This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
File:                     iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft (raw, json)
Hash identifier:          I4kNX6Zpr8BjF05s2Av+BsYEs8tu1OY5hSN41FSOY54=
Subject key identifier:   B6:D8:34:7F:8F:14:C7:76:07:68:B6:1F:CA:F9:61:C1:F7:68:3C:9E
Authority key identifier: 89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
Certificate issuer:       /CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Certificate serial:       019C42EBB603450C05BE3CC5109A07684C06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 15:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:09 +0000
Files and hashes:         1: VzL5RLnlQJ3wSeF6IZXD0hLHbzI.roa (hash: rYHDP0eMxniB9OvjMw+m6Idpm0cWRBfVpSJ7IC660D8=)
                          2: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl (hash: Ci+7aWoXryrVcUgCboFsrpUgWVQ6/Msi2KWqCXUq+K0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:b6:03:45:0c:05:be:3c:c5:10:9a:07:68:4c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
        Validity
            Not Before: Feb  9 15:01:09 2026 GMT
            Not After : Feb 10 15:01:09 2026 GMT
        Subject: CN=b6d8347f8f14c7760768b61fcaf961c1f7683c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:63:48:a3:1d:15:cf:11:26:12:ce:fa:5d:
                    0c:99:1d:bf:29:7e:63:a2:fb:3c:7a:42:a9:02:1e:
                    12:e9:db:1d:3c:ae:71:29:b8:68:5e:fe:cd:ab:bb:
                    25:08:3d:03:fe:b6:54:4e:78:e8:77:23:7f:eb:49:
                    51:86:b6:ff:a8:de:6a:cf:26:de:8b:e0:d5:55:3b:
                    ed:0a:52:3c:ed:6c:a0:55:e2:ff:05:46:2f:f4:6b:
                    56:e2:44:d9:65:2c:b9:8e:9a:f9:19:1d:69:70:81:
                    7a:3a:80:1b:f6:60:c7:8c:9e:a3:38:d4:f3:3d:f4:
                    7d:bf:a4:aa:00:ce:f5:22:72:a1:c5:9a:9c:a5:94:
                    87:71:a4:5a:0f:fa:ca:0f:56:c8:7b:d9:f1:de:2a:
                    fc:d1:d3:db:0b:c8:a0:bc:db:2c:25:e8:f5:e0:5f:
                    bc:e1:7c:9d:d7:cf:69:e1:0f:73:1f:9c:42:70:ca:
                    01:2d:03:7d:37:e4:0a:7c:47:e5:3d:72:bd:99:16:
                    30:98:07:37:09:a8:c7:89:da:ad:d8:d7:bf:8d:b7:
                    07:bc:55:ea:c1:e3:a9:33:55:c9:4a:0a:9e:6a:f1:
                    d1:82:da:3b:15:01:61:52:eb:0c:11:f1:9a:3b:62:
                    a7:99:88:e6:95:81:b9:b2:97:7c:6f:06:50:b6:af:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D8:34:7F:8F:14:C7:76:07:68:B6:1F:CA:F9:61:C1:F7:68:3C:9E
            X509v3 Authority Key Identifier:
                keyid:89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:eb:e5:70:52:07:14:cd:c9:3b:c5:9e:d2:de:10:49:55:22:
         f9:73:06:b4:ed:ae:1b:f3:d6:c1:52:56:3d:a9:28:d1:41:01:
         c0:bb:d9:cb:af:8e:fb:ba:7f:5b:2c:0a:c3:d3:fd:92:c4:55:
         8e:48:bf:5c:98:e6:4d:3c:6e:b0:a8:1a:5b:cb:e6:1a:c8:69:
         a1:14:d3:c2:9b:3e:0b:10:7d:aa:d2:01:15:c6:94:e1:b4:f4:
         da:8d:df:b8:dd:9e:47:f8:2c:3f:d7:2e:5b:3c:ec:5d:a5:32:
         ee:65:1b:36:16:06:0d:cb:38:cf:9b:ac:d2:2b:39:c1:1b:21:
         16:3d:6a:00:9a:8f:3f:7b:b0:40:f0:00:7e:bb:a1:aa:d6:84:
         9a:ed:33:f9:63:df:e5:b0:81:0b:06:d4:ff:0f:67:73:6e:2b:
         7e:ee:52:56:95:82:ee:4b:bf:b6:6a:a1:29:25:b6:28:a5:fa:
         5e:9d:7d:06:f6:0b:20:a6:72:ee:a4:d3:6c:97:7f:91:72:43:
         de:cd:a6:f8:b9:ff:f5:87:03:c2:13:d0:c6:32:76:02:b7:ad:
         f2:87:14:61:d5:6f:fe:e3:45:5e:42:bc:39:52:66:01:e1:7f:
         4c:ac:ec:4b:91:a7:18:aa:15:61:cc:cb:53:da:75:f6:7a:61:
         57:29:b6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:43 2026 by rpki-client