This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
File:                     i5LFXos1lQd133Y-dJMNUinJ-gA.mft (raw, json)
Hash identifier:          JYwB+oH1In4dZYHtEByd5lO4tnDRO4qih7MccuLGHZE=
Subject key identifier:   1D:18:92:75:A4:B7:33:86:06:C5:E1:88:4F:99:8B:E2:B1:7C:ED:0B
Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
Certificate issuer:       /CN=8b92c55e8b35950775df763e74930d5229c9fa00
Certificate serial:       019C40FD82FE268438BF990DAE8104345A1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
Manifest number:          17A2
Signing time:             Mon 09 Feb 2026 06:01:21 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:21 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:21 +0000
Files and hashes:         1: AcZ8FStQphDwf4rYqOH4PuPnRcU.roa (hash: D5qSvfuIZWoy+nszBYnw8cGDkpXy8F40zHUSNBaMNOE=)
                          2: i5LFXos1lQd133Y-dJMNUinJ-gA.crl (hash: 4phsftVjaeZ2RLfQj5qaTuFKqPAkR9J7TXnxBeHNH9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:82:fe:26:84:38:bf:99:0d:ae:81:04:34:5a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00
        Validity
            Not Before: Feb  9 06:01:21 2026 GMT
            Not After : Feb 10 06:01:21 2026 GMT
        Subject: CN=1d189275a4b7338606c5e1884f998be2b17ced0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:89:0c:01:2b:1f:1c:47:4d:97:32:b6:70:fa:
                    13:c5:86:0c:41:8a:61:52:f7:24:ad:d8:ed:a8:f7:
                    18:6a:af:2e:98:fc:5a:1d:15:5e:f1:75:ca:14:46:
                    64:27:19:64:cc:b5:fe:01:02:db:17:d3:31:a6:91:
                    d4:a7:36:23:9f:74:d6:a2:41:f6:f7:22:25:0e:79:
                    25:ab:4d:88:36:61:69:16:ff:4a:6d:d1:2e:d1:fa:
                    11:7f:ff:b8:80:5e:42:69:78:67:c2:9a:83:2d:73:
                    f8:b1:ff:e4:b5:db:84:8f:8f:b1:f9:90:49:32:f9:
                    f6:19:16:65:c3:10:4c:8f:c0:8f:f6:44:c8:ee:4d:
                    37:2d:70:ed:7e:d6:10:dc:1a:28:8f:f1:e5:da:65:
                    67:83:f5:1f:c3:46:8c:80:3a:41:51:a0:95:7e:ff:
                    55:b2:92:8e:aa:1f:9c:2c:fc:49:14:4b:fa:e1:2a:
                    ca:01:8a:67:9f:34:86:6a:01:08:48:f8:7b:6b:bc:
                    15:60:3d:ab:d1:46:84:2c:0f:e9:10:81:08:7e:93:
                    ed:3f:7e:65:d4:07:5e:89:18:6c:c0:42:13:34:9d:
                    d5:90:6e:be:3f:1e:13:1e:9d:58:33:8f:a4:6f:7a:
                    68:de:8b:0e:08:11:06:3b:b8:91:43:d2:a2:50:28:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:18:92:75:A4:B7:33:86:06:C5:E1:88:4F:99:8B:E2:B1:7C:ED:0B
            X509v3 Authority Key Identifier:
                keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:25:23:73:5f:41:12:b7:2a:76:ba:16:69:46:74:45:a2:77:
         57:3f:d2:4a:02:59:72:e2:1a:ad:0a:36:2f:d8:cd:ba:e5:92:
         78:0d:a8:4f:ad:05:de:20:69:79:ca:97:49:07:64:c7:c6:80:
         18:9a:de:c0:b7:d3:a5:a0:e2:50:61:51:47:71:73:0b:c9:f5:
         f8:ba:e8:84:c0:93:20:d1:f5:27:32:90:fc:66:36:8a:76:76:
         78:3f:37:7b:59:67:46:79:5a:fa:7d:f3:17:42:bf:dc:ee:7f:
         2f:e0:b2:32:86:7e:7d:11:f1:e4:ab:6d:37:f2:04:9e:be:06:
         ef:1b:a9:3c:39:05:78:b4:89:5c:df:7c:c8:67:70:7f:d1:86:
         03:a0:ec:e3:39:27:95:bd:15:ec:6e:28:1d:c7:7b:b1:a3:05:
         aa:86:9a:21:2e:ea:98:1e:e6:56:1c:dd:ff:12:f9:6d:47:13:
         d6:f4:ae:f1:08:be:cc:b9:f0:f5:3e:e3:9f:bf:3c:4f:f7:61:
         b1:b4:3c:3f:fb:13:ad:e7:ba:e0:97:6e:76:3c:d3:9a:dd:ae:
         e5:a6:d1:df:98:9c:ca:7f:8b:ef:a5:92:7f:fb:72:16:1d:33:
         72:f3:c3:be:ea:75:17:b0:c9:68:0f:7c:72:63:ec:6a:67:9d:
         18:5e:79:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:36 2026 by rpki-client