This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File:                     IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier:          JQLl6+jPXBUzlpBgpn/i7xp6D8Xbm1/bTektNHAXXCU=
Subject key identifier:   B0:B0:48:10:B8:E3:00:BB:D9:B3:B5:2E:A2:35:1E:57:49:73:3F:B4
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer:       /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial:       019C427DFBBC0B8F9DB524C6FF05FEF65C58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number:          0695
Signing time:             Mon 09 Feb 2026 13:01:18 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:18 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:18 +0000
Files and hashes:         1: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: arXah6S/c5DYoLLBn8sge6SQHaD0prII7u2xE3CZt/Q=)
                          2: LjoyTAIqIdVonXqWj6vk4FoukK0.roa (hash: bQBFj6QQOo1AQBEY/tE2iTw4IsOMKBpMDv9YhAGGsps=)
                          3: PAUyEeyz0ynlGNIPQlDkGnYP9qw.roa (hash: rPWU+wKJ+ccuMgvRWcLsdSjoKQhoTdU4QLcfL/aRiOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:fb:bc:0b:8f:9d:b5:24:c6:ff:05:fe:f6:5c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
        Validity
            Not Before: Feb  9 13:01:18 2026 GMT
            Not After : Feb 10 13:01:18 2026 GMT
        Subject: CN=b0b04810b8e300bbd9b3b52ea2351e5749733fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:f7:70:84:bd:f3:95:7a:c8:22:cd:53:3d:
                    ba:30:28:a9:8a:cc:e7:9b:5c:61:ad:d6:f1:90:8d:
                    ce:15:76:f8:a4:2d:87:61:d7:b4:6b:65:71:b8:ad:
                    d0:4a:00:64:a1:35:b6:f3:8c:f6:4d:8d:97:59:10:
                    3d:1d:47:5b:22:94:e8:d0:dd:fe:4d:67:f2:76:a9:
                    5c:be:cb:56:5f:66:5f:ef:3c:02:55:ab:59:45:db:
                    15:1e:d7:26:38:93:3c:64:ea:f9:cc:4e:fc:86:5f:
                    ed:d6:a6:fc:09:85:48:46:30:ea:2f:df:03:f3:a8:
                    a3:3a:f6:13:67:e6:b4:09:0b:bb:8c:c9:eb:aa:25:
                    4c:a9:b7:fe:2d:f4:2a:f1:32:7e:8a:cc:6e:30:f0:
                    1a:95:fd:be:c4:ba:b6:ec:35:5e:e3:73:a8:4d:33:
                    5a:b1:fa:cc:72:70:4f:5e:d8:d6:24:71:ae:12:68:
                    12:6c:f1:a4:2b:97:1e:c8:85:53:e1:01:1a:d5:89:
                    b9:3f:15:4b:8a:4a:0e:22:a6:6f:ab:e7:29:5a:ad:
                    6d:6a:59:1f:38:50:18:38:cb:44:08:bc:09:f0:ce:
                    28:b8:65:b8:5c:c1:31:f4:4d:a1:57:9a:ae:02:8e:
                    9e:12:05:54:93:a6:2b:18:d6:e1:07:6d:44:9e:32:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B0:48:10:B8:E3:00:BB:D9:B3:B5:2E:A2:35:1E:57:49:73:3F:B4
            X509v3 Authority Key Identifier:
                keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:76:74:2f:3f:61:5a:8c:bb:32:ef:12:22:63:7e:69:c3:1f:
         ac:71:46:13:88:a0:0c:43:5f:af:86:11:85:d2:75:bd:c2:ce:
         de:25:1c:b7:47:51:75:92:f0:a9:1c:10:a7:7d:8a:01:37:d5:
         27:d3:1a:60:c3:38:9e:c1:ce:5d:a9:e8:80:dc:02:41:63:fd:
         f3:7d:1f:08:f1:fd:d2:bb:ef:2a:cf:49:09:57:3c:80:c0:c6:
         e5:e4:09:7d:0d:86:36:d2:21:f7:0d:e1:0a:ff:bc:27:81:3a:
         0f:1c:ac:67:97:8d:7b:c9:65:eb:ad:1f:85:4d:f5:72:0d:05:
         5b:c3:5c:13:7d:25:45:ca:57:5a:f3:29:a0:1e:87:02:fb:3d:
         46:56:e0:c3:f7:ee:ba:3b:7b:e8:10:ff:d2:a7:7d:68:69:d4:
         db:48:d1:c6:1b:0d:0e:77:69:1c:4b:3f:9e:3a:14:15:b1:af:
         cb:2b:63:27:96:1d:f4:ac:f2:81:bf:2d:f5:45:dd:48:4f:79:
         9d:f2:0f:d4:95:b6:2c:5f:93:fc:1c:ae:21:07:6b:b6:f5:0d:
         58:84:74:aa:0d:91:fb:1f:8d:0e:8e:3a:81:02:cc:91:13:7e:
         cf:9c:c0:e1:f5:57:56:8d:6b:16:f7:d7:a8:22:37:cd:b8:12:
         a7:50:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:23 2026 by rpki-client