This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
File:                     ILSHOEKpBPGmlyATk-e6YmhC9K8.mft (raw, json)
Hash identifier:          ZiQDiKTjof3++gNIRJuqvDjafcG9a7J1lAeaAyt6dcE=
Subject key identifier:   F6:62:F5:0A:52:AF:7B:C9:2A:44:48:6D:2B:0B:58:C6:B7:BD:04:00
Authority key identifier: 20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
Certificate issuer:       /CN=20b4873842a904f1a697201393e7ba626842f4af
Certificate serial:       019C42462484E8F0A2C48486B4501BE38A64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
Manifest number:          032E
Signing time:             Mon 09 Feb 2026 12:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:18 +0000
Files and hashes:         1: HF5zqPXN9kt9inQteOZzFMTE7II.roa (hash: R1fiWZdr3X5ktKLZaP8dhQLpBM9tv/J5IHD5dAofhUY=)
                          2: ILSHOEKpBPGmlyATk-e6YmhC9K8.crl (hash: rSfO1lBpI6Rn6QanGHxqwwq3b1m+gG4zUyM0FxcQLwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:24:84:e8:f0:a2:c4:84:86:b4:50:1b:e3:8a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20b4873842a904f1a697201393e7ba626842f4af
        Validity
            Not Before: Feb  9 12:00:18 2026 GMT
            Not After : Feb 10 12:00:18 2026 GMT
        Subject: CN=f662f50a52af7bc92a44486d2b0b58c6b7bd0400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:8c:18:52:26:09:93:19:ca:cc:e5:b1:4a:
                    7b:6d:36:1c:ea:3b:84:69:fe:d8:e6:6d:6f:9d:51:
                    d4:06:86:03:67:9f:42:48:1a:9a:94:ad:a8:e3:f7:
                    26:44:33:48:ac:13:03:43:fc:e2:c0:6f:ba:f8:86:
                    7b:77:df:42:ad:e9:a6:f5:5c:19:de:a6:90:3c:39:
                    0e:63:78:0e:77:1f:f6:8e:35:bd:36:a0:ba:80:a5:
                    fb:c6:c0:72:f7:f4:bb:3a:c2:0b:97:a5:cf:55:df:
                    d2:50:b6:23:38:fd:ca:04:27:97:7d:2e:70:b6:50:
                    d1:11:c5:b3:91:e0:a7:bb:4d:d1:db:31:6d:52:cc:
                    5e:78:6d:8a:46:a0:da:66:fc:4e:74:91:5b:41:39:
                    17:34:f3:ac:55:ee:40:08:63:bb:7d:a5:a1:1b:5e:
                    7e:b2:31:35:00:00:0f:c3:c3:24:6a:df:29:19:f3:
                    5b:5a:88:5d:39:4f:e6:f7:30:8c:7c:84:d8:6f:ba:
                    b3:b7:3d:ec:27:be:e1:c7:09:83:d0:a8:fd:41:5c:
                    13:ce:84:3b:1b:32:5b:90:93:d7:af:53:28:90:85:
                    32:67:e8:52:22:03:4f:e4:ed:4d:01:93:6f:d9:21:
                    f1:c5:fd:62:bd:ac:8b:f5:0d:d5:01:53:e8:fb:64:
                    e2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:62:F5:0A:52:AF:7B:C9:2A:44:48:6D:2B:0B:58:C6:B7:BD:04:00
            X509v3 Authority Key Identifier:
                keyid:20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d4:38:ca:71:79:6f:32:5e:5d:d4:37:5e:c8:22:46:65:9e:
         cb:4b:73:8e:ee:82:4d:02:f8:bd:13:b7:f1:d1:0c:a8:71:00:
         96:18:2a:41:73:eb:34:d4:4d:8d:5a:35:d0:23:12:db:5d:84:
         d2:60:79:9e:ea:78:82:bc:c3:bc:2c:03:9c:db:9d:4a:dd:3f:
         60:20:1b:16:17:8a:66:9f:66:82:6d:87:ad:3c:11:28:3f:ce:
         90:c9:e9:25:ca:d7:52:63:1a:b0:8f:d4:63:bd:b1:9c:3b:28:
         d7:35:12:33:4f:2a:f0:41:40:34:42:c0:c3:51:ce:b4:8c:f5:
         86:fa:12:4b:1b:23:63:37:af:ca:a1:36:a8:f2:09:2e:67:04:
         10:77:31:7b:da:52:26:e5:5e:d3:ce:0c:31:b2:28:c9:3f:67:
         60:7d:38:0b:43:2d:02:82:97:26:85:a0:d1:26:55:c7:11:bf:
         f4:72:32:04:db:97:1b:04:df:ec:41:40:94:4a:c7:36:3d:58:
         b7:b6:2a:f0:bc:de:7f:0e:81:00:73:9c:d9:0e:56:eb:1e:8e:
         96:19:6e:0c:2d:48:28:70:59:8b:24:f2:c7:14:9f:97:6e:53:
         fd:01:47:5b:54:43:4e:67:db:7b:d7:62:51:ca:4c:4e:bd:80:
         9d:d7:f4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:17 2026 by rpki-client