This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File:                     iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier:          0hV0MtAFjwyc3MqNdQVqUoCo34LQHjrAa5gqjPiT7xc=
Subject key identifier:   AA:33:DC:47:67:55:51:65:88:56:F7:79:47:89:11:8B:A0:08:6E:85
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer:       /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial:       019C4322EF966281CB96BF6931B78FDABC25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number:          0C1E
Signing time:             Mon 09 Feb 2026 16:01:28 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:28 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:28 +0000
Files and hashes:         1: N08gX0rBlpOIRQrDxiJzV-0xqPE.roa (hash: a6M35q6nyj43xguydpClcKSfRGhKfnGhjLVr56fUpSE=)
                          2: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: Zwq/zyoKs3ApSdzz3fRA1xOFm+KVpklWl9APNWeld7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:ef:96:62:81:cb:96:bf:69:31:b7:8f:da:bc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
        Validity
            Not Before: Feb  9 16:01:28 2026 GMT
            Not After : Feb 10 16:01:28 2026 GMT
        Subject: CN=aa33dc47675551658856f7794789118ba0086e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:71:18:2c:dc:e9:86:37:93:a6:34:f8:89:30:
                    5e:99:ec:06:50:52:68:79:80:6a:4e:9a:e8:14:ed:
                    29:46:99:93:24:c9:08:21:98:42:fc:20:d8:b7:ff:
                    16:87:2e:d1:ad:ed:37:22:2c:e4:6c:b2:de:5b:48:
                    e5:90:f3:04:ae:5e:c6:ec:2c:06:a6:2e:a6:13:f1:
                    c1:f3:c6:03:3d:84:64:ab:af:4f:4d:8b:b5:7f:d7:
                    ea:1d:c4:be:ca:27:b5:32:7e:02:16:c0:d6:92:79:
                    2a:7e:5e:6c:10:1a:d4:cb:bf:05:6c:3b:65:2b:74:
                    ce:90:b1:8f:c7:9c:f6:f0:05:d5:ab:e1:a5:71:f7:
                    2f:51:6a:e0:ae:f6:0f:19:47:92:df:d4:69:24:30:
                    db:9a:29:88:65:65:90:27:4b:ce:1f:86:5c:dc:e0:
                    e9:51:09:1f:03:d2:72:be:9b:75:6f:1f:a4:d0:2b:
                    0b:4e:9e:54:f6:85:ac:05:c6:49:26:44:f9:4c:08:
                    00:3c:dc:4a:a7:6e:d1:f0:09:41:e8:1e:99:81:75:
                    b8:24:ce:04:98:41:87:f8:0f:fa:7b:86:3e:20:4f:
                    68:a8:4e:4d:23:24:11:22:d2:59:41:36:66:02:fa:
                    63:96:1c:bb:55:9c:31:c1:10:eb:79:8c:3e:ad:a1:
                    2e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:33:DC:47:67:55:51:65:88:56:F7:79:47:89:11:8B:A0:08:6E:85
            X509v3 Authority Key Identifier:
                keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5c:e1:9f:18:c7:83:f7:6e:23:58:db:03:d1:de:5c:92:ec:
         b0:7f:47:fa:7c:4f:b0:4c:31:77:14:dd:90:2d:0e:02:23:ac:
         3e:c6:df:5b:71:f9:3a:04:8d:a1:1f:24:00:b5:1c:43:75:6f:
         6d:7d:28:db:59:32:fd:c0:c2:f1:66:a0:06:d3:22:a2:e5:27:
         a1:c3:fb:02:55:df:14:c8:9c:d2:c8:5f:0e:7a:f4:3c:33:69:
         7a:44:de:51:8d:78:37:09:84:f8:90:0b:cf:5a:6f:f6:4b:21:
         4c:0d:76:f9:3b:d7:3e:d2:37:bc:21:9d:bb:90:3a:51:8f:8a:
         57:05:e5:16:9c:4f:ab:27:08:31:d9:e2:54:b7:85:3f:db:b7:
         e7:69:3c:8d:33:0c:70:05:d4:45:ca:d6:9a:16:05:f7:83:70:
         39:83:13:e6:af:fc:6f:e9:51:7d:fe:c8:7e:d9:f5:b8:07:f2:
         cb:9a:ca:b6:1e:31:8b:40:6f:9a:a1:27:cb:d2:17:77:f9:bf:
         76:a8:96:26:3e:fb:b0:e9:c0:1c:5c:1b:ae:67:be:2c:a4:16:
         ca:68:5f:90:c3:71:d2:65:58:05:2b:d5:10:eb:3a:1f:da:2c:
         43:92:90:6b:79:65:81:d7:56:2a:1d:be:af:18:c9:99:6a:8d:
         0d:92:df:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:04 2026 by rpki-client