This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
File:                     IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json)
Hash identifier:          200WR4dHGIAuYxjJIgOX3ehSLvvjxo83wM2FrmO0UvE=
Subject key identifier:   2F:E7:D8:E5:4A:39:45:00:B1:9B:60:43:2A:02:AC:D4:70:58:CD:ED
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Certificate issuer:       /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial:       019C1B70768F3D0388458FEAC10A3CB7EDD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
Manifest number:          180D
Signing time:             Sun 01 Feb 2026 23:01:20 +0000
Manifest this update:     Sun 01 Feb 2026 23:01:20 +0000
Manifest next update:     Mon 02 Feb 2026 23:01:20 +0000
Files and hashes:         1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=)
                          2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=)
                          3: 9vuOuOvj62P021fXQQxf0hIL-7Y.asa (hash: IV14GyGa+T6PyA00vxABTsOZmDpbofMON8dQI+vejQo=)
                          4: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=)
                          5: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: 4lyewEGwFqxClAm5axhsjG39+JakbleqeA6VR60WItg=)
                          6: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=)
                          7: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=)
                          8: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=)
                          9: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=)
                          10: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=)
                          11: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=)
                          12: uLk-SOdg3NaZVxDw7uzOJ2cDto0.roa (hash: WMGu6CGGF8Zc3rzf7uT2wsSrHABykv7oyw0K24uqKAU=)
                          13: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:70:76:8f:3d:03:88:45:8f:ea:c1:0a:3c:b7:ed:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
        Validity
            Not Before: Feb  1 23:01:20 2026 GMT
            Not After : Feb  2 23:01:20 2026 GMT
        Subject: CN=2fe7d8e54a394500b19b60432a02acd47058cded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7f:4b:1a:21:6e:10:3f:f6:4c:bd:15:3b:e9:
                    a3:d1:2b:bb:7f:6c:9d:85:5e:fb:36:2f:7b:54:39:
                    fb:31:19:08:9b:5e:40:9c:61:cf:fe:ec:7a:47:40:
                    be:87:cb:f2:34:e3:aa:aa:7d:45:b3:62:c4:92:92:
                    52:74:23:26:28:43:2b:0d:3e:4c:3e:31:76:f3:c7:
                    9f:38:ba:d2:42:ba:56:e4:5b:09:99:bc:b9:ce:b7:
                    b7:c2:ed:2e:14:e4:7c:49:45:fc:58:b3:5d:0f:96:
                    79:a5:c3:33:57:5d:be:7e:fd:cc:a2:0b:48:3c:9b:
                    b7:24:e3:12:cc:08:dc:66:45:4a:36:81:f4:68:d8:
                    5e:ef:27:9c:ef:31:76:f3:cb:e8:01:42:5f:0a:c3:
                    c5:a0:5c:89:0b:21:f5:45:71:74:81:72:c1:fa:42:
                    9e:b4:f2:50:c3:70:99:cb:6e:78:3c:aa:03:ae:69:
                    95:b2:36:8c:10:08:7e:2e:4a:d5:d8:f9:55:46:05:
                    86:d4:ac:a9:2b:f6:18:45:b5:c4:2e:34:bd:d3:d9:
                    fd:99:f2:24:a8:33:7e:03:65:d2:40:8d:58:8b:62:
                    4c:75:ff:af:25:33:14:b8:20:a2:fb:4a:4a:96:6d:
                    74:1c:4d:38:ef:a9:2c:67:73:f8:88:97:9b:df:fd:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E7:D8:E5:4A:39:45:00:B1:9B:60:43:2A:02:AC:D4:70:58:CD:ED
            X509v3 Authority Key Identifier:
                keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7c:68:8e:0a:3a:4e:db:31:1d:b9:bf:73:ba:ff:f9:27:65:
         20:1f:79:80:0f:2a:23:55:1e:46:a9:f0:f9:ab:ac:10:bb:80:
         4d:a3:d0:fa:87:05:5b:8f:f0:1e:72:dd:4d:e4:a7:49:51:87:
         32:d5:0c:07:25:e1:90:ac:db:42:97:90:2d:f9:b3:52:46:ca:
         4e:c1:97:72:8e:b5:75:c3:77:2d:ee:09:cb:23:93:ab:e6:be:
         8e:c4:00:02:bc:30:d4:d5:78:bb:75:e9:d5:ef:2d:30:5f:c9:
         f1:eb:36:08:85:96:28:d5:bb:51:a7:c7:41:d6:45:a5:01:cd:
         06:e8:b2:b4:27:20:3a:03:ea:0b:00:1c:5a:39:a6:3c:cd:de:
         5c:c6:4f:7d:30:76:a6:4b:ae:29:1b:da:21:d3:6b:2c:a8:ea:
         72:81:6b:ec:48:32:bb:a5:7a:7e:0a:e0:70:00:61:20:91:81:
         c6:8f:04:aa:dd:76:d2:91:0c:70:2d:86:f5:76:11:3f:a2:c6:
         75:8f:6c:2e:53:d5:57:f0:a3:68:5d:5b:95:a5:36:a6:a7:94:
         f6:a7:54:54:54:11:bc:d6:fe:c5:b9:8c:9a:ec:f0:7a:1d:7b:
         9e:14:17:15:65:4a:e6:97:54:22:28:8f:03:51:b0:32:0d:3a:
         51:60:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:16:03 2026 by rpki-client