This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File:                     ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier:          aujbM1Y5F8hOYecdza6ew+K+1AJcjSb+FxcSma1aPK4=
Subject key identifier:   12:AE:92:5F:A6:CC:D8:70:23:46:1D:1B:14:17:61:BC:D7:AA:93:31
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer:       /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial:       019C42102CDCB293CF1971E11A81205B9007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number:          0CA1
Signing time:             Mon 09 Feb 2026 11:01:21 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:21 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:21 +0000
Files and hashes:         1: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: FHDRo5wG8kXu087H8AuscrwsRC09d5ufq52YD2XXqpc=)
                          2: XCW-xDXsF601ESY9TZp_fyTaJnw.roa (hash: +6CKCfe4xEWnYwPUH24hrBZ1Be9NFYUB4pofzwVgM4w=)
                          3: kVKI5bXvJSn5tyQySVxPr0YVjUw.roa (hash: NTL21PZSBGTNm7kCXsDwO+4tuqr/3MrAs0BKFoz5+1A=)
                          4: ob2dIMvAFz_1e-ITC5drlgyANfc.roa (hash: RMa1vlPHRMLHICeoN1/l3m1EGmSAhaN4Z4MknyBTWZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:2c:dc:b2:93:cf:19:71:e1:1a:81:20:5b:90:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
        Validity
            Not Before: Feb  9 11:01:21 2026 GMT
            Not After : Feb 10 11:01:21 2026 GMT
        Subject: CN=12ae925fa6ccd87023461d1b141761bcd7aa9331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:ab:06:0a:dc:87:75:ac:59:21:9a:44:0c:
                    28:3e:95:53:34:1b:39:da:30:6e:35:f0:2c:f8:18:
                    26:19:0f:fc:eb:a2:54:40:cf:ca:f4:ab:98:a3:bf:
                    2f:59:51:17:3d:9d:43:59:4f:d8:0f:a0:68:3c:3a:
                    be:5b:d8:fe:e0:1d:c7:f0:2e:e2:f8:e6:ad:cd:bd:
                    4a:61:16:45:02:b4:84:ad:80:0d:63:6a:11:32:5c:
                    30:d7:9b:8c:f3:31:23:bb:11:26:45:04:ab:d0:8f:
                    12:67:1c:52:ee:04:00:b3:41:dd:af:24:d9:03:79:
                    a9:1e:83:88:e4:a2:a7:5a:04:95:37:74:f2:c0:ac:
                    38:c4:5c:68:be:29:db:de:ad:38:67:fe:58:61:a3:
                    79:da:13:5b:c6:1e:38:1a:85:1b:e9:fb:03:ad:37:
                    6e:59:bb:0e:1d:bc:71:6f:d5:77:5a:7d:70:16:aa:
                    c3:fd:0f:a3:d3:00:1b:8f:55:74:1f:7a:47:9a:b7:
                    27:1b:d4:f6:bd:e9:3d:02:5c:a0:c3:ef:b2:c4:19:
                    4e:95:c5:be:5a:b4:a2:be:4e:7d:9e:99:62:64:a3:
                    d2:c0:f5:c2:aa:b9:d0:1d:ea:01:19:b1:1b:ea:02:
                    bf:66:23:ce:63:48:57:7a:3e:87:28:3a:03:86:07:
                    fe:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AE:92:5F:A6:CC:D8:70:23:46:1D:1B:14:17:61:BC:D7:AA:93:31
            X509v3 Authority Key Identifier:
                keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ec:9f:d5:9c:37:0f:0d:7a:70:cc:ac:22:64:8a:1a:e4:98:
         55:86:69:53:c3:a2:1e:17:25:fe:3a:f3:bf:08:7c:75:f8:af:
         53:29:6b:b1:19:8b:d3:bb:a5:c7:8b:3e:18:c3:96:94:5e:4d:
         e6:a3:12:73:ca:6c:16:84:b3:c6:de:09:1e:b0:00:79:7a:c6:
         65:81:59:a2:b9:2a:7a:81:2f:19:22:1b:dc:57:a5:1d:87:50:
         47:56:5e:0f:2f:7a:f2:c1:0c:bc:f7:2e:ac:17:53:48:f2:c9:
         b3:42:4f:f1:97:92:f8:0e:53:59:bd:8c:dc:bc:36:d3:42:96:
         0e:c6:79:c6:ff:17:8f:c3:ba:3e:e0:8a:0b:00:6c:72:5b:4e:
         66:65:3d:ea:f0:e4:33:15:dd:41:b1:f9:70:74:d0:0a:d6:4f:
         28:54:44:2e:01:fb:3a:1e:5d:cd:87:ce:47:a8:8a:c7:bd:8d:
         d8:6b:b0:d1:25:fa:b5:0b:d0:19:58:39:2a:75:ce:c9:85:71:
         05:59:40:27:e4:d0:1c:50:90:a2:b4:be:47:40:51:23:8e:8e:
         5a:ab:fb:f0:f3:7f:6a:e6:00:22:73:53:ff:6f:bc:53:fe:13:
         59:cd:d8:00:53:d7:b2:60:6c:42:ce:79:6f:d3:a1:66:b2:cd:
         df:8a:78:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCECzcspPPGXHhGoEgW5AHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjUxMDBlNzk4ZmFiNzU3N2JmNzI1YWM5NTY5ZWE4MGU2
YzJhMDQwHhcNMjYwMjA5MTEwMTIxWhcNMjYwMjEwMTEwMTIxWjAzMTEwLwYDVQQD
EygxMmFlOTI1ZmE2Y2NkODcwMjM0NjFkMWIxNDE3NjFiY2Q3YWE5MzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFKrBgrch3WsWSGaRAwoPpVTNBs5
2jBuNfAs+BgmGQ/866JUQM/K9KuYo78vWVEXPZ1DWU/YD6BoPDq+W9j+4B3H8C7i
+Oatzb1KYRZFArSErYANY2oRMlww15uM8zEjuxEmRQSr0I8SZxxS7gQAs0HdryTZ
A3mpHoOI5KKnWgSVN3TywKw4xFxovinb3q04Z/5YYaN52hNbxh44GoUb6fsDrTdu
WbsOHbxxb9V3Wn1wFqrD/Q+j0wAbj1V0H3pHmrcnG9T2vek9Alygw++yxBlOlcW+
WrSivk59npliZKPSwPXCqrnQHeoBGbEb6gK/ZiPOY0hXej6HKDoDhgf+xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKukl+mzNhwI0YdGxQXYbzXqpMxMB8GA1UdIwQY
MBaAFCC1EA55j6t1d79yWslWnqgObCoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQt
ODAzNzk2NTY5M2EyLzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQtODAzNzk2NTY5M2Ey
LzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuyf1Zw3
Dw16cMysImSKGuSYVYZpU8OiHhcl/jrzvwh8dfivUylrsRmL07ulx4s+GMOWlF5N
5qMSc8psFoSzxt4JHrAAeXrGZYFZorkqeoEvGSIb3FelHYdQR1ZeDy968sEMvPcu
rBdTSPLJs0JP8ZeS+A5TWb2M3Lw200KWDsZ5xv8Xj8O6PuCKCwBscltOZmU96vDk
MxXdQbH5cHTQCtZPKFRELgH7Oh5dzYfOR6iKx72N2Guw0SX6tQvQGVg5KnXOyYVx
BVlAJ+TQHFCQorS+R0BRI46OWqv78PN/auYAInNT/2+8U/4TWc3YAFPXsmBsQs55
b9OhZrLN34p4cQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:15 2026 by rpki-client