This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
File:                     izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json)
Hash identifier:          Cad7O4d56eHcV1Pba/kkQaPgd+Aks/in3kG6EujSQmI=
Subject key identifier:   84:82:38:55:2C:C0:E5:5C:B6:2A:12:6C:F7:04:F2:5B:08:48:79:82
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Certificate issuer:       /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial:       019C254EC2387B0E78ADC193A76F3FC2645E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
Manifest number:          04A6
Signing time:             Tue 03 Feb 2026 21:00:44 +0000
Manifest this update:     Tue 03 Feb 2026 21:00:44 +0000
Manifest next update:     Wed 04 Feb 2026 21:00:44 +0000
Files and hashes:         1: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (hash: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ=)
                          2: 1fRolkRjd-APCzNnG-5bwuoOqNg.roa (hash: uECN6gUKiv+lFioLhpnkI4G1xAlKUZVG1VCjkCRQOjI=)
                          3: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (hash: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0=)
                          4: 2ecqjdvwwVeADzgAXi31Tj-9uMY.roa (hash: PYkuLmF1i/LptCyvK8hoFYIwFZUAA+w8WWm3Jdteb0o=)
                          5: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (hash: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA=)
                          6: 91LDPauwCWQ9godr-xheoc62kZY.roa (hash: pLiJYVDF484K9mWtl+JKcTe0VgA4TfPZgkN8+ZrNjMs=)
                          7: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (hash: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww=)
                          8: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (hash: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU=)
                          9: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (hash: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4=)
                          10: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (hash: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU=)
                          11: Jt1l3PmmzdbcYP2rfmhzsDtcPhI.roa (hash: zt/605nd1EgOMLhSVE8EHytRNsfa1q/ziCZNE0ebjzg=)
                          12: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (hash: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA=)
                          13: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (hash: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=)
                          14: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (hash: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ=)
                          15: avrcnfB12N6L1uAItV4pxr4ZeBk.roa (hash: UCrkK/t7tVltSG/GoHf/iVcJnaXfqtG/1ac64yo7m4E=)
                          16: dB24arzswMhE5aMklbuiHLZ-TiI.roa (hash: eC+51qakYDD1QrieIIxwdnOs/PF7+iVr9j/YubM+elg=)
                          17: hMoYvytTC8MSE72GcaOmUQp55TM.roa (hash: QNj9222JszfBwsXWHLHqGbqHpk9emhsVOXPVoX1Flpc=)
                          18: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: HoAgPn3Ye+tg7SuuEmp61OHnlLyVxhY1dsqXz9YrfNQ=)
                          19: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (hash: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs=)
                          20: jkayAAEe2n7QQ7ED_PcDmC66lHQ.roa (hash: 1sEicRYcyxjFiwRmeR+6ylnDIBh+nfhJ+c9MvFSryIs=)
                          21: n8ve06NetjX3cW6GgX_HV5n6oks.roa (hash: pimoPjnCHYZaHLokF/bqF6SVdAYfg1FaqRTM5gnZ2sY=)
                          22: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (hash: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE=)
                          23: r6qKV9nEirBUwP3KmuLyUTNtefg.roa (hash: iWqKDpTKfBVdyUC9r9QWpqk9OSg69kGIRh/unEHarFg=)
                          24: xJkF66cCvGxEcbXW72kYSvCe9pc.roa (hash: 8ukNpwANOCXSCFQousC6/SlMGWqDu4dvIjSPXAjmXlo=)
                          25: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (hash: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg=)
                          26: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (hash: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE=)
                          27: y78xNtcYu21c47h3KufgEPgZVnE.roa (hash: MwiDwZITS/z04aTqMBZZx2J7qe1RkzKld+egFNWQZro=)
                          28: ycFTntx4cs4onGaGpj0o47JW98Y.roa (hash: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:25:4e:c2:38:7b:0e:78:ad:c1:93:a7:6f:3f:c2:64:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
        Validity
            Not Before: Feb  3 21:00:44 2026 GMT
            Not After : Feb  4 21:00:44 2026 GMT
        Subject: CN=848238552cc0e55cb62a126cf704f25b08487982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:82:83:73:53:98:e6:50:89:1f:6d:98:9e:3a:
                    00:eb:3e:01:b7:e7:88:53:c6:61:ee:a6:6b:32:97:
                    59:95:3c:aa:e7:e1:3f:53:59:86:75:27:61:68:5f:
                    e6:91:73:77:7f:9a:90:2e:63:b8:5d:42:05:89:a3:
                    52:ee:d8:90:48:02:93:4c:4e:3f:4f:34:54:51:b8:
                    21:dd:46:83:b6:35:33:2b:29:c7:d3:48:f7:42:d4:
                    84:59:7a:b3:34:ae:b0:24:f0:2a:56:8f:cb:2e:51:
                    d5:31:a3:49:87:a7:54:01:dd:57:2a:76:9b:64:5a:
                    d7:66:96:4b:c7:20:aa:56:cb:b2:60:d8:8e:07:2a:
                    23:eb:b5:46:a7:6d:7b:10:3a:fc:ec:f5:d4:8d:bf:
                    d7:ab:c0:8a:21:bd:44:d1:4a:f7:15:22:3c:2e:8d:
                    ac:36:93:28:0f:74:ca:d5:5a:98:4e:e3:ed:f3:e7:
                    f0:42:83:14:c6:f0:51:a1:cf:56:9e:e5:60:4e:b1:
                    e8:b6:3a:3e:e7:7b:c5:08:16:67:fd:5a:f4:be:67:
                    2b:b0:c7:dd:6c:ea:e0:cc:51:23:1a:6c:6d:0d:5b:
                    82:fb:58:10:69:4e:18:e0:14:c7:f1:c5:de:27:fc:
                    5c:49:00:0b:50:da:31:9b:0d:dd:8c:1f:dd:d4:2b:
                    26:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:82:38:55:2C:C0:E5:5C:B6:2A:12:6C:F7:04:F2:5B:08:48:79:82
            X509v3 Authority Key Identifier:
                keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:4f:33:71:03:0a:b9:17:b6:bb:35:0e:08:7b:9f:ed:7f:49:
         e6:2b:16:74:a7:89:fb:74:4d:f9:a3:66:87:63:f5:01:16:02:
         43:4d:b7:17:a7:eb:b1:65:dc:71:00:bf:6b:f4:51:e9:c3:0f:
         fb:c9:c6:49:c6:57:cd:9d:f6:f8:1a:4d:6c:76:34:f3:27:d8:
         c8:81:1c:05:e7:d7:b5:53:33:ce:5e:a7:44:3e:72:9d:5f:e8:
         c4:de:56:43:88:f6:4d:d6:e9:3a:3b:ef:11:66:12:2a:ff:5f:
         35:c7:5c:d1:63:b8:03:2b:95:9c:27:a7:2c:3f:78:fe:00:32:
         79:e2:22:e0:cc:19:59:e1:89:7c:d0:b2:8a:18:3a:b6:40:a3:
         eb:d0:fb:2a:75:74:be:df:7a:32:26:87:71:ec:76:c7:2c:1f:
         01:45:0f:f1:be:9e:f5:cc:43:81:76:90:dc:8c:32:08:d5:ba:
         ac:34:f6:58:66:2a:77:28:52:1d:bb:07:2a:05:da:5c:93:2b:
         f3:ee:96:71:8b:34:e5:9d:e1:5a:ff:de:d2:e4:11:78:75:f2:
         68:27:c0:7c:36:c1:40:47:22:af:ba:e0:39:19:d5:f5:5e:9d:
         f5:d8:5c:bc:93:c3:de:db:dc:7d:39:5d:6e:91:2c:c9:70:f9:
         69:ff:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 02:19:38 2026 by rpki-client