This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File:                     IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier:          g1JADoRf37Q4TwFaK4rVxatd3MBRnfug13NZEnN3A94=
Subject key identifier:   8C:B6:89:2F:5A:0E:37:18:DE:9B:76:F7:B1:DE:2F:46:F1:04:19:C1
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer:       /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial:       019C20964B030754C3E8754D43A87CB659EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number:          1791
Signing time:             Mon 02 Feb 2026 23:00:46 +0000
Manifest this update:     Mon 02 Feb 2026 23:00:46 +0000
Manifest next update:     Tue 03 Feb 2026 23:00:46 +0000
Files and hashes:         1: I9_8ex5RLgU9zB0YLgF9xqOG47g.roa (hash: dmFylddSKzwNHu+y0Wqd1+q/KRNXfD2djp0HKezq3HE=)
                          2: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: stVZpnnDF6G2SOXaGaRfG+Yknd/B17DQZxczC6NdayQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 15:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:20:96:4b:03:07:54:c3:e8:75:4d:43:a8:7c:b6:59:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
        Validity
            Not Before: Feb  2 23:00:46 2026 GMT
            Not After : Feb  3 23:00:46 2026 GMT
        Subject: CN=8cb6892f5a0e3718de9b76f7b1de2f46f10419c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:cc:d1:76:2c:4c:4a:ae:37:93:de:08:27:
                    20:0e:d4:1d:eb:d0:be:66:2c:2c:05:f5:f0:ad:03:
                    1b:15:fc:75:6f:92:dc:45:f0:37:c4:1f:a8:aa:b6:
                    cf:a2:0b:9a:1f:51:b1:20:a6:87:34:e6:67:67:db:
                    4d:32:78:1d:cd:63:ed:ac:e0:83:e6:6c:67:8b:d5:
                    16:ef:47:4f:66:d7:ad:0e:29:f0:4e:2e:7c:66:d0:
                    b5:d1:0a:95:bb:82:e7:34:f7:61:03:bc:40:4b:80:
                    3c:ee:4d:0e:1a:bc:d7:4b:38:2e:f1:ae:79:38:a1:
                    3d:b4:53:bc:7a:d3:55:42:8e:97:b2:dd:e0:11:61:
                    97:87:14:4c:03:d9:72:44:5c:61:bd:ff:10:58:9c:
                    9d:55:b5:09:a5:de:53:a9:13:db:d4:3b:a9:e1:3d:
                    13:42:ff:7f:19:36:d7:43:3f:bf:49:6b:a7:15:a9:
                    23:6c:57:14:8b:fe:92:36:fd:33:0e:dc:04:b2:f8:
                    43:96:cb:e7:a3:c4:2b:ad:40:c1:51:f4:97:f1:26:
                    33:03:15:69:cf:0f:0b:b4:da:f1:a0:54:60:e3:73:
                    c8:87:31:65:56:4a:51:5b:d9:60:74:27:5a:17:1d:
                    90:d7:61:07:e2:2c:d6:e7:2e:01:aa:97:b4:2d:d0:
                    97:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B6:89:2F:5A:0E:37:18:DE:9B:76:F7:B1:DE:2F:46:F1:04:19:C1
            X509v3 Authority Key Identifier:
                keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e9:6e:23:4b:c3:8e:5d:72:5b:1c:79:1c:11:ec:89:1a:34:
         97:80:3a:c5:01:66:de:51:e6:a7:b8:fb:e4:8a:a8:78:cc:4b:
         4f:54:0b:57:03:23:d6:76:b6:c7:ff:b5:6b:70:12:5e:51:70:
         cb:c4:18:2a:7f:62:df:66:8b:db:5e:0f:08:43:0e:c6:a9:2c:
         2f:a9:86:85:1b:30:9e:77:bf:a9:a8:32:ae:74:cb:cc:82:7b:
         ce:b3:d9:49:1e:e0:43:05:f5:60:8c:0f:ef:d9:f8:07:99:79:
         b2:6d:e6:53:f0:d1:e9:35:6e:0c:09:bb:c2:52:f3:08:34:f9:
         67:f8:06:a2:8a:ce:6f:40:99:0c:a3:bb:25:ea:7e:aa:37:4b:
         e1:d0:23:a7:19:01:2a:8d:44:f9:80:ae:9a:9d:ef:8b:14:f5:
         f9:ce:db:33:86:38:fe:60:c0:4b:1b:e5:da:b7:4b:15:8d:23:
         aa:29:6a:5e:00:6d:aa:87:5f:ab:db:99:29:32:1d:66:83:66:
         86:38:3c:8b:91:a3:c5:e8:ce:c9:6a:cb:71:dc:36:bb:44:f6:
         17:1f:2d:35:2f:25:6e:36:f0:5b:8e:2c:37:53:40:0f:c8:bd:
         4e:33:87:5e:6c:f3:4f:5d:6d:a5:c3:42:4a:c8:2b:93:45:69:
         48:64:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 01:55:04 2026 by rpki-client