This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
File:                     iJiSZOUPOa6IiuMnYQm7qALkWAE.mft (raw, json)
Hash identifier:          ci+1AItLmK9Xo1/n4bMwYcBu2tbAQT131U16ZZb8jmY=
Subject key identifier:   83:E7:93:C4:7F:D0:AB:55:3D:D4:22:33:17:91:14:2C:3F:E4:0C:05
Authority key identifier: 88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
Certificate issuer:       /CN=88989264e50f39ae888ae3276109bba802e45801
Certificate serial:       019C424687D2A9341214E2BC8CA68F332BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
Manifest number:          04A7
Signing time:             Mon 09 Feb 2026 12:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:44 +0000
Files and hashes:         1: AQr0Xr5i3xBK0VnBVEVqjXo_PEE.roa (hash: Q7J5BCM0jvKNyBjP+FioWdAANoRPVT9LyCNXJ4wWorw=)
                          2: iJiSZOUPOa6IiuMnYQm7qALkWAE.crl (hash: DOCPtmAHqC1xdGsxFzukR4UHTzc4nwMxnLaJWOB38Mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:87:d2:a9:34:12:14:e2:bc:8c:a6:8f:33:2b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88989264e50f39ae888ae3276109bba802e45801
        Validity
            Not Before: Feb  9 12:00:44 2026 GMT
            Not After : Feb 10 12:00:44 2026 GMT
        Subject: CN=83e793c47fd0ab553dd422331791142c3fe40c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:c7:46:e7:1d:1f:02:8e:45:61:1b:4a:0a:
                    e3:f5:0a:55:cd:de:01:52:b0:31:07:4d:ae:10:78:
                    5c:f0:86:b7:9b:52:f5:e0:44:12:73:6a:cc:d9:1e:
                    0c:bb:4c:a3:45:9b:ea:f4:43:36:01:86:8f:5d:27:
                    bb:ba:f6:68:db:e6:6f:35:e5:1b:29:91:ae:60:9a:
                    c2:c9:31:63:67:82:54:db:da:25:c0:04:9f:f4:72:
                    5a:c9:b8:65:fe:b7:eb:14:06:fb:d3:49:20:17:4e:
                    84:43:15:6c:8b:a3:da:de:40:ad:89:16:89:6d:7e:
                    b5:19:07:c1:d2:76:ec:55:d2:b7:eb:90:df:5f:05:
                    8d:b5:f9:d6:de:00:ac:49:71:e1:30:b3:a6:84:10:
                    72:8a:c1:b6:f8:54:f4:34:de:12:a0:5c:4e:06:ca:
                    9c:08:77:e8:63:dc:d5:ea:f7:21:a4:b3:f9:58:cd:
                    71:37:7e:62:b2:a2:07:af:87:8d:e2:f9:60:04:23:
                    c4:3b:0b:e4:5b:e4:f1:6d:ee:23:7c:22:3a:2c:8a:
                    24:aa:39:8a:e0:c9:04:f2:60:98:a2:aa:b6:7c:20:
                    48:b1:a5:e2:fb:f3:a4:79:11:1b:8f:34:cb:47:26:
                    14:63:41:6b:51:9b:ef:5c:da:23:05:ad:3a:4a:c9:
                    09:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E7:93:C4:7F:D0:AB:55:3D:D4:22:33:17:91:14:2C:3F:E4:0C:05
            X509v3 Authority Key Identifier:
                keyid:88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c7:a6:12:e0:1d:92:48:0c:35:c2:cb:9b:31:8f:bc:aa:9c:
         34:e6:37:dc:b3:5c:3c:87:96:0c:77:de:23:12:77:a1:a2:98:
         8d:94:17:96:6b:14:3e:5e:7b:a2:96:7d:7f:1c:93:50:26:5f:
         7a:34:09:2a:cf:10:0e:f3:95:06:ea:d8:e0:5c:2a:4b:b3:cc:
         10:51:05:db:32:d5:72:04:24:97:b5:06:a9:41:98:91:86:fb:
         44:e5:14:6b:2b:02:6c:e2:ae:82:de:47:f6:01:1d:bb:5a:18:
         85:44:ce:27:50:b3:74:7a:fc:62:f1:5c:15:6b:7e:4c:65:73:
         80:b9:9b:c6:0b:ae:98:89:08:7e:59:5d:6d:45:c2:2c:56:5b:
         55:1e:9f:89:a8:da:3f:c1:ff:66:93:75:a7:48:48:1e:bf:0e:
         de:d1:d5:15:67:c7:4b:02:21:4a:04:f1:8a:ec:ea:29:70:07:
         bd:7d:93:a7:55:74:d9:09:24:f4:e0:b9:63:c3:9e:2f:e3:d4:
         13:b9:22:e5:6b:a6:3d:de:ad:2c:0b:9a:88:c1:60:51:0c:ec:
         4b:d6:40:1d:b3:8a:7d:f2:f5:e5:93:aa:33:0a:6c:2f:1d:32:
         1b:e7:c3:c1:46:34:83:13:1b:74:70:d8:ae:8a:56:5b:21:b6:
         11:98:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:21 2026 by rpki-client