This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
File:                     iyH_rekwvR_S4XiM_0B9nTQTThc.mft (raw, json)
Hash identifier:          uH2QtKL6SVUyYHYUrqWocKBzXM6QWGu+ByAIItgXR8s=
Subject key identifier:   50:AF:DB:A3:E4:78:CB:1D:6C:AB:2C:0B:0F:9C:FA:41:88:0B:6C:2A
Authority key identifier: 8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
Certificate issuer:       /CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Certificate serial:       019C424638E3381369EAB92BF21C31AE1EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
Manifest number:          1444
Signing time:             Mon 09 Feb 2026 12:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:24 +0000
Files and hashes:         1: 0POn4eiSe4D7lLX8DICoyCNVffg.roa (hash: IuTOIfnYnKgQ1QMnujowbH+xUlcXahzENOK89qB7q6Y=)
                          2: iyH_rekwvR_S4XiM_0B9nTQTThc.crl (hash: hVEURzIMvgJ6GMQ0UVYXWqYoTeVJ7KQAUpI5i6pHyaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:38:e3:38:13:69:ea:b9:2b:f2:1c:31:ae:1e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
        Validity
            Not Before: Feb  9 12:00:24 2026 GMT
            Not After : Feb 10 12:00:24 2026 GMT
        Subject: CN=50afdba3e478cb1d6cab2c0b0f9cfa41880b6c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:54:31:84:96:2e:1b:65:de:3c:4c:a6:f9:
                    6d:7c:c7:14:09:df:d4:76:6e:b8:41:f4:bf:0f:f5:
                    df:22:05:1b:07:63:a8:73:9a:04:44:30:8d:b8:d7:
                    84:3b:d2:a4:dd:30:bd:ef:4c:64:14:a1:40:01:4a:
                    c4:50:07:a3:70:25:57:7a:f5:f5:81:9c:8c:80:3c:
                    6e:cb:8b:d6:f9:29:02:87:df:17:89:ed:cf:48:1a:
                    41:5d:3e:52:b0:aa:0e:ff:f4:bf:cf:4f:2e:38:4d:
                    52:f8:67:0e:24:37:60:50:39:df:45:d0:06:af:97:
                    e0:82:ed:f2:9d:ab:d7:98:2a:7e:c2:25:ef:e0:cc:
                    72:f5:f7:8a:fe:eb:1e:74:3f:9c:c4:84:59:09:ae:
                    12:1d:a9:1c:2e:79:22:19:28:80:1d:21:30:cf:62:
                    e5:b0:0f:09:1d:84:dc:68:5a:26:87:8a:40:01:47:
                    13:db:af:be:45:8c:24:66:08:01:4d:33:85:59:8c:
                    c8:b7:7e:89:a7:a9:51:de:03:64:1c:90:6d:45:7f:
                    9c:0a:13:d7:05:00:60:dd:70:0d:b4:f5:d4:59:54:
                    e3:29:4f:f2:44:76:15:90:63:73:a5:b2:52:b2:a3:
                    53:42:91:cc:cf:3b:75:95:a2:66:17:a7:d1:cf:fe:
                    20:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AF:DB:A3:E4:78:CB:1D:6C:AB:2C:0B:0F:9C:FA:41:88:0B:6C:2A
            X509v3 Authority Key Identifier:
                keyid:8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ee:19:ab:54:bc:d2:cb:9a:27:ee:38:5b:e7:11:6e:b8:2f:
         f4:24:4d:fd:a5:a3:80:85:1c:33:2e:09:9c:23:16:0c:bf:2c:
         49:cf:be:60:5e:48:f0:ad:1b:ff:65:96:13:6e:84:08:4b:e3:
         99:fc:08:26:e7:0d:48:94:a9:36:62:bf:e1:93:23:84:d2:f5:
         17:93:9d:84:7d:95:1c:c4:f6:0f:61:e5:31:8a:3d:6c:6c:78:
         e7:3c:bf:1a:94:fe:bc:8c:10:ca:55:89:75:21:8e:27:98:0e:
         94:d4:85:f7:96:0b:ba:d9:a1:e0:56:14:a3:61:3c:d5:b1:71:
         79:4c:4f:79:c9:66:53:91:27:ac:7a:b8:7a:e9:39:7d:b0:a9:
         c2:c8:ef:f6:0a:5b:81:17:bb:68:ed:01:28:87:e2:79:df:3c:
         cc:df:41:37:66:e3:ad:29:2e:ac:e7:f3:d9:3c:6e:6f:ef:4d:
         1a:c7:45:b4:e4:53:7b:03:b5:57:0a:ec:62:66:71:37:73:60:
         64:4d:2c:3c:48:cc:85:fe:ae:e5:62:b2:48:fc:4d:a1:4d:03:
         18:d9:0c:18:0f:14:6e:c8:8e:c8:a0:7d:83:3f:a0:7f:12:ce:
         ec:aa:fc:39:f5:cf:a8:9e:19:2b:78:5d:09:e5:d8:46:35:75:
         77:fa:a3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:38 2026 by rpki-client