This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File:                     IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier:          wzrTQ7uiblf0wnoZGDYXKt+RRvaeiVPgL8hwxz3HY88=
Subject key identifier:   A1:1D:5B:61:26:AF:F7:11:B3:07:AC:BC:55:A0:08:C0:43:00:A2:39
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer:       /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial:       019C273D4238B492268642313C647830B2BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number:          026D
Signing time:             Wed 04 Feb 2026 06:00:51 +0000
Manifest this update:     Wed 04 Feb 2026 06:00:51 +0000
Manifest next update:     Thu 05 Feb 2026 06:00:51 +0000
Files and hashes:         1: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: NxDzr0FjKNJRNvQqJD1eObNcPhiSwPGoe2DN+KZP/Y8=)
                          2: VGZt16TaNbYhDiwnaWT7BIOvDLk.roa (hash: Y3ywHDxVVrMBlYasPLw8Fmqixb2KEFgEzqo4692NceY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:27:3d:42:38:b4:92:26:86:42:31:3c:64:78:30:b2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=225326a0b249d2109f5292961392495071d89c92
        Validity
            Not Before: Feb  4 06:00:51 2026 GMT
            Not After : Feb  5 06:00:51 2026 GMT
        Subject: CN=a11d5b6126aff711b307acbc55a008c04300a239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:96:24:d4:11:b8:8a:fb:47:97:ff:e7:1e:
                    39:0f:dc:75:aa:97:14:d2:bf:d2:b4:db:3c:89:a6:
                    3f:d5:78:7a:8b:8e:79:a1:e4:7b:3b:a0:9c:b7:8e:
                    39:00:15:b0:8d:9a:73:8a:1c:5a:10:22:7f:c6:b7:
                    aa:9a:28:3c:b3:f7:e1:84:ed:c1:05:b2:46:57:52:
                    97:66:ed:02:86:8c:96:09:18:79:b4:59:17:8f:04:
                    04:d3:32:53:f8:90:a5:9f:0d:c2:2f:13:be:d8:d9:
                    8e:29:68:b8:a7:37:bc:09:b9:9d:6e:9e:27:df:76:
                    26:69:83:7a:cb:2f:7c:a6:b5:0e:aa:28:3b:f0:c7:
                    40:53:56:b8:25:9f:67:7b:74:29:79:5f:41:a2:a7:
                    fe:9a:0c:93:e8:01:2c:d0:fe:cf:f6:c3:c3:7c:e9:
                    fa:4e:ec:76:d5:d2:a8:ac:c7:46:a8:f9:35:bf:ad:
                    64:23:2e:b1:5b:d1:0b:61:c8:99:5c:03:70:e9:93:
                    73:e8:55:53:6a:f3:9d:f9:f1:d3:bf:d3:75:11:20:
                    6e:2b:62:c9:9f:9a:ac:4b:48:3c:9f:e3:01:15:09:
                    dd:df:68:ba:3a:a5:76:95:00:d9:67:be:2e:25:90:
                    cd:35:a0:71:74:c8:d6:cc:8b:9e:8a:c6:b2:76:2f:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1D:5B:61:26:AF:F7:11:B3:07:AC:BC:55:A0:08:C0:43:00:A2:39
            X509v3 Authority Key Identifier:
                keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:75:e9:80:ec:f6:2e:04:08:2c:36:ec:66:31:0e:cf:16:3b:
         1d:49:39:58:57:3e:51:67:38:5b:e3:09:18:67:03:e6:89:ec:
         a8:8d:b3:90:9e:db:3f:f7:f1:b2:7b:1a:07:b1:a0:11:4c:2c:
         57:b8:72:75:69:ef:54:e7:88:fa:a0:3a:b9:fb:e2:fb:fe:fd:
         f7:8d:f6:75:d8:35:5e:c6:8a:b1:30:42:0e:51:51:9a:89:e8:
         3c:85:38:7a:06:94:a5:69:53:40:0d:29:56:17:1e:06:10:d2:
         18:ab:a0:ae:39:00:ac:52:15:82:b9:3b:b7:fd:e1:cb:39:a2:
         75:7b:e1:29:68:f3:ba:7a:42:c0:a8:1f:6e:5f:14:5e:de:13:
         1f:cb:b2:3b:a6:a1:68:21:6c:88:ef:43:c0:df:d0:99:58:54:
         ca:cb:61:74:b6:4e:41:6a:25:65:12:47:62:83:04:4d:68:0d:
         2a:bb:df:79:30:c3:0c:93:4d:ac:c4:e6:d0:cd:21:7a:16:17:
         f1:a6:cb:d5:3a:ff:8d:7e:89:5d:d5:6e:96:2b:51:f9:e5:2d:
         bc:d8:f3:ee:bd:d0:35:f5:5a:f2:13:f0:0e:85:d1:1b:14:85:
         ad:bd:58:4d:9a:50:43:43:e7:7a:7d:80:83:e2:f7:43:a6:5a:
         60:1a:23:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 10:56:32 2026 by rpki-client