This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
File:                     iToqQBmigXfN-AZZnxq11R0XuNw.mft (raw, json)
Hash identifier:          1svlTw5TqCGkNFT2fy9tuUqM8ty6HgT6yPMxqbW3pk0=
Subject key identifier:   C0:12:52:3F:C5:7C:C6:87:31:A9:49:54:34:13:CF:89:78:95:C5:68
Authority key identifier: 89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
Certificate issuer:       /CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Certificate serial:       019C43FDB276B33833F02DE7B1FF38F1ECF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 20:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:25 +0000
Files and hashes:         1: XfmMZ0oDUAwJDxSQEiuis-Gr-vc.roa (hash: kULJfAR/H2C5tYjK8edBq2EIZUqAdDfvi749QUzxPA8=)
                          2: iToqQBmigXfN-AZZnxq11R0XuNw.crl (hash: 86Z4SlrKCDqFK1fdcQ1ab82hHpEsjO4ZATr+GiKcFHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:b2:76:b3:38:33:f0:2d:e7:b1:ff:38:f1:ec:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
        Validity
            Not Before: Feb  9 20:00:25 2026 GMT
            Not After : Feb 10 20:00:25 2026 GMT
        Subject: CN=c012523fc57cc68731a949543413cf897895c568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a7:78:53:6d:c2:51:b2:ec:c4:c0:28:0a:0e:
                    78:5e:d8:65:fd:7f:34:83:c5:e6:58:e5:54:e0:d3:
                    e4:37:f5:93:44:6d:94:85:7f:a1:2d:77:59:24:0a:
                    b0:5d:8b:4e:53:a3:48:1a:a7:88:c6:dc:c4:5c:26:
                    2c:56:dc:b9:1b:f9:d1:c3:01:b9:c6:d0:5f:3f:a6:
                    3b:a9:26:65:7c:d4:74:e7:1d:29:ff:18:ab:e6:c9:
                    20:e8:9f:7c:97:0a:2d:d9:54:c8:9e:86:c2:98:92:
                    4b:2d:2f:08:a2:f3:07:86:47:ac:f4:8d:46:7f:20:
                    32:4f:75:0a:7f:04:b9:f5:16:90:52:7b:3d:4e:83:
                    c2:7f:17:d8:fc:fd:25:9b:43:d4:bd:0f:71:d6:ea:
                    fb:29:70:b0:d3:22:4f:8b:ce:ea:f4:44:e0:58:8f:
                    9f:f0:43:0a:34:6f:e4:08:f2:75:a0:d1:1a:64:ca:
                    ab:f0:cc:2a:99:89:3c:21:4c:f3:91:df:0e:f5:bc:
                    e1:0e:6d:ca:fc:a4:86:8e:87:9b:6b:b2:22:6a:40:
                    15:aa:25:b4:2a:d9:51:1a:9a:70:31:cb:be:7a:d8:
                    86:df:b9:00:b1:bf:8e:51:3c:c4:fd:2f:fa:b3:69:
                    78:09:4c:8e:f9:0d:9c:00:a0:06:d1:2c:38:68:b5:
                    e4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:12:52:3F:C5:7C:C6:87:31:A9:49:54:34:13:CF:89:78:95:C5:68
            X509v3 Authority Key Identifier:
                keyid:89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:bb:16:fb:13:fe:fe:cb:7e:79:6b:e0:b6:1d:1e:92:46:58:
         5c:74:27:4d:f9:8a:14:37:e7:5f:e0:3e:b9:9b:ab:db:34:67:
         8e:18:30:33:a9:7a:96:d4:05:7b:af:b3:21:5e:83:a6:69:11:
         91:d1:bd:ce:cd:21:64:aa:b3:0d:5b:cf:3b:9e:d8:50:e8:42:
         9a:72:9c:ec:cd:fa:e5:c9:1f:d9:5f:97:5c:9e:3e:57:65:d9:
         f5:6f:7c:04:f7:a6:d2:e9:35:5b:d9:c5:75:1c:4d:3a:46:06:
         e4:99:eb:79:47:cc:ba:d8:b0:00:2e:2d:44:d9:3c:5b:6d:09:
         74:ce:39:46:1a:27:58:9b:53:f3:c9:db:fd:87:34:e5:33:68:
         ea:d5:c9:dc:45:bd:49:14:4e:94:f0:00:94:00:a5:c5:e5:60:
         fa:a4:7b:f8:e8:79:e3:2b:81:ef:e5:1a:d2:92:1f:3a:ae:36:
         7c:fa:52:08:6d:38:19:99:88:7e:59:63:d7:94:a4:af:df:5b:
         56:8d:b3:11:2e:35:0b:5a:0e:d1:8a:32:77:90:6c:6c:95:c2:
         35:b9:fb:93:4c:dc:71:ac:81:72:34:51:4f:ed:1d:2b:75:f0:
         c9:d2:c4:97:aa:45:7c:dd:e5:1f:81:91:6f:47:ff:98:f0:23:
         cc:a7:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:26 2026 by rpki-client