This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
File:                     itKTDR_h3UMEkf17gx3pxhaSreQ.mft (raw, json)
Hash identifier:          /z53cFeNg9UzEiJ95mYe3akAhwom8qI0WZ8PZuLDNbE=
Subject key identifier:   19:7B:71:A6:C6:E2:F9:9F:FC:EE:F6:7F:66:6B:18:5B:0B:BA:AD:B2
Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
Certificate issuer:       /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Certificate serial:       019C43C6FBE0B66F90A261B17E24426ED89F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
Manifest number:          1540
Signing time:             Mon 09 Feb 2026 19:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:39 +0000
Files and hashes:         1: 7IHoFTom1ovbc32ROfwOsVohnOY.roa (hash: QxYm3BEgI8MopzvcjZkVuxTvAcrTlamB8ZE+JEtn02I=)
                          2: dlxBkhDBp6NSs-TK_Z6erdMzQTo.roa (hash: PbGDghsUx2VuV/Qi655kVWVON4S8LLL9qUjVO61ngtg=)
                          3: itKTDR_h3UMEkf17gx3pxhaSreQ.crl (hash: MWHYLS8+mDUVw+1bTO8MNsOrRVFHBYIgDiUMoxQ/eh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:fb:e0:b6:6f:90:a2:61:b1:7e:24:42:6e:d8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
        Validity
            Not Before: Feb  9 19:00:39 2026 GMT
            Not After : Feb 10 19:00:39 2026 GMT
        Subject: CN=197b71a6c6e2f99ffceef67f666b185b0bbaadb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:65:8e:41:8d:fe:33:f7:40:80:49:43:fe:
                    6d:02:b2:b2:42:62:62:24:5b:98:a0:66:71:99:29:
                    70:d5:27:aa:36:cf:9c:0e:56:7c:bb:82:a7:4a:9e:
                    b5:20:c2:d5:59:c2:e3:2b:b7:f0:a0:9a:39:f8:54:
                    4e:22:7c:a1:62:dc:18:96:77:02:12:50:a7:d4:de:
                    ef:cb:71:a3:48:dd:2f:ba:be:94:c2:35:60:fe:f3:
                    a0:87:b9:51:e1:ce:c6:51:b5:67:df:24:ca:a9:e9:
                    88:6d:db:15:93:0f:88:37:af:f4:01:99:d3:2c:88:
                    96:84:c8:78:4b:7d:62:93:6e:26:94:51:3d:a7:b3:
                    90:12:a6:5c:ca:a7:a0:36:a7:e9:1a:9d:98:44:f0:
                    2e:6a:1f:31:2f:c5:8e:04:db:a4:d4:c4:49:c8:85:
                    88:08:c6:fe:2f:eb:55:48:58:4f:71:39:ab:05:eb:
                    67:2a:e9:9a:4f:cb:9a:e4:7c:b0:55:ef:ce:ff:ff:
                    68:21:71:a1:64:94:25:42:5b:2c:64:36:87:44:94:
                    41:cb:28:8c:8f:32:25:f5:b6:4f:ae:ab:cf:b4:c8:
                    d2:48:5e:c8:18:32:33:ec:d5:ac:9c:d4:cb:ec:61:
                    d5:d4:0f:fb:f4:ee:60:b8:c7:04:11:40:d4:be:15:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7B:71:A6:C6:E2:F9:9F:FC:EE:F6:7F:66:6B:18:5B:0B:BA:AD:B2
            X509v3 Authority Key Identifier:
                keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1d:81:76:2c:5d:45:c0:ad:86:a1:ba:9e:5a:df:f4:f0:3a:
         a4:6c:e5:6e:ec:19:99:b2:92:47:ce:ef:2f:90:82:9f:35:55:
         29:ea:e9:e0:76:c3:ac:c8:78:e1:50:d1:fe:ca:7b:2c:cf:31:
         b8:b5:e5:e0:74:0c:49:98:79:b9:36:5c:e5:66:2f:82:1e:a1:
         c2:4c:82:f5:6f:73:c8:93:bc:a6:24:78:59:a6:69:e0:1c:7e:
         3d:a7:73:f2:6a:08:5b:d3:da:93:a5:fb:96:b4:7b:9e:5b:03:
         72:a9:23:92:4a:59:15:a5:9d:8f:1e:9c:59:48:61:db:6a:17:
         83:91:91:a9:94:36:30:78:fd:d6:cd:2e:7c:5e:08:c1:f6:1f:
         c1:ef:2f:ae:a5:46:cf:0b:a6:f0:8f:8c:95:72:75:42:4a:33:
         d2:7b:e8:69:26:6c:01:fb:8f:22:f5:19:5a:c9:2b:e6:90:32:
         2a:02:eb:2f:b5:7b:01:b9:15:b7:58:a0:70:ae:3d:eb:f3:85:
         96:92:eb:97:d0:a4:af:34:42:a3:c4:55:a2:f3:2b:ae:6e:3f:
         44:57:94:57:1e:53:1d:24:7b:e5:61:a4:3f:79:e1:ba:41:14:
         57:71:fc:c7:5f:52:a4:6f:9c:87:57:9b:47:78:31:b6:f6:45:
         c4:c8:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:52 2026 by rpki-client