This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File:                     IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier:          9IPl14GWQKGVJTmNgJ/D77YHUHx1GlH0aoBg12kYiqc=
Subject key identifier:   B0:56:9D:F5:EA:30:FB:33:19:97:C2:BE:90:8A:04:9B:BC:05:33:B3
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer:       /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial:       019C41D86D5660EF5EBCC70CF7239E390CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number:          0659
Signing time:             Mon 09 Feb 2026 10:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:28 +0000
Files and hashes:         1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: N4Bcz9RpqePO7TGNZCOriLKcZ8mlZY/P8OWS/5IRqHQ=)
                          2: uLD67uNvCc4ky2TYfWAY_NstWnE.roa (hash: J64Q9GWUgcn8Guex3fYi7oSiRMd56hoswqyttiC77H4=)
                          3: yQugqDhsoFCyt4EOU-Yd8LiriqA.roa (hash: RbGDZvWEo1F7e5KTPgIMqC+hpQ10KuDrmfUdpa03+bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:6d:56:60:ef:5e:bc:c7:0c:f7:23:9e:39:0c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
        Validity
            Not Before: Feb  9 10:00:28 2026 GMT
            Not After : Feb 10 10:00:28 2026 GMT
        Subject: CN=b0569df5ea30fb331997c2be908a049bbc0533b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:12:27:8f:bc:45:2e:a6:64:32:48:f7:f3:
                    1d:4b:fd:ca:3f:d0:8f:fe:e2:29:7b:16:7a:52:9e:
                    f8:d7:5e:e0:05:11:1d:e3:54:46:5c:41:e4:69:50:
                    f7:49:9d:5b:18:78:ee:b7:50:c7:0a:48:82:21:fc:
                    83:55:38:cb:d9:9d:c5:96:b5:77:8e:41:9d:d8:21:
                    13:27:eb:4c:cd:77:d8:f9:91:36:42:99:15:dd:1e:
                    38:d3:99:e1:29:b8:09:45:7b:12:8c:59:ad:c3:14:
                    b1:2d:b5:cb:f7:c2:96:1c:1d:2c:1f:c9:7a:d4:87:
                    3d:31:5f:1c:47:28:e6:5c:f7:e3:91:8e:26:d7:f7:
                    77:bd:17:df:a2:a2:71:97:28:a4:aa:89:1b:f6:8a:
                    2a:19:03:f6:07:90:d8:0e:7d:86:66:cd:0f:94:39:
                    bb:28:50:72:ab:c7:a4:f2:76:a3:a3:7f:78:80:ea:
                    dd:0a:d6:67:eb:6a:2a:c2:bb:14:a8:b5:83:e9:c9:
                    c7:7f:b1:ee:bb:35:cd:8d:82:82:e3:d5:24:d8:58:
                    e2:86:77:9c:4c:1a:4b:08:0b:43:d4:b8:55:5f:02:
                    6b:88:e5:d8:92:4c:2e:a5:cd:7f:30:7f:6a:a2:f6:
                    9d:38:eb:64:5b:cc:7e:94:60:6b:01:44:54:73:bc:
                    b2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:56:9D:F5:EA:30:FB:33:19:97:C2:BE:90:8A:04:9B:BC:05:33:B3
            X509v3 Authority Key Identifier:
                keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4f:85:4e:3f:12:dc:89:b7:75:9a:77:5c:01:51:f5:91:4d:
         a5:c4:41:8f:6d:d2:3a:16:3e:93:05:83:1b:f3:60:ce:34:ff:
         09:00:fc:f3:f4:fc:38:03:f1:57:29:f1:0b:27:a2:99:36:be:
         66:49:8b:ff:02:7f:58:2b:89:c7:6d:de:e1:74:b9:3e:b7:9c:
         9c:8f:38:d2:0c:9d:d2:fe:40:b9:35:29:72:01:35:c1:02:c9:
         f1:6c:21:ae:fc:af:8b:0f:65:91:9b:cc:8e:d3:3d:75:17:78:
         02:39:d0:41:6d:52:38:5c:7d:99:64:5d:19:cc:ed:2a:ae:da:
         24:25:b8:6e:33:ee:40:9a:e8:95:b2:5f:3f:dd:32:9b:b0:3f:
         56:a8:b5:b2:78:a5:08:51:29:f7:33:ea:53:7a:d5:e1:5e:c5:
         14:ce:85:87:f3:15:72:6f:dc:d2:0d:ec:76:9c:e2:ed:73:c8:
         4c:42:28:c6:55:b8:ac:ca:2f:ca:a4:70:12:dc:7e:0c:64:27:
         7b:04:ce:b4:aa:68:2b:eb:df:cc:ea:b0:7f:ff:aa:94:3a:a1:
         2a:38:3d:d5:f7:5a:79:cf:a2:73:9a:93:49:75:78:28:c4:72:
         05:90:34:18:ab:1d:4e:6e:1a:8c:b2:23:a8:1d:06:ec:79:22:
         e9:72:3b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:51 2026 by rpki-client