68:8a:fb:86:be:34:39:a3:2c:05:f8:6d:
         e0:99:7a:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIvf61hq5lbt963u73LEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGIyYzZhMWE2MWExN2JhYjdjMDMyMDgwYWEzYmYyNDQ3
OGI2ZGQwHhcNMjYwMjA5MTYwMTMwWhcNMjYwMjEwMTYwMTMwWjAzMTEwLwYDVQQD
EyhiNmU4MzVjNWMxN2ZmMmI1ZDI0MDgzMDgzNTRmNmUzYTcyNTZiYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWAWNHV6n2HdJutjOMFzW7HOGvXl
fl63o9hKK+ALth8Ru8mSKByPTyxirJPLT+FWbIPC4ijIwH58OEZQFZJPfA0xy7VU
ZiUvfl/qUFQztFIWzyUJlt/PmCTNMO/pC30HKIKtOWPcuWPutKmM+mPEZ9eTo1Fn
7ks6GF5oWTjf9TDZIr/N5wKxMPHwPZgiYsS6wcMwarwAN1hwSUKgBGDyUqGSbz+6
LDwWZgU87XA+m/tkveawkrwgKXpYLttOodCvuBSmsh85/6q6iWVPh7QLISWkEvJv
EebGmJEWm4Z4nfh6HsQExFDAa+EyFa5KMw41cUZjhX64MX80fBIbZU8kJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLboNcXBf/K10kCDCDVPbjpyVro5MB8GA1UdIwQY
MBaAFCGLLGoaYaF7q3wDIICqO/JEeLbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlzc2FocGhvWHVyZkFNZ2dLbzc4a1I0dHQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS84NDkxNDAtYzg1My00OGNkLTlhODQt
Yjk5MzE2OGJjNTkzLzEvSVlzc2FocGhvWHVyZkFNZ2dLbzc4a1I0dHQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS84NDkxNDAtYzg1My00OGNkLTlhODQtYjk5MzE2OGJjNTkz
LzEvSVlzc2FocGhvWHVyZkFNZ2dLbzc4a1I0dHQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPhrRNLl
NPzYv4+NDDQtelrT0fdfi7oN7piIaDX5/vCQmWwoH86zo10BVXPRZpThXJUFq5Uc
zw6ILQXegOpKiurlbZbiCem2ivb/HIvaK7VTANT0xSWc1DDqZzZ8xevkvQCKkNS2
FlY8i21WN+jAQPAbuSE7UvO3TA1LEzvLbajfIWpJgakwj/PsIwFO/aQqBWZ79G9t
m/c61Ns7yhufPcxUjCpwTH89zgxw6JD6tndJpPQEZEYGTPNlnLx4oQ/eJPs7WuFL
dKMQkrVafXLYj3R6LfVEvSLeDuN/3+N+XvsgeIWRj+h8CJK6FpORMZs/aIr7hr40
OaMsBfht4Jl6ng==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:51 2026 by rpki-client