This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File:                     ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier:          HeQASdeiuT3HI3c+DfLbgusaqqATEfqEb2EyiNgEizs=
Subject key identifier:   DD:9E:82:43:1E:14:78:1C:A2:BD:07:5D:AB:83:05:21:AC:68:AC:4A
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer:       /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial:       019C43593EFB478D57F58254057B8013D6A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number:          1824
Signing time:             Mon 09 Feb 2026 17:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:48 +0000
Files and hashes:         1: b0-Xi6NBuLovKlD60S3WgfbEvE8.roa (hash: N3EToacrn4DPrwEqB5RQ8S/8WXwqVJ+l1JFbW6BkbXc=)
                          2: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: 0+wZ5yAm0nJHPL/DAfTLgoAz71aEnjaH/4N4kF9pw2s=)
                          3: lXNdyBwVDWYBMuoN-G2bf7qUlEE.roa (hash: h/kstetY/g4/LlSQ3m9zcXR0qlfD4v6m5TWgTPaQlfs=)
                          4: m5w3Ma4fCgh741R3c4X5Al5UcNA.roa (hash: Su1TyZOSv86S0DYPclZsbCQqerrqEB8xvpHCZRksi1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:3e:fb:47:8d:57:f5:82:54:05:7b:80:13:d6:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
        Validity
            Not Before: Feb  9 17:00:48 2026 GMT
            Not After : Feb 10 17:00:48 2026 GMT
        Subject: CN=dd9e82431e14781ca2bd075dab830521ac68ac4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:09:eb:7b:9b:0c:58:b9:7d:30:cc:de:7d:
                    e1:29:39:ca:ae:e0:6c:d5:14:ef:fd:17:d2:35:d0:
                    85:d1:cd:e7:c7:d9:dd:2a:96:3d:42:25:19:23:08:
                    1c:ca:c4:0d:1a:26:6b:92:6d:c4:07:3e:c9:7d:54:
                    14:8c:ee:e4:8c:d3:99:67:c6:f3:ee:63:50:bc:29:
                    66:02:4d:69:3c:78:30:fe:89:5b:4f:35:2c:58:6b:
                    b7:b8:8e:9f:8c:e6:ac:53:09:92:9b:b6:3e:27:6a:
                    43:34:25:57:b6:be:ff:2c:f7:1c:7a:66:09:bf:ba:
                    f2:e7:9a:36:cb:65:7b:cf:15:3a:15:e5:5d:de:be:
                    e2:f9:bd:ab:dc:b6:61:54:a4:b0:28:08:d2:63:f3:
                    c9:f5:13:53:6e:75:0a:3c:27:d6:07:a8:c2:fa:14:
                    31:bb:11:98:94:10:86:3d:95:22:ef:2f:f5:b2:d8:
                    79:56:71:f8:ec:56:c4:fd:92:ab:ac:5e:3e:49:6f:
                    16:d9:40:80:70:9a:34:ca:c8:87:f2:e3:cf:46:8d:
                    89:cc:5f:02:85:39:3c:5d:dc:30:39:19:85:54:3a:
                    b2:af:ba:c0:20:70:a7:c0:e7:7a:f3:eb:e3:f5:66:
                    66:85:5b:09:c1:be:da:39:89:5d:9a:c6:fe:a1:b9:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9E:82:43:1E:14:78:1C:A2:BD:07:5D:AB:83:05:21:AC:68:AC:4A
            X509v3 Authority Key Identifier:
                keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:51:7b:81:bd:63:be:66:56:d3:53:3e:02:9a:3d:22:2e:44:
         bc:3d:f3:0e:ed:17:b6:3f:00:44:8e:ef:4b:1d:0c:4e:5f:7f:
         8e:90:22:e3:53:14:f6:80:18:72:e8:ad:39:c2:94:e8:d7:3d:
         91:67:42:7d:c6:b2:61:90:55:63:37:18:c2:df:17:9e:bb:8b:
         f4:5a:9f:c8:15:e2:e7:da:24:b1:cf:66:eb:be:c6:db:de:12:
         23:ab:c2:c1:c1:62:fa:01:cc:8e:15:6c:dd:1d:dd:ec:83:eb:
         5b:d8:70:d2:3e:c1:74:b8:e5:00:0b:f1:af:11:ea:54:7a:ad:
         41:23:b0:9c:cf:6b:14:83:50:1d:a9:23:8a:dd:64:f8:fe:2a:
         4c:f9:2f:e4:62:86:49:e2:05:85:9f:19:28:bc:44:9f:46:f6:
         91:31:f4:5c:58:e9:d5:89:a0:24:a5:23:08:0c:02:12:9c:f3:
         2c:72:48:97:63:46:68:f9:47:62:93:45:0f:f0:01:b9:25:4a:
         dd:8e:c5:30:17:52:21:69:09:b2:57:e3:dc:dc:f1:f4:8f:2f:
         ac:9a:3d:b5:30:5b:42:f1:d1:52:6d:ee:e6:19:9a:dd:28:59:
         52:9f:bb:e0:96:07:79:9a:f5:73:c3:4f:f5:4c:cf:9c:0c:30:
         fb:39:49:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWT77R41X9YJUBXuAE9amMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YjVmYWQxOGRkOTExMDQxM2EzMWI0ZDhlMTg3NjVhMjdk
NGMzZjEwHhcNMjYwMjA5MTcwMDQ4WhcNMjYwMjEwMTcwMDQ4WjAzMTEwLwYDVQQD
EyhkZDllODI0MzFlMTQ3ODFjYTJiZDA3NWRhYjgzMDUyMWFjNjhhYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlEJ63ubDFi5fTDM3n3hKTnKruBs
1RTv/RfSNdCF0c3nx9ndKpY9QiUZIwgcysQNGiZrkm3EBz7JfVQUjO7kjNOZZ8bz
7mNQvClmAk1pPHgw/olbTzUsWGu3uI6fjOasUwmSm7Y+J2pDNCVXtr7/LPccemYJ
v7ry55o2y2V7zxU6FeVd3r7i+b2r3LZhVKSwKAjSY/PJ9RNTbnUKPCfWB6jC+hQx
uxGYlBCGPZUi7y/1sth5VnH47FbE/ZKrrF4+SW8W2UCAcJo0ysiH8uPPRo2JzF8C
hTk8XdwwORmFVDqyr7rAIHCnwOd68+vj9WZmhVsJwb7aOYldmsb+obli1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2egkMeFHgcor0HXauDBSGsaKxKMB8GA1UdIwQY
MBaAFIm1+tGN2REEE6MbTY4Ydlon1MPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAt
NDI1MGNlNTUxN2Q5LzEvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAtNDI1MGNlNTUxN2Q5
LzEvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1F7gb1j
vmZW01M+Apo9Ii5EvD3zDu0Xtj8ARI7vSx0MTl9/jpAi41MU9oAYcuitOcKU6Nc9
kWdCfcayYZBVYzcYwt8XnruL9FqfyBXi59oksc9m677G294SI6vCwcFi+gHMjhVs
3R3d7IPrW9hw0j7BdLjlAAvxrxHqVHqtQSOwnM9rFINQHakjit1k+P4qTPkv5GKG
SeIFhZ8ZKLxEn0b2kTH0XFjp1YmgJKUjCAwCEpzzLHJIl2NGaPlHYpNFD/ABuSVK
3Y7FMBdSIWkJslfj3Nzx9I8vrJo9tTBbQvHRUm3u5hma3ShZUp+74JYHeZr1c8NP
9UzPnAww+zlJCA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:07 2026 by rpki-client