This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File:                     I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier:          71gZMp4F08JkSYo9GK84nvMAZTgLCpsdQ48ntMLaIDI=
Subject key identifier:   89:A8:39:2D:C0:CC:63:EA:47:EE:0C:C6:66:6F:25:80:A6:CC:69:2E
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer:       /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial:       019C24E0D83FB521B4E2B8094489BEBCB22F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number:          0BC7
Signing time:             Tue 03 Feb 2026 19:00:41 +0000
Manifest this update:     Tue 03 Feb 2026 19:00:41 +0000
Manifest next update:     Wed 04 Feb 2026 19:00:41 +0000
Files and hashes:         1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: xC4NGelTJe1A2Mb+xWGMYAq1PNrJH/GNNs9hpv4imhI=)
                          2: ame8Z_daacjlEpmtE4K5w-dphW4.roa (hash: +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=)
                          3: b336X3WeMeMqlclahAX3Nlijuow.roa (hash: qBZyaLyDbfB2OL3m5O3Gqj9tW/vJBs1SdtUmTpwnruE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 15:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:24:e0:d8:3f:b5:21:b4:e2:b8:09:44:89:be:bc:b2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
        Validity
            Not Before: Feb  3 19:00:41 2026 GMT
            Not After : Feb  4 19:00:41 2026 GMT
        Subject: CN=89a8392dc0cc63ea47ee0cc6666f2580a6cc692e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:14:f7:d9:4e:bf:73:c3:b4:25:ef:37:a9:
                    75:d0:ae:f7:53:de:0b:5b:b4:8c:dd:3e:8c:29:45:
                    2e:7b:65:ce:05:47:1d:da:6e:c6:a0:42:6a:ee:0a:
                    79:c7:14:a0:11:fd:02:14:99:b4:f0:d4:21:c1:ef:
                    e6:1c:d3:c7:57:cb:ab:04:5b:48:ee:0e:96:39:c9:
                    9d:68:bc:71:5d:b7:e6:f9:0b:2e:55:c7:9d:82:9e:
                    d3:7c:d8:f4:8f:99:25:88:1b:8b:c3:73:38:26:ad:
                    e2:3e:ac:6d:e0:7b:e2:f8:1e:63:7b:ed:9a:f3:c3:
                    40:fa:6f:37:a6:16:58:40:0a:1e:54:f0:c2:83:68:
                    34:c1:5e:5c:95:26:4c:77:bb:1d:68:46:00:7d:eb:
                    ba:a7:75:21:51:e1:1f:8a:a6:4f:cb:c8:57:f6:3f:
                    17:f6:ff:8c:fd:15:8e:65:b1:de:cb:71:e9:b4:86:
                    7a:70:fa:3e:8d:f0:d8:15:86:47:c4:20:6f:63:30:
                    20:9c:5a:28:6c:ef:32:00:f6:f7:83:26:b3:69:13:
                    8d:56:f9:9b:b9:cf:dc:43:74:0a:68:a7:11:1e:3f:
                    86:64:1a:8e:84:09:8e:db:ed:bb:29:ff:de:6f:d9:
                    5e:75:11:7e:08:99:65:a4:f3:b0:be:04:eb:a2:b3:
                    61:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A8:39:2D:C0:CC:63:EA:47:EE:0C:C6:66:6F:25:80:A6:CC:69:2E
            X509v3 Authority Key Identifier:
                keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8d:de:38:e4:22:18:b7:2b:4b:47:c3:aa:52:00:02:af:08:
         6e:0f:30:fc:e4:b2:36:a7:30:a3:46:5b:d5:30:7c:85:7b:2e:
         0c:54:b3:ae:84:20:c9:e9:f4:85:b7:85:7c:7d:7d:53:49:b8:
         c8:1f:49:16:e5:b6:47:94:77:92:29:33:27:72:aa:fd:b7:ea:
         6d:0f:ce:94:8b:fb:bf:14:d3:ea:82:69:f3:11:6e:4b:d6:8c:
         0b:74:4f:97:0e:87:80:2a:2e:ed:6d:3d:b3:a0:72:fa:44:36:
         36:d3:cb:9e:46:81:2d:74:c2:d3:fa:96:60:56:ca:a6:66:58:
         ae:cc:66:21:f3:89:fa:7e:29:3a:39:80:e2:ec:d4:1d:d2:fb:
         ca:32:6d:ee:c2:8e:96:69:ae:31:a5:d6:81:f6:cd:68:ef:ec:
         81:24:ad:95:3b:38:58:d6:4f:10:d6:6b:dc:b3:5f:14:ca:92:
         c7:bb:98:e8:2d:7d:cd:23:d4:ca:8e:a6:04:e4:da:74:a0:b7:
         d6:a1:54:69:cd:f5:83:50:e1:df:11:19:0b:fc:8d:25:08:2b:
         7c:5d:d8:30:4a:53:8f:52:8a:5b:66:e2:a2:4b:bf:1c:dc:8c:
         6f:76:7e:8f:9d:27:4e:b5:e0:35:2d:c0:f1:d2:2e:26:68:e5:
         ce:20:06:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 22:52:37 2026 by rpki-client