This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File:                     I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier:          RqwvcfMDinLmTa1f6JhyLSYT+RaBWaoiSAa2ETln+7U=
Subject key identifier:   19:D1:25:87:52:C7:D3:C1:85:FE:E3:2C:BC:88:7B:3D:3E:6F:5D:52
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer:       /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial:       019C427D0FA7D310CB7D5B980E1FE4977BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number:          1556
Signing time:             Mon 09 Feb 2026 13:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:17 +0000
Files and hashes:         1: 9YF16HvuKYLcL13wHeATYsXN82s.roa (hash: x57QLMLkh1jP3PBY1PELztc5Sql/RrM2e/M9QhgtYsY=)
                          2: HRzfCSegq9wdLnlgNXAjmoIQn-M.roa (hash: 6cCwTMkaB6udqkfPRgNx/lO4jyDjV4y8nRfQDxyT4Sc=)
                          3: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: EWNMhilQv/VT+zuQsnRc7O8OqYdSOM0PRoHqTFihIEU=)
                          4: OEUQTsVKrLP-lQTQ6AZOPlYIssY.roa (hash: y4n6H8QWfTANHQ4V6doqPirRmfV8G8F5c8X9riuhcaE=)
                          5: Q11uKj3FZslGnPxLmnv1hIW3b48.roa (hash: czmZUe0UuJfveUL66FQWbR/8EoerZBPm+456KZ7ESgU=)
                          6: kprspPA2Qu5boxnWzJ_lU9Ab0AE.roa (hash: gEFYkhBGdlaWlWOzwy8lZShF5geJiJozavQlsbuA1Tk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:0f:a7:d3:10:cb:7d:5b:98:0e:1f:e4:97:7b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
        Validity
            Not Before: Feb  9 13:00:17 2026 GMT
            Not After : Feb 10 13:00:17 2026 GMT
        Subject: CN=19d1258752c7d3c185fee32cbc887b3d3e6f5d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:66:07:ce:e1:0e:1a:bf:04:63:f1:6b:74:
                    78:8b:3e:2f:a8:51:fc:25:79:1a:a5:23:5b:f0:ac:
                    fd:9a:0f:26:49:92:b2:34:a2:b8:74:04:a7:16:67:
                    5c:c8:72:5a:66:4e:d1:7a:6b:b5:3f:20:54:49:83:
                    91:73:da:18:1f:3c:a3:70:32:43:9a:90:c3:e1:4a:
                    e5:08:5f:39:b2:ab:78:b1:d5:b4:0a:4a:eb:76:1b:
                    91:f7:57:59:07:01:d4:e0:45:eb:5f:1c:5e:bb:fe:
                    ea:d2:b4:57:a7:b7:ca:8b:8c:21:b5:ff:c2:70:8e:
                    7a:b5:19:a9:03:2c:b8:6c:61:26:4d:ed:2e:f2:b3:
                    03:33:a1:ce:65:a3:f3:ad:16:64:09:02:e4:55:6b:
                    9b:2f:61:f9:9a:12:05:22:c0:18:03:ff:66:aa:35:
                    98:a2:fe:80:52:c5:11:24:bb:4d:ed:f4:1e:e1:41:
                    1a:fb:86:de:b1:93:ae:ad:47:aa:29:4d:01:09:b7:
                    88:ba:3c:ab:e2:ba:28:4f:30:29:1a:48:76:42:62:
                    5c:97:c9:cd:4a:c1:b4:70:0c:06:0b:9a:e6:b6:f4:
                    56:97:b4:72:c7:1e:4c:c2:a5:29:3a:36:dd:30:c7:
                    7b:96:40:66:09:74:04:e3:15:1c:dd:a2:58:68:bd:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D1:25:87:52:C7:D3:C1:85:FE:E3:2C:BC:88:7B:3D:3E:6F:5D:52
            X509v3 Authority Key Identifier:
                keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fb:80:4b:03:7e:98:5a:93:68:b2:e3:1b:d9:b2:d9:67:08:
         fd:36:05:4e:92:60:0d:06:ee:28:8b:6f:ce:65:10:09:f2:71:
         a7:09:a8:2d:b4:ad:55:f4:ed:60:de:c7:50:d2:25:c0:65:ce:
         06:3a:e3:4d:7b:c1:c4:50:9a:9b:d3:3b:08:9b:3f:3a:0b:d8:
         05:ce:5a:c9:51:11:11:36:49:48:49:7d:9f:c6:3f:33:9f:4d:
         99:55:e6:48:e1:c6:86:91:c8:c8:2e:85:a8:ce:bb:d7:4e:68:
         5d:13:2c:87:ac:d8:ab:a9:a4:ef:0b:76:8a:8b:69:65:7c:1b:
         5e:58:01:fe:c7:b9:e9:9d:cc:d9:f9:bf:25:14:08:f4:d6:e5:
         a0:3f:75:7f:44:8b:f2:48:32:0f:73:31:0d:e7:53:fd:46:09:
         68:c0:5e:05:12:57:4d:e9:73:e8:21:d0:d1:a9:4a:e6:d5:56:
         f1:65:01:e6:d5:d4:78:7a:69:50:3a:03:37:82:5c:63:3a:11:
         35:db:28:bc:fe:c0:d4:4e:25:1d:ae:0c:9c:cc:eb:09:37:49:
         af:a4:ca:72:c9:43:b0:c0:87:00:0d:92:1e:5c:be:f2:9f:59:
         83:20:a7:7b:f2:4b:c1:30:f1:6a:d9:f8:de:f8:d0:6d:dd:6d:
         32:63:40:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:42 2026 by rpki-client